Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: VtsxG9VtXcuwZK3o3OySOTAxqV4ZW8QWNKncHBS2D1Q=
Subject key identifier: 0E:CF:1B:A6:FC:20:EE:7D:9A:ED:A9:4F:DD:3A:52:B2:EC:6B:B9:7F
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019D28F21E62AD4CFD92EFF93C6B8BB5CBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 07:00:49 +0000
Manifest this update: Thu 26 Mar 2026 07:00:49 +0000
Manifest next update: Fri 27 Mar 2026 07:00:49 +0000
Files and hashes: 1: K7imHnGp5a0GZEXjdJA9ycC0yM0.roa (hash: WpPn3I2nrpKd+2H696eaEy1UwnJ6zYF2icMGlpKEWrE=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: W0LnxSFgJL364JkrMzwmujk75IjuXsarGmXKiZp/5OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:1e:62:ad:4c:fd:92:ef:f9:3c:6b:8b:b5:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Mar 26 07:00:49 2026 GMT
Not After : Mar 27 07:00:49 2026 GMT
Subject: CN=0ecf1ba6fc20ee7d9aeda94fdd3a52b2ec6bb97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:68:d2:05:c8:82:83:4d:06:34:ec:53:c5:
41:30:4c:62:2a:90:8a:11:7a:df:11:80:27:db:df:
76:34:87:1b:7f:83:81:78:2e:98:dd:61:c1:8a:f4:
82:74:c8:4b:fc:c4:99:1e:5d:f2:6f:e6:24:78:e6:
a8:38:60:e8:34:f4:31:37:0a:a4:e8:b5:dd:9d:0a:
87:e1:13:ff:6d:d5:b8:cc:6e:f7:7a:35:66:e8:36:
11:d4:5b:e3:6d:a4:d2:c3:ce:8b:4b:38:56:67:1c:
fb:68:ce:ef:e0:82:e2:ec:77:c7:33:33:46:a4:1c:
0b:62:4e:e5:08:49:fb:7e:74:96:9f:47:40:c5:5e:
2d:c6:62:29:08:06:1a:93:ff:f7:ac:e8:bc:84:fd:
d3:cf:5b:52:55:93:67:05:34:e7:0f:61:7b:a0:88:
fa:b5:64:92:09:ef:10:e3:f9:55:19:35:db:fb:6d:
71:09:b0:36:58:97:f6:42:63:7a:83:53:d1:5c:f3:
3b:17:c7:aa:c6:6b:b1:0d:90:40:91:1a:b5:95:ee:
db:e7:b9:b9:ee:f8:08:b7:d2:d1:74:4c:e4:f0:c3:
fa:3c:25:07:fd:81:37:88:d2:e8:33:85:08:1b:73:
3f:2f:52:56:43:34:4c:50:70:be:c4:a7:f1:4d:0b:
32:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CF:1B:A6:FC:20:EE:7D:9A:ED:A9:4F:DD:3A:52:B2:EC:6B:B9:7F
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ec:bc:12:93:b5:ba:1d:78:5d:23:aa:30:3a:ce:00:39:ca:
cf:b9:14:28:52:0d:8a:8c:d6:1d:79:3b:d2:4c:4e:14:f4:95:
70:bb:10:69:98:45:59:1d:94:39:3b:d5:0c:3a:ca:1a:38:c1:
ea:e6:e6:e6:c7:ee:68:b8:c5:87:83:2e:55:f3:01:ab:dc:ee:
de:5c:71:ab:66:2e:0b:ba:ab:cf:c0:25:35:a6:3e:cc:1e:b6:
cf:eb:74:e2:cc:1e:27:20:80:3d:3c:c3:7c:1b:21:65:36:40:
51:3e:85:97:cf:62:32:f4:26:34:ca:75:f4:bd:a0:cf:82:d0:
e5:67:77:56:df:13:8f:99:45:30:5e:67:1d:ef:b6:a1:38:44:
6d:33:44:5a:c9:7f:25:63:f7:70:d7:dc:cf:7f:d8:8b:51:6e:
8f:52:62:84:35:c4:98:5c:f5:66:10:94:59:8c:46:96:43:6b:
7c:48:31:24:31:c1:92:77:2e:ff:f9:80:17:c0:2b:0a:e3:d0:
77:a4:aa:25:ca:ce:90:a9:2d:35:a5:95:92:66:46:03:a3:37:
1a:84:a0:a7:d9:ee:69:0d:5c:a6:bd:ca:ea:a1:6d:5e:fa:c2:
12:e6:64:08:7c:e0:1f:a7:ee:9f:55:72:54:15:a0:6b:72:0c:
89:6b:d4:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8h5irUz9ku/5PGuLtcvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzA4MTBlMmRjMjcxYTZhMGYwN2I4ZTIwOWUyZGMyMjM2
Mzc4MzkwHhcNMjYwMzI2MDcwMDQ5WhcNMjYwMzI3MDcwMDQ5WjAzMTEwLwYDVQQD
EygwZWNmMWJhNmZjMjBlZTdkOWFlZGE5NGZkZDNhNTJiMmVjNmJiOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bdo0gXIgoNNBjTsU8VBMExiKpCK
EXrfEYAn2992NIcbf4OBeC6Y3WHBivSCdMhL/MSZHl3yb+YkeOaoOGDoNPQxNwqk
6LXdnQqH4RP/bdW4zG73ejVm6DYR1FvjbaTSw86LSzhWZxz7aM7v4ILi7HfHMzNG
pBwLYk7lCEn7fnSWn0dAxV4txmIpCAYak//3rOi8hP3Tz1tSVZNnBTTnD2F7oIj6
tWSSCe8Q4/lVGTXb+21xCbA2WJf2QmN6g1PRXPM7F8eqxmuxDZBAkRq1le7b57m5
7vgIt9LRdEzk8MP6PCUH/YE3iNLoM4UIG3M/L1JWQzRMUHC+xKfxTQsyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7PG6b8IO59mu2pT906UrLsa7l/MB8GA1UdIwQY
MBaAFI0wgQ4twnGmoPB7jiCeLcIjY3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEt
YmQwYjU3NzRmNjM3LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hOWQ5ZGEtZjhhNS00N2JhLWI2NmEtYmQwYjU3NzRmNjM3
LzEvalRDQkRpM0NjYWFnOEh1T0lKNHR3aU5qZURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOy8EpO1
uh14XSOqMDrOADnKz7kUKFINiozWHXk70kxOFPSVcLsQaZhFWR2UOTvVDDrKGjjB
6ubm5sfuaLjFh4MuVfMBq9zu3lxxq2YuC7qrz8AlNaY+zB62z+t04sweJyCAPTzD
fBshZTZAUT6Fl89iMvQmNMp19L2gz4LQ5Wd3Vt8Tj5lFMF5nHe+2oThEbTNEWsl/
JWP3cNfcz3/Yi1Fuj1JihDXEmFz1ZhCUWYxGlkNrfEgxJDHBkncu//mAF8ArCuPQ
d6SqJcrOkKktNaWVkmZGA6M3GoSgp9nuaQ1cpr3K6qFtXvrCEuZkCHzgH6fun1Vy
VBWga3IMiWvUiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:19 2026 by rpki-client