Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
File: jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft (raw, json)
Hash identifier: efeGk9Rz8/f5vtBli1EITQxel022ZwfC2eDvGIkn7Ds=
Subject key identifier: 0E:41:89:9C:1A:0F:3C:FD:D4:15:C3:EF:F3:83:F9:4B:2E:E5:71:16
Authority key identifier: 8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
Certificate issuer: /CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Certificate serial: 019D2771CB688E4CF9E079CF5E088B97BF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
Manifest number: 04FE
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: 6fbN8X-Zd_3bLagCKNLcI6U0ZQ8.roa (hash: 9tQRoU2KNqyt5jisalOBz3HOC+o/8ZxBiQNdSn21t9k=)
2: jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl (hash: 8PUwrGTfvI3CUevYZHxRRq3bKS+tgQqN9cowpkBJP+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cb:68:8e:4c:f9:e0:79:cf:5e:08:8b:97:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec3bb12f5f62a1088b07a9816c46306d1161e1d
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=0e41899c1a0f3cfdd415c3eff383f94b2ee57116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:a8:44:98:80:0d:42:f3:9d:ee:00:27:0a:
48:97:0f:7f:80:10:e0:b6:15:31:85:05:2c:fc:9f:
a8:90:b9:a6:68:4f:d8:dd:d5:96:fc:a9:d7:89:a7:
2e:d1:a5:e3:7a:80:02:b9:00:bb:6d:cc:a2:2c:0c:
9d:d2:81:dc:ab:31:11:9c:b8:89:d5:20:4c:34:bf:
e5:82:e4:42:ee:6b:e7:3d:e5:ae:1d:6b:c9:4c:ea:
ee:74:40:84:ec:ec:39:7c:0b:3a:e1:a2:bc:d9:1e:
bd:35:c8:47:e1:25:12:89:b1:9a:d2:45:51:71:58:
a9:29:23:d3:7b:08:6a:01:72:dd:f3:4b:1f:76:71:
a7:01:7c:0a:23:b5:26:d6:af:c0:65:31:ef:33:c2:
01:8c:75:05:37:52:fd:ad:c5:d3:03:fd:ca:8c:14:
32:d7:0d:aa:e9:2b:40:86:bc:15:a4:89:ad:48:ff:
cc:d6:14:21:b3:47:9f:3c:10:5a:9e:87:f8:05:22:
af:33:af:97:cd:cb:c6:a8:13:56:2e:96:09:e9:f8:
aa:62:b7:b7:ed:da:8e:53:1b:31:89:70:b8:c3:bc:
f8:c7:43:31:eb:2a:ed:70:98:57:3c:0d:80:89:02:
97:cc:2a:74:e7:21:ee:44:fc:d7:be:93:ed:0a:c6:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:89:9C:1A:0F:3C:FD:D4:15:C3:EF:F3:83:F9:4B:2E:E5:71:16
X509v3 Authority Key Identifier:
keyid:8E:C3:BB:12:F5:F6:2A:10:88:B0:7A:98:16:C4:63:06:D1:16:1E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsO7EvX2KhCIsHqYFsRjBtEWHh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/c0e4d6-e7dc-41b4-b563-bbc76129c89b/1/jsO7EvX2KhCIsHqYFsRjBtEWHh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:aa:37:4f:44:99:e8:21:8f:58:a1:67:aa:c3:d3:22:fa:
45:2b:3a:de:3c:b7:a1:d9:7f:76:ba:c9:d8:c6:97:f1:f4:f0:
a3:c5:48:28:7f:66:91:72:fd:1c:12:f0:b2:6c:6e:ed:83:aa:
eb:ee:e6:11:07:a0:aa:91:da:f3:f0:3e:80:29:1d:56:e9:31:
c8:b4:f9:56:2c:18:03:56:d8:07:69:96:0d:28:35:5e:73:77:
4f:0d:9f:16:66:8b:33:b1:bf:0f:1d:07:76:9b:c7:ed:a6:e5:
71:90:89:e8:ca:b2:8c:50:5d:4c:b0:3f:60:05:cf:7e:45:f2:
f0:c9:7c:e6:bb:26:32:66:25:a0:67:14:b2:64:35:f6:e0:84:
7a:d2:2a:26:69:12:14:a0:8a:ab:d6:63:9b:35:29:b2:0d:51:
30:62:42:78:9a:1b:7d:d2:47:af:00:96:a0:bf:f5:ec:61:15:
b6:75:7b:3b:12:f0:53:60:d5:05:72:a2:cd:a7:94:a7:05:06:
11:8c:fb:af:ef:fb:e6:ce:65:f6:fd:34:31:c3:b9:84:5d:de:
14:ae:91:29:a6:a8:a1:4d:c2:9f:98:5e:c2:4b:f3:63:d8:94:
39:0e:02:6b:34:e6:f2:9e:12:25:0e:11:e8:75:bd:8c:5d:09:
15:fc:b1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncctojkz54HnPXgiLl7+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzNiYjEyZjVmNjJhMTA4OGIwN2E5ODE2YzQ2MzA2ZDEx
NjFlMWQwHhcNMjYwMzI2MDAwMTAyWhcNMjYwMzI3MDAwMTAyWjAzMTEwLwYDVQQD
EygwZTQxODk5YzFhMGYzY2ZkZDQxNWMzZWZmMzgzZjk0YjJlZTU3MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt26oRJiADULzne4AJwpIlw9/gBDg
thUxhQUs/J+okLmmaE/Y3dWW/KnXiacu0aXjeoACuQC7bcyiLAyd0oHcqzERnLiJ
1SBMNL/lguRC7mvnPeWuHWvJTOrudECE7Ow5fAs64aK82R69NchH4SUSibGa0kVR
cVipKSPTewhqAXLd80sfdnGnAXwKI7Um1q/AZTHvM8IBjHUFN1L9rcXTA/3KjBQy
1w2q6StAhrwVpImtSP/M1hQhs0efPBBanof4BSKvM6+XzcvGqBNWLpYJ6fiqYre3
7dqOUxsxiXC4w7z4x0Mx6yrtcJhXPA2AiQKXzCp05yHuRPzXvpPtCsbrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5BiZwaDzz91BXD7/OD+Usu5XEWMB8GA1UdIwQY
MBaAFI7DuxL19ioQiLB6mBbEYwbRFh4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMt
YmJjNzYxMjljODliLzEvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jMGU0ZDYtZTdkYy00MWI0LWI1NjMtYmJjNzYxMjljODli
LzEvanNPN0V2WDJLaENJc0hxWUZzUmpCdEVXSGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT+qN09E
meghj1ihZ6rD0yL6RSs63jy3odl/drrJ2MaX8fTwo8VIKH9mkXL9HBLwsmxu7YOq
6+7mEQegqpHa8/A+gCkdVukxyLT5ViwYA1bYB2mWDSg1XnN3Tw2fFmaLM7G/Dx0H
dpvH7ablcZCJ6MqyjFBdTLA/YAXPfkXy8Ml85rsmMmYloGcUsmQ19uCEetIqJmkS
FKCKq9ZjmzUpsg1RMGJCeJobfdJHrwCWoL/17GEVtnV7OxLwU2DVBXKizaeUpwUG
EYz7r+/75s5l9v00McO5hF3eFK6RKaaooU3Cn5hewkvzY9iUOQ4CazTm8p4SJQ4R
6HW9jF0JFfyxnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:22 2026 by rpki-client