Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: 3nG11W0mIFIK9B0aT6qdB2PO3HhUtgHC+Jj88hxuFJM=
Subject key identifier: 61:7A:28:09:63:74:9A:9C:CD:E0:EC:F4:1F:89:00:4E:DA:E0:1E:69
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019D2772466AC3E1FAEA0FCB668367CF4CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 00:01:33 +0000
Manifest this update: Thu 26 Mar 2026 00:01:33 +0000
Manifest next update: Fri 27 Mar 2026 00:01:33 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: rL3vcSuSlnrVcauXmWDz3gBKqiCyG0fE4+Ke7VD7gBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:46:6a:c3:e1:fa:ea:0f:cb:66:83:67:cf:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Mar 26 00:01:33 2026 GMT
Not After : Mar 27 00:01:33 2026 GMT
Subject: CN=617a280963749a9ccde0ecf41f89004edae01e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:35:a5:19:76:34:ea:32:93:96:0b:b4:9c:
a6:43:92:c3:73:06:46:ba:50:c9:61:a9:31:62:82:
1b:a3:dc:8c:65:06:b0:19:db:4a:3b:1f:c5:8e:ac:
e0:da:8c:6e:6f:04:1b:c6:7b:c2:1d:38:55:6d:bb:
07:17:b8:5a:41:d6:48:62:63:12:a5:fd:e7:c5:f5:
6b:d7:1f:12:4a:23:d5:05:bf:8f:b2:42:5e:14:87:
44:ba:27:97:8a:40:53:c4:3e:f4:66:94:e8:47:05:
83:12:1f:7e:50:09:c8:b7:8e:d4:52:9c:bf:0d:16:
e7:5d:fe:d3:88:27:e0:7e:61:2d:7c:0a:cf:80:f9:
e8:d5:65:4e:2d:30:42:f0:3e:01:ac:07:73:00:de:
33:32:f8:ab:e5:2d:06:df:c8:3a:a8:2f:18:5b:ed:
91:df:a6:c2:cb:34:36:a5:8d:3e:03:03:24:8b:72:
af:67:dc:2c:fd:18:ca:85:98:92:2d:b6:08:f0:12:
13:9d:9d:31:2b:86:6a:58:fe:7c:41:02:e6:dc:a1:
89:d9:85:71:49:73:32:a1:de:30:d8:a7:ef:ee:0d:
16:3a:00:47:8c:d7:74:0e:78:90:e1:8f:6d:ff:99:
0d:72:f9:78:2b:2e:9e:c5:9c:38:de:93:f9:76:d1:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7A:28:09:63:74:9A:9C:CD:E0:EC:F4:1F:89:00:4E:DA:E0:1E:69
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8c:05:e4:98:e0:1e:34:97:d4:22:a2:f4:d4:df:fc:4e:19:
db:b3:1b:c4:c9:79:06:06:cd:e7:a2:47:5a:27:10:ad:83:64:
c1:72:f8:d4:c1:6e:ae:94:e6:1d:f0:4b:a4:dd:75:06:c5:62:
ba:d8:08:a5:e7:d9:a1:24:0b:c6:41:80:7b:f3:09:ab:6d:80:
2d:dd:49:ce:26:92:0e:28:a9:78:58:a1:a4:48:0c:94:a8:46:
98:45:a2:d5:80:a1:d3:9a:0f:aa:13:50:c9:ec:28:13:ad:03:
37:11:e5:50:d3:11:7c:ff:81:29:50:17:d2:a4:de:a2:81:4e:
f9:91:a8:15:54:2b:21:3e:cf:84:e2:b5:75:f8:50:64:69:04:
09:8d:49:20:66:6c:f2:c0:04:61:5a:27:cc:f9:ac:fa:4c:2b:
ae:6c:1e:41:52:c8:0b:7b:97:e5:65:3e:ac:4b:80:59:d8:62:
0b:e7:ae:f0:e5:fb:63:55:ca:e1:a3:46:0a:73:a5:ef:3b:c0:
5a:c2:ae:6a:53:41:49:b3:65:61:35:25:a1:81:ee:f8:d1:61:
ea:61:f2:97:57:30:76:39:88:72:6d:56:f9:01:11:c4:13:d1:
ca:ef:bd:ce:fb:08:b8:b5:4b:ab:f6:66:db:41:cf:c1:e2:31:
29:52:47:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nckZqw+H66g/LZoNnz0y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZTlhMWYxMmE4NGQ1MzI1MjYzN2ZmODVkNmViOGViMTYz
NjM5M2UwHhcNMjYwMzI2MDAwMTMzWhcNMjYwMzI3MDAwMTMzWjAzMTEwLwYDVQQD
Eyg2MTdhMjgwOTYzNzQ5YTljY2RlMGVjZjQxZjg5MDA0ZWRhZTAxZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7io1pRl2NOoyk5YLtJymQ5LDcwZG
ulDJYakxYoIbo9yMZQawGdtKOx/Fjqzg2oxubwQbxnvCHThVbbsHF7haQdZIYmMS
pf3nxfVr1x8SSiPVBb+PskJeFIdEuieXikBTxD70ZpToRwWDEh9+UAnIt47UUpy/
DRbnXf7TiCfgfmEtfArPgPno1WVOLTBC8D4BrAdzAN4zMvir5S0G38g6qC8YW+2R
36bCyzQ2pY0+AwMki3KvZ9ws/RjKhZiSLbYI8BITnZ0xK4ZqWP58QQLm3KGJ2YVx
SXMyod4w2Kfv7g0WOgBHjNd0DniQ4Y9t/5kNcvl4Ky6exZw43pP5dtGoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF6KAljdJqczeDs9B+JAE7a4B5pMB8GA1UdIwQY
MBaAFCTpofEqhNUyUmN/+F1uuOsWNjk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYt
YzJjOTE2ZTQzOTI1LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iNDk1YjUtZmJmYS00MTE4LTg2MmYtYzJjOTE2ZTQzOTI1
LzEvSk9taDhTcUUxVEpTWTNfNFhXNjQ2eFkyT1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIwF5Jjg
HjSX1CKi9NTf/E4Z27MbxMl5BgbN56JHWicQrYNkwXL41MFurpTmHfBLpN11BsVi
utgIpefZoSQLxkGAe/MJq22ALd1JziaSDiipeFihpEgMlKhGmEWi1YCh05oPqhNQ
yewoE60DNxHlUNMRfP+BKVAX0qTeooFO+ZGoFVQrIT7PhOK1dfhQZGkECY1JIGZs
8sAEYVonzPms+kwrrmweQVLIC3uX5WU+rEuAWdhiC+eu8OX7Y1XK4aNGCnOl7zvA
WsKualNBSbNlYTUloYHu+NFh6mHyl1cwdjmIcm1W+QERxBPRyu+9zvsIuLVLq/Zm
20HPweIxKVJHzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:05 2026 by rpki-client