Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: LWG/ucHlyS//nXp7w+qYsKZghAh6sI0GXHiMk5DzkiQ=
Subject key identifier: 58:06:8C:76:F3:E6:BB:88:D1:81:7A:4D:4B:9D:31:30:9A:EF:32:43
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019D265FB3E234F93FEF89E6F88C13215C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 10FA
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: l5Wl0KeyYpCDC98cvc3yWJqeGrsAGmWJIaeVNldF9UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b3:e2:34:f9:3f:ef:89:e6:f8:8c:13:21:5c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=58068c76f3e6bb88d1817a4d4b9d31309aef3243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:ab:3d:92:5b:74:5b:67:8d:e5:eb:8a:dc:
f1:bb:59:07:6a:f2:73:f9:a2:cc:ec:59:c0:49:03:
99:d8:1e:fb:44:9b:20:49:49:a0:49:62:a1:78:1f:
66:50:04:be:cc:ff:a4:72:84:a6:f7:04:d6:52:2b:
4a:c4:2f:4c:b8:e0:4e:46:7d:76:d7:80:45:53:81:
88:0d:3f:68:ce:c5:19:42:c3:e9:70:27:ff:1c:0f:
d4:55:63:f0:23:c1:86:0c:23:b6:34:58:29:05:f3:
02:56:9a:cc:fd:63:af:e0:3c:4c:21:81:89:3a:f3:
6f:41:8b:2d:69:dc:6b:18:95:c4:f6:eb:d3:67:05:
1d:c5:9b:bf:0a:4c:17:c4:6d:d6:ef:c3:d1:66:e5:
c2:79:f2:ff:e6:c5:a9:b4:9a:4d:e3:f1:00:20:d1:
f4:f1:74:f9:32:75:f2:7a:5e:a4:57:a1:58:15:c8:
f8:a6:35:b6:38:a8:aa:62:fd:f1:d8:92:54:eb:b1:
6a:ca:f9:0c:37:ca:ba:fe:a7:84:6b:bd:63:24:9e:
ae:46:85:2e:a7:76:90:1e:c5:67:9d:98:c8:bc:f4:
8e:de:eb:34:ea:11:e6:19:b4:1a:cc:39:5b:24:db:
bf:3a:5e:64:f6:9e:37:6b:e5:f9:c4:b1:c1:6f:86:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:8C:76:F3:E6:BB:88:D1:81:7A:4D:4B:9D:31:30:9A:EF:32:43
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:14:94:b5:7a:f9:1d:84:2c:f5:1d:71:83:d3:c4:33:69:
be:7b:18:d2:67:d9:51:6e:bb:87:df:ef:a7:fc:de:14:ef:4f:
d1:dd:cc:e2:9b:9e:f6:b3:b7:54:7e:bb:13:0d:4d:9f:e6:2e:
fb:7d:b5:44:a5:5d:52:d4:af:75:46:ec:d4:6e:10:65:11:1c:
6b:10:51:d2:ef:ec:1f:fb:c0:43:b4:0e:e8:0b:17:64:6c:d9:
ed:d3:9a:28:03:eb:b1:33:87:44:53:f8:8f:18:ef:7e:1d:70:
1c:44:6e:e8:6f:e2:a0:cd:a3:cd:8d:a0:96:a3:24:51:9e:b5:
8d:ef:7f:78:a0:68:d4:f6:77:48:8d:84:fa:1e:fe:a5:9c:8f:
37:71:55:86:84:c9:4c:3b:3f:57:32:32:f9:b3:2d:66:f8:b9:
47:59:27:ea:5a:34:12:63:3c:60:8e:a9:6e:55:f5:00:34:7d:
9d:6c:81:2b:75:ac:ce:72:74:5e:96:10:35:96:ae:d6:58:27:
68:ea:04:4e:70:49:e6:5e:6a:7c:e0:20:59:08:8c:86:dd:4f:
a0:1a:8c:2a:50:0a:19:d5:98:3f:94:62:9f:e7:5f:00:7d:b6:
ff:f6:8e:ab:34:93:7e:b0:c7:17:ff:ba:5d:34:b6:ef:9c:c5:
5d:fa:d0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7PiNPk/74nm+IwTIVxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjYwMzI1MTkwMTM5WhcNMjYwMzI2MTkwMTM5WjAzMTEwLwYDVQQD
Eyg1ODA2OGM3NmYzZTZiYjg4ZDE4MTdhNGQ0YjlkMzEzMDlhZWYzMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkKrPZJbdFtnjeXritzxu1kHavJz
+aLM7FnASQOZ2B77RJsgSUmgSWKheB9mUAS+zP+kcoSm9wTWUitKxC9MuOBORn12
14BFU4GIDT9ozsUZQsPpcCf/HA/UVWPwI8GGDCO2NFgpBfMCVprM/WOv4DxMIYGJ
OvNvQYstadxrGJXE9uvTZwUdxZu/CkwXxG3W78PRZuXCefL/5sWptJpN4/EAINH0
8XT5MnXyel6kV6FYFcj4pjW2OKiqYv3x2JJU67FqyvkMN8q6/qeEa71jJJ6uRoUu
p3aQHsVnnZjIvPSO3us06hHmGbQazDlbJNu/Ol5k9p43a+X5xLHBb4ZYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgGjHbz5ruI0YF6TUudMTCa7zJDMB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjMUlLV6
+R2ELPUdcYPTxDNpvnsY0mfZUW67h9/vp/zeFO9P0d3M4pue9rO3VH67Ew1Nn+Yu
+321RKVdUtSvdUbs1G4QZREcaxBR0u/sH/vAQ7QO6AsXZGzZ7dOaKAPrsTOHRFP4
jxjvfh1wHERu6G/ioM2jzY2glqMkUZ61je9/eKBo1PZ3SI2E+h7+pZyPN3FVhoTJ
TDs/VzIy+bMtZvi5R1kn6lo0EmM8YI6pblX1ADR9nWyBK3WsznJ0XpYQNZau1lgn
aOoETnBJ5l5qfOAgWQiMht1PoBqMKlAKGdWYP5Rin+dfAH22//aOqzSTfrDHF/+6
XTS275zFXfrQNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:17 2026 by rpki-client