Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.mft (raw, json)
Hash identifier: pTuf5Et3neI91rr2GLOjZvwTIHGGKPuoIZVyZE6LhAQ=
Subject key identifier: 24:ED:D5:E4:5E:F0:2C:1E:70:7B:EC:F6:A8:44:A0:91:BE:ED:54:3B
Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Certificate serial: 019D25F1A3FD5BCE6FD2EB06B43F559924D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
Manifest number: 0B81
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (hash: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ=)
2: jsDMCMmOBfTh-wRACNhSoqTaAPA.crl (hash: Gg4/9TXTWeRhgrxOIFvBOP9uyJkYKNa+UiwznpMDG28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a3:fd:5b:ce:6f:d2:eb:06:b4:3f:55:99:24:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=24edd5e45ef02c1e707becf6a844a091beed543b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:94:84:c7:c6:9b:8d:45:3f:50:fb:51:20:
e2:db:f1:09:98:ba:77:0d:13:82:77:13:77:69:77:
03:74:5c:2c:07:5d:dd:1e:f9:df:fc:b8:a2:81:96:
dc:5f:57:d8:90:a0:e2:07:bd:bc:5d:b6:fb:5c:e4:
38:60:bf:a7:ed:9d:89:07:f4:07:80:39:6e:db:42:
97:8b:3c:10:f3:76:1e:39:3e:24:61:aa:e7:ba:1f:
51:3b:36:ca:e6:8b:2e:a7:d0:12:0e:02:eb:c9:f9:
cd:9c:8b:8c:9f:18:94:57:f8:99:48:87:c4:d5:8f:
4e:b9:b8:e9:cd:40:65:6d:96:84:a2:cd:8b:ac:8f:
d9:23:e1:c6:2c:49:f4:a7:48:f4:03:7d:96:e3:0e:
b6:5f:4a:c8:fb:c0:98:37:0b:71:cc:f4:ce:ec:dd:
6c:68:64:61:f6:5a:61:58:ef:e8:33:f6:b7:f1:6e:
96:a8:71:31:35:71:42:d7:ca:5f:98:b8:cf:0a:3a:
f8:84:7f:aa:a3:09:ad:64:78:26:c1:3d:db:b5:51:
28:5f:57:3a:85:00:c2:0e:2f:4b:cb:10:99:92:87:
2f:90:d7:e8:64:27:52:ec:19:f2:b9:dd:21:99:14:
2d:77:10:69:9b:ac:ca:01:59:e9:85:57:30:c5:22:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:D5:E4:5E:F0:2C:1E:70:7B:EC:F6:A8:44:A0:91:BE:ED:54:3B
X509v3 Authority Key Identifier:
keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:44:99:3b:41:eb:68:0b:e1:5d:e7:27:97:b4:17:52:85:
52:eb:7e:d1:cb:b1:a6:f9:3a:6b:69:29:d3:4a:42:64:01:25:
ae:e8:c5:2b:6b:d3:5b:69:bf:1d:3f:f2:64:86:3e:05:a7:b8:
5a:96:92:d5:24:d3:ef:ed:cd:a1:ac:de:9c:04:cc:71:67:b9:
68:66:ce:d7:c3:00:5c:a2:ea:cd:b0:a9:4e:8f:74:cc:09:75:
95:36:5d:e4:09:36:c8:0f:c9:b9:38:e5:ee:2e:4b:f4:2d:5a:
0a:33:73:fc:e8:6b:85:e9:5c:22:21:5a:26:c8:db:d4:64:93:
c3:bb:36:81:29:19:ee:64:af:ef:4b:71:cb:f2:79:79:be:25:
01:1e:1c:52:87:1f:fb:4b:66:0a:bd:15:33:f1:15:2a:bc:7c:
05:e5:2e:f4:32:5d:08:9a:8c:50:ce:b0:b5:2d:4f:b3:4e:4f:
36:0f:27:17:7c:ca:39:08:b2:6f:f4:aa:c2:69:5c:75:83:71:
11:e9:b5:76:a0:27:25:d9:5e:8e:a1:b1:bf:c9:1f:9b:2d:26:
77:8b:02:f6:cf:1a:c7:78:1b:fc:7a:55:7e:4e:5b:ac:b3:63:
64:5c:3c:69:10:96:1b:1b:83:8e:c3:52:8d:28:a0:19:05:ec:
90:15:be:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8aP9W85v0usGtD9VmSTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk
YTAwZjAwHhcNMjYwMzI1MTcwMTI2WhcNMjYwMzI2MTcwMTI2WjAzMTEwLwYDVQQD
EygyNGVkZDVlNDVlZjAyYzFlNzA3YmVjZjZhODQ0YTA5MWJlZWQ1NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyKUhMfGm41FP1D7USDi2/EJmLp3
DROCdxN3aXcDdFwsB13dHvnf/LiigZbcX1fYkKDiB728Xbb7XOQ4YL+n7Z2JB/QH
gDlu20KXizwQ83YeOT4kYarnuh9ROzbK5osup9ASDgLryfnNnIuMnxiUV/iZSIfE
1Y9OubjpzUBlbZaEos2LrI/ZI+HGLEn0p0j0A32W4w62X0rI+8CYNwtxzPTO7N1s
aGRh9lphWO/oM/a38W6WqHExNXFC18pfmLjPCjr4hH+qowmtZHgmwT3btVEoX1c6
hQDCDi9LyxCZkocvkNfoZCdS7Bnyud0hmRQtdxBpm6zKAVnphVcwxSIfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTt1eRe8CwecHvs9qhEoJG+7VQ7MB8GA1UdIwQY
MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt
MzU3NjlmMDYyOTlhLzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh
LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnZEmTtB
62gL4V3nJ5e0F1KFUut+0cuxpvk6a2kp00pCZAElrujFK2vTW2m/HT/yZIY+Bae4
WpaS1STT7+3NoazenATMcWe5aGbO18MAXKLqzbCpTo90zAl1lTZd5Ak2yA/JuTjl
7i5L9C1aCjNz/OhrhelcIiFaJsjb1GSTw7s2gSkZ7mSv70txy/J5eb4lAR4cUocf
+0tmCr0VM/EVKrx8BeUu9DJdCJqMUM6wtS1Ps05PNg8nF3zKOQiyb/SqwmlcdYNx
Eem1dqAnJdlejqGxv8kfmy0md4sC9s8ax3gb/HpVfk5brLNjZFw8aRCWGxuDjsNS
jSigGQXskBW+bg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:21 2026 by rpki-client