Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier: RODENwctF89f37oU475LnIg+DkVtrqv1h/OsiwayhLA=
Subject key identifier: B8:70:64:74:7D:1F:C4:36:37:D8:79:59:14:91:B3:40:82:6C:47:B4
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer: /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial: 019D284D3F82C600571B52D0A2FC7CBCFFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number: 0A1D
Signing time: Thu 26 Mar 2026 04:00:44 +0000
Manifest this update: Thu 26 Mar 2026 04:00:44 +0000
Manifest next update: Fri 27 Mar 2026 04:00:44 +0000
Files and hashes: 1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: a142jBmDC5TpXM8abhcy1qsIgMLj1PdI/vzcD/jaGwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3f:82:c6:00:57:1b:52:d0:a2:fc:7c:bc:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Validity
Not Before: Mar 26 04:00:44 2026 GMT
Not After : Mar 27 04:00:44 2026 GMT
Subject: CN=b87064747d1fc43637d879591491b340826c47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:e3:cf:11:41:79:a6:b0:2e:2a:57:23:50:
a0:41:32:1c:84:9c:07:59:7d:a1:61:91:80:2f:cc:
d4:66:74:6d:67:3d:55:79:7f:77:0b:10:7c:c9:a2:
98:4d:b3:ab:e8:e5:b1:bf:a2:e1:0e:14:1f:94:fb:
a7:fb:e3:82:06:74:64:1e:a4:cb:f6:97:2c:83:93:
d8:50:fd:e4:08:23:fa:0e:a0:01:de:b2:38:6f:09:
c0:ff:6e:0a:98:ba:11:5e:7e:2a:65:10:4b:f9:12:
c1:61:cb:c6:7a:8e:ba:b7:71:64:92:bb:f0:09:4c:
4c:23:40:bd:d5:1d:ea:9f:ba:c3:8a:e4:70:33:76:
40:33:ab:54:ba:bf:e3:98:58:83:ea:27:6e:dc:ac:
00:6e:fd:f5:6b:e0:1f:aa:57:87:91:f6:82:dd:57:
81:09:6c:05:5a:cf:df:26:fb:e0:da:6d:ee:46:53:
46:68:6f:db:2e:d8:4b:0a:4e:29:7e:1d:91:ba:22:
5b:14:0d:1e:a9:86:3b:ad:25:3a:b1:7c:93:d5:42:
5d:24:38:6a:08:6c:d9:b9:04:8b:34:0f:61:27:2b:
49:42:f0:80:ca:30:b9:b1:d1:c6:4b:16:ec:12:72:
b0:55:94:8f:e2:8b:70:b4:44:5b:cb:0b:48:11:41:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:64:74:7D:1F:C4:36:37:D8:79:59:14:91:B3:40:82:6C:47:B4
X509v3 Authority Key Identifier:
keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:73:bf:fc:fb:de:15:2b:d6:74:7e:5e:37:0a:26:96:f8:b2:
01:37:d9:6d:a4:7a:48:37:ba:8f:61:b5:a4:33:31:35:38:66:
51:0a:0f:58:a4:b7:92:3c:3c:b6:08:97:87:83:c8:50:da:cf:
87:69:0a:81:61:d5:2c:2e:f0:55:a6:77:32:15:c1:21:4f:f3:
89:cb:12:fd:f5:7b:bb:00:76:e6:55:3b:6e:74:b5:e0:bf:42:
4f:eb:88:de:9c:8c:e8:b2:98:5a:6b:43:12:ac:50:a4:00:94:
bc:39:10:69:8a:56:c3:61:94:83:78:07:54:ce:e1:77:c5:ad:
5f:9f:de:c7:be:b1:7e:0e:d7:42:b7:8f:e9:e1:01:44:6d:e1:
6b:13:00:f7:19:20:78:67:02:9a:4a:f0:16:2b:3f:f9:3d:80:
4a:73:c3:37:c5:a8:59:fe:5e:e4:40:59:a2:45:55:f5:e8:41:
37:c7:d5:69:43:78:e8:d1:b8:c8:e4:91:ab:34:c5:8e:e6:ec:
de:c7:29:1d:5e:64:0b:9f:47:b3:49:24:97:eb:4d:30:39:9e:
6d:ae:a5:56:ad:98:67:18:2d:e2:07:ed:ae:37:05:df:9b:16:
d0:a3:6e:00:44:35:e1:d4:12:b7:22:11:73:f6:87:e4:37:27:
63:0e:05:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTT+CxgBXG1LQovx8vP/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ODdiYmFhMDIyYzM5OWZkZGM0MzUxYmIyZTBhZmEwOTg1
YTU4MzUwHhcNMjYwMzI2MDQwMDQ0WhcNMjYwMzI3MDQwMDQ0WjAzMTEwLwYDVQQD
EyhiODcwNjQ3NDdkMWZjNDM2MzdkODc5NTkxNDkxYjM0MDgyNmM0N2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGnjzxFBeaawLipXI1CgQTIchJwH
WX2hYZGAL8zUZnRtZz1VeX93CxB8yaKYTbOr6OWxv6LhDhQflPun++OCBnRkHqTL
9pcsg5PYUP3kCCP6DqAB3rI4bwnA/24KmLoRXn4qZRBL+RLBYcvGeo66t3Fkkrvw
CUxMI0C91R3qn7rDiuRwM3ZAM6tUur/jmFiD6idu3KwAbv31a+AfqleHkfaC3VeB
CWwFWs/fJvvg2m3uRlNGaG/bLthLCk4pfh2RuiJbFA0eqYY7rSU6sXyT1UJdJDhq
CGzZuQSLNA9hJytJQvCAyjC5sdHGSxbsEnKwVZSP4otwtERbywtIEUETsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhwZHR9H8Q2N9h5WRSRs0CCbEe0MB8GA1UdIwQY
MBaAFCSHu6oCLDmf3cQ1G7Lgr6CYWlg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEt
MjljY2VhNmU5YTU4LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC84M2FkMWQtZTg3OC00MjM0LTliYjEtMjljY2VhNmU5YTU4
LzEvSkllN3FnSXNPWl9keERVYnN1Q3ZvSmhhV0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnO//Pve
FSvWdH5eNwomlviyATfZbaR6SDe6j2G1pDMxNThmUQoPWKS3kjw8tgiXh4PIUNrP
h2kKgWHVLC7wVaZ3MhXBIU/zicsS/fV7uwB25lU7bnS14L9CT+uI3pyM6LKYWmtD
EqxQpACUvDkQaYpWw2GUg3gHVM7hd8WtX5/ex76xfg7XQreP6eEBRG3haxMA9xkg
eGcCmkrwFis/+T2ASnPDN8WoWf5e5EBZokVV9ehBN8fVaUN46NG4yOSRqzTFjubs
3scpHV5kC59Hs0kkl+tNMDmeba6lVq2YZxgt4gftrjcF35sW0KNuAEQ14dQStyIR
c/aH5DcnYw4Fcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:17 2026 by rpki-client