Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: 1jd0kwDEDDpP5pjR+xBXqmelbz3PPanqzePD/OWG9WE=
Subject key identifier: 88:05:58:67:F3:D3:B4:C8:6D:A7:43:A8:11:2C:88:7B:17:75:07:97
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019D2A72A07435C9EA17790A7677ADA58DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 1563
Signing time: Thu 26 Mar 2026 14:00:48 +0000
Manifest this update: Thu 26 Mar 2026 14:00:48 +0000
Manifest next update: Fri 27 Mar 2026 14:00:48 +0000
Files and hashes: 1: GO5gsgSjP6atrmJc6eN-oLN1XJE.roa (hash: T+zIy0ejXj3SXGWGil9zAIh7/YFmPINe0YtkNe4/+uU=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: qPITlAAx8QJZ2YNndVkBJMIxlUmakQ+dMfB3VtwBHX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:a0:74:35:c9:ea:17:79:0a:76:77:ad:a5:8d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Mar 26 14:00:48 2026 GMT
Not After : Mar 27 14:00:48 2026 GMT
Subject: CN=88055867f3d3b4c86da743a8112c887b17750797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:04:9b:f0:d6:3e:7f:f4:10:d4:d1:22:48:
c6:f2:02:1b:7d:a8:6b:24:25:b9:75:22:f8:af:19:
9b:ad:f4:1c:08:99:07:09:07:b4:90:9a:91:a2:d2:
48:cf:d1:04:72:af:5e:93:ab:13:4f:56:c1:14:e4:
1f:bf:c7:33:8a:87:a2:35:95:37:3f:28:ec:4a:ee:
1c:ff:a2:8d:cc:4e:15:7f:b4:53:47:13:b8:b2:c3:
47:38:90:3f:f5:66:44:fd:cd:46:c7:00:e1:66:3b:
01:45:90:18:14:a0:dd:c8:ad:30:c9:43:87:0f:5e:
4b:7c:9f:42:40:67:f1:24:51:57:67:c0:3f:4a:44:
38:65:cd:85:fe:60:c6:fe:df:60:13:a5:ac:64:6d:
a3:f5:2a:13:93:2e:79:a9:48:9c:e6:d5:e9:ee:33:
08:39:e5:28:70:8f:ff:dd:07:80:9d:c2:e3:68:19:
db:5f:d7:a3:44:28:55:14:eb:6f:ce:31:43:0f:7c:
83:a2:08:be:80:26:ff:a3:02:fc:15:fb:e7:c2:99:
8f:9b:0f:29:9f:2d:67:35:bd:12:09:a9:51:8e:9a:
a8:9e:b3:e7:58:fe:bc:a0:b6:c6:84:02:7c:7b:a1:
b6:17:c0:04:4f:97:b4:4b:23:af:eb:8a:f3:b2:fc:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:58:67:F3:D3:B4:C8:6D:A7:43:A8:11:2C:88:7B:17:75:07:97
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b7:80:6f:d8:45:d6:d2:d3:ed:06:a7:76:28:90:34:07:96:
56:ad:cd:c9:8f:a3:5f:bc:5d:a3:f8:f8:75:21:91:7d:d1:ed:
ca:20:e1:ef:da:81:24:00:0e:48:5c:e8:47:f1:98:63:90:31:
00:58:b9:67:93:57:e8:74:43:4c:75:8f:21:c0:a6:ff:6b:19:
f3:3c:67:f1:2e:a3:8d:94:8f:77:c7:b1:4f:47:69:f2:d5:5c:
d9:08:7c:18:48:05:4d:ff:13:7a:c9:cb:06:34:fe:ee:96:77:
8c:02:2a:55:6b:ea:f9:ae:5b:6d:42:ce:4c:c8:57:5e:ca:5d:
e0:3d:b9:cc:35:6e:f6:29:88:0f:4e:68:42:47:ca:a9:5d:6f:
d9:c3:08:c4:78:6c:af:a1:08:21:b0:8e:56:02:49:0b:6d:db:
da:62:ab:81:bb:32:b9:a3:df:6e:a6:b0:a3:09:bf:89:14:c3:
6a:ab:0e:af:2b:9a:86:3e:65:52:4e:be:34:c4:0b:92:83:f9:
13:78:98:28:93:3d:94:93:64:b5:53:09:0d:39:b6:44:b3:f1:
d0:bd:26:a3:1d:14:03:02:69:50:7b:0e:4c:7e:0a:ad:c0:d0:
4a:c1:be:f5:21:94:36:60:ae:ff:6d:c6:b5:20:72:56:94:98:
f3:ca:e8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qcqB0NcnqF3kKdnetpY38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOGQ3ZWE0N2QxYjcwMGMzZDZiNzk5MzU4YWE3ZWE1ZWNh
OGIzZDIwHhcNMjYwMzI2MTQwMDQ4WhcNMjYwMzI3MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg4ODA1NTg2N2YzZDNiNGM4NmRhNzQzYTgxMTJjODg3YjE3NzUwNzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuwEm/DWPn/0ENTRIkjG8gIbfahr
JCW5dSL4rxmbrfQcCJkHCQe0kJqRotJIz9EEcq9ek6sTT1bBFOQfv8czioeiNZU3
PyjsSu4c/6KNzE4Vf7RTRxO4ssNHOJA/9WZE/c1GxwDhZjsBRZAYFKDdyK0wyUOH
D15LfJ9CQGfxJFFXZ8A/SkQ4Zc2F/mDG/t9gE6WsZG2j9SoTky55qUic5tXp7jMI
OeUocI//3QeAncLjaBnbX9ejRChVFOtvzjFDD3yDogi+gCb/owL8FfvnwpmPmw8p
ny1nNb0SCalRjpqonrPnWP68oLbGhAJ8e6G2F8AET5e0SyOv64rzsvwOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgFWGfz07TIbadDqBEsiHsXdQeXMB8GA1UdIwQY
MBaAFI+NfqR9G3AMPWt5k1iqfqXsqLPSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEt
MjA1MjBlNmI2MTdhLzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MzE0ZTUtYTk2NC00NGY2LWFkYTEtMjA1MjBlNmI2MTdh
LzEvajQxLXBIMGJjQXc5YTNtVFdLcC1wZXlvczlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7eAb9hF
1tLT7QandiiQNAeWVq3NyY+jX7xdo/j4dSGRfdHtyiDh79qBJAAOSFzoR/GYY5Ax
AFi5Z5NX6HRDTHWPIcCm/2sZ8zxn8S6jjZSPd8exT0dp8tVc2Qh8GEgFTf8TesnL
BjT+7pZ3jAIqVWvq+a5bbULOTMhXXspd4D25zDVu9imID05oQkfKqV1v2cMIxHhs
r6EIIbCOVgJJC23b2mKrgbsyuaPfbqawowm/iRTDaqsOryuahj5lUk6+NMQLkoP5
E3iYKJM9lJNktVMJDTm2RLPx0L0mox0UAwJpUHsOTH4KrcDQSsG+9SGUNmCu/23G
tSByVpSY88roaA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:19 2026 by rpki-client