Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: l1WpRVMUTFTDu6LOtUbjpmitCffKOP7pOaIFGcXoLNU=
Subject key identifier: 1D:05:76:FC:76:00:53:E1:DE:33:02:59:3C:4C:E3:BD:EE:75:3E:36
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 019D29973EF7D4904421ACC87E5DC15290C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa (hash: YC+Err1nsYN5JZkJiiNrSk4ckkPdFmlbNmlV49Qluo4=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: zelKWjrLIGsLRoLNVKXucjCAS7ksKo49mJlKULDupT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3e:f7:d4:90:44:21:ac:c8:7e:5d:c1:52:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=1d0576fc760053e1de3302593c4ce3bdee753e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:1e:d6:7b:76:bf:85:69:c4:46:d5:d4:36:
ce:ab:95:f4:65:81:4b:f1:60:f9:ab:c0:7b:d4:df:
4e:0c:ca:49:0d:2c:d6:9b:63:e0:d5:8a:ba:c9:83:
30:9a:07:64:65:73:91:4d:60:eb:bd:4d:aa:ff:7c:
21:b0:ac:cf:de:a7:73:45:14:ae:c3:dd:11:90:53:
97:dc:7c:a4:ca:90:30:43:31:0a:a6:3a:54:9b:f2:
7b:71:2d:43:13:dc:fb:05:21:19:19:67:c7:20:47:
a6:c0:59:b4:44:5b:8e:a2:86:a0:5e:e2:09:78:cd:
f3:f7:7d:81:15:49:50:d0:52:37:50:7b:c2:90:cd:
0a:70:73:21:72:fd:ab:84:00:0a:30:05:a9:26:b0:
76:73:08:5e:ed:33:29:69:69:e2:49:19:21:9c:b2:
e1:b3:d0:97:33:f4:63:7b:19:ac:01:7e:bb:8e:ed:
4d:70:df:01:81:2a:1c:06:a9:0f:dd:75:5c:09:70:
bb:09:99:2a:23:ce:6a:75:a3:36:6d:cf:a7:45:a4:
ba:ec:ac:9e:46:31:cf:2f:c0:9c:91:0d:73:2a:dd:
f4:f9:f9:bd:1a:21:e1:56:36:99:2d:2e:ba:92:15:
15:2a:45:eb:54:4d:19:22:90:3b:79:42:8d:33:eb:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:76:FC:76:00:53:E1:DE:33:02:59:3C:4C:E3:BD:EE:75:3E:36
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:d7:ba:a5:91:d7:c0:13:62:1f:f6:b2:61:ef:2a:e1:a3:
9b:82:da:02:36:08:41:f1:03:e6:14:44:42:f6:08:a4:f4:dd:
c8:1c:dc:f7:9a:60:88:3b:cb:25:b0:8f:27:de:95:e8:20:d1:
87:84:9b:f6:db:5f:1a:a4:04:0b:b9:80:92:5c:3e:ff:e8:d6:
e0:29:e2:43:47:26:ff:fb:2b:6a:7a:89:46:26:5f:16:09:30:
16:82:73:11:6d:43:dd:68:7e:01:83:03:b0:24:dc:83:c9:87:
88:20:23:8c:19:13:82:b2:9f:56:5b:b2:01:fa:bc:66:1a:fe:
d0:f1:a4:cd:db:6c:0e:48:fd:3d:38:51:fd:f2:a8:7e:10:34:
22:42:01:89:a4:31:7c:d0:d2:80:10:93:94:a0:8a:9a:6b:0e:
56:90:0d:7c:47:d4:05:25:b9:33:a9:42:0a:c3:df:8f:cb:d8:
7a:71:ba:7d:b9:6e:1e:cf:88:3f:c7:a9:e7:9f:56:07:3d:9c:
68:d2:e9:cb:e8:a1:89:69:d3:1b:d2:e2:68:65:a2:eb:a0:25:
aa:49:cd:ba:6b:01:66:44:fa:54:00:58:95:a4:88:48:b9:82:
c4:37:4d:f5:76:e6:c8:03:76:14:8c:85:c0:8c:b0:66:2a:4c:
3b:fc:8f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plz731JBEIazIfl3BUpDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjFjOThkM2E3NzgyNGUyMzZiMmM0Y2RkOTM3OGMwNTA5
YTNkZTgwHhcNMjYwMzI2MTAwMTEwWhcNMjYwMzI3MTAwMTEwWjAzMTEwLwYDVQQD
EygxZDA1NzZmYzc2MDA1M2UxZGUzMzAyNTkzYzRjZTNiZGVlNzUzZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+0e1nt2v4VpxEbV1DbOq5X0ZYFL
8WD5q8B71N9ODMpJDSzWm2Pg1Yq6yYMwmgdkZXORTWDrvU2q/3whsKzP3qdzRRSu
w90RkFOX3HykypAwQzEKpjpUm/J7cS1DE9z7BSEZGWfHIEemwFm0RFuOooagXuIJ
eM3z932BFUlQ0FI3UHvCkM0KcHMhcv2rhAAKMAWpJrB2cwhe7TMpaWniSRkhnLLh
s9CXM/RjexmsAX67ju1NcN8BgSocBqkP3XVcCXC7CZkqI85qdaM2bc+nRaS67Kye
RjHPL8CckQ1zKt30+fm9GiHhVjaZLS66khUVKkXrVE0ZIpA7eUKNM+tYpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Fdvx2AFPh3jMCWTxM473udT42MB8GA1UdIwQY
MBaAFI/xyY06d4JOI2ssTN2TeMBQmj3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEt
ZmJkNzAzZWU2YzkzLzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kNTA1YTUtMjQzZC00NjE5LWE2ZmEtZmJkNzAzZWU2Yzkz
LzEval9ISmpUcDNnazRqYXl4TTNaTjR3RkNhUGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTjXuqWR
18ATYh/2smHvKuGjm4LaAjYIQfED5hREQvYIpPTdyBzc95pgiDvLJbCPJ96V6CDR
h4Sb9ttfGqQEC7mAklw+/+jW4CniQ0cm//sranqJRiZfFgkwFoJzEW1D3Wh+AYMD
sCTcg8mHiCAjjBkTgrKfVluyAfq8Zhr+0PGkzdtsDkj9PThR/fKofhA0IkIBiaQx
fNDSgBCTlKCKmmsOVpANfEfUBSW5M6lCCsPfj8vYenG6fbluHs+IP8ep559WBz2c
aNLpy+ihiWnTG9LiaGWi66AlqknNumsBZkT6VABYlaSISLmCxDdN9XbmyAN2FIyF
wIywZipMO/yP9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:46 2026 by rpki-client