Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: a8PkvB9pPOYLnR7fAzRn78Z7UOxTdqAPT3KaN9MXvUM=
Subject key identifier: 66:69:58:8B:F7:C3:E7:9A:43:EF:07:B9:27:81:2F:37:AD:7F:8B:9F
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 019D27E063D5374D80CB60703DFFA820417B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 0501
Signing time: Thu 26 Mar 2026 02:01:50 +0000
Manifest this update: Thu 26 Mar 2026 02:01:50 +0000
Manifest next update: Fri 27 Mar 2026 02:01:50 +0000
Files and hashes: 1: 08TX7zGJM_9SDvXsn_IRwc2BjrU.roa (hash: jT+EKCy6Js0nlHIQwG+OyzWgM7mgDMvpygyb2+ijALI=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: 2AQfk2h7D9oUg5f5LT0V+JSnoJjuLQZ0TlfYF02Nryw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:63:d5:37:4d:80:cb:60:70:3d:ff:a8:20:41:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Mar 26 02:01:50 2026 GMT
Not After : Mar 27 02:01:50 2026 GMT
Subject: CN=6669588bf7c3e79a43ef07b927812f37ad7f8b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:19:38:c8:a6:73:03:7b:c6:8d:16:39:a1:
57:fe:28:e3:dd:20:79:42:da:23:9d:57:a1:f7:d4:
28:5f:c9:29:a1:dc:8a:a2:8a:7b:15:88:ae:6a:16:
c3:14:5f:a9:7f:25:b9:f6:7e:75:78:bf:38:ab:9a:
50:65:08:d5:76:84:fa:9e:12:e4:9a:15:f0:43:1a:
1b:be:45:84:dd:2c:49:48:c8:1e:16:26:89:49:58:
fc:53:84:e1:5e:27:fa:70:79:7f:c9:e0:fe:6b:42:
d2:d7:cb:dc:c6:9b:6f:f0:f6:dc:88:35:77:7e:ab:
39:58:13:4b:7f:4b:af:27:08:54:a0:69:d5:e2:fe:
ce:34:f1:6d:e3:eb:5b:f9:96:88:a4:71:39:3d:46:
56:96:94:58:e5:3d:f0:d4:27:c9:16:07:eb:df:4b:
7f:ff:b7:bc:df:7f:8f:58:ed:a5:ed:03:79:68:7d:
a7:9d:ff:b1:2b:21:36:ec:cd:c2:4a:42:81:51:16:
65:57:ff:a9:91:74:64:d2:ff:a9:89:4e:84:8a:86:
99:bc:b8:3e:4a:1c:11:f3:e8:43:74:7f:17:76:f5:
c3:c4:29:4f:95:6f:c8:af:29:50:63:cf:51:b2:d1:
32:94:0e:e3:92:59:81:4f:63:d8:f5:34:e2:ee:fa:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:69:58:8B:F7:C3:E7:9A:43:EF:07:B9:27:81:2F:37:AD:7F:8B:9F
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d4:cc:b9:16:1f:d2:6c:90:bb:a1:48:e5:37:6e:b9:2d:d9:
5f:b9:77:f1:a6:f5:b8:9e:b8:bc:2c:6e:35:8b:9b:ee:28:88:
3f:52:cc:70:1e:80:0b:99:c9:66:fe:59:56:f3:9c:b0:13:89:
07:92:36:07:dc:66:65:fb:5b:59:b4:c6:fb:cb:89:fa:1c:6d:
b0:93:0f:8d:ee:86:58:b1:49:6b:d0:f2:2e:ce:9f:58:71:7c:
fe:69:a2:cf:a9:86:e3:08:60:09:a8:af:f1:83:5f:35:82:5b:
8b:e7:80:f6:aa:0c:7c:e8:85:74:89:fd:90:8b:2a:4f:a4:3a:
bc:94:f9:b3:eb:25:ff:4f:bc:34:cb:7a:09:4c:2e:32:73:80:
ec:4d:84:a6:44:7c:85:66:03:88:2b:92:67:6b:0d:e2:c3:28:
c5:82:ea:95:c5:c4:a8:61:1c:d1:a6:87:c8:2d:92:0e:9b:b7:
93:16:9b:ea:7e:c8:fc:36:18:b0:85:60:6c:7b:fb:67:fa:e7:
92:cc:f7:c4:6c:98:f0:84:ca:a4:ee:2f:f0:fc:40:18:63:2c:
5a:40:8d:e8:c6:cb:91:c3:6d:51:44:2e:6d:e9:98:2b:a7:0a:
25:90:25:e4:d9:91:02:1f:e3:ea:2a:87:08:92:d3:92:ea:c5:
b3:6a:ad:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4GPVN02Ay2BwPf+oIEF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTBiM2E5YTA1MDM5MDU1OTZjNzdmNTgwMmJlZjlmYzcz
ZDY0N2QwHhcNMjYwMzI2MDIwMTUwWhcNMjYwMzI3MDIwMTUwWjAzMTEwLwYDVQQD
Eyg2NjY5NTg4YmY3YzNlNzlhNDNlZjA3YjkyNzgxMmYzN2FkN2Y4YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOwZOMimcwN7xo0WOaFX/ijj3SB5
QtojnVeh99QoX8kpodyKoop7FYiuahbDFF+pfyW59n51eL84q5pQZQjVdoT6nhLk
mhXwQxobvkWE3SxJSMgeFiaJSVj8U4ThXif6cHl/yeD+a0LS18vcxptv8PbciDV3
fqs5WBNLf0uvJwhUoGnV4v7ONPFt4+tb+ZaIpHE5PUZWlpRY5T3w1CfJFgfr30t/
/7e833+PWO2l7QN5aH2nnf+xKyE27M3CSkKBURZlV/+pkXRk0v+piU6EioaZvLg+
ShwR8+hDdH8XdvXDxClPlW/IrylQY89RstEylA7jklmBT2PY9TTi7vrXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZpWIv3w+eaQ+8HuSeBLzetf4ufMB8GA1UdIwQY
MBaAFI1Qs6mgUDkFWWx39YAr75/HPWR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTIt
Y2VmMDFkODc3ZWJlLzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82OGQxNDMtMTIzNy00OTEyLWE4OTItY2VmMDFkODc3ZWJl
LzEvalZDenFhQlFPUVZaYkhmMWdDdnZuOGM5WkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNTMuRYf
0myQu6FI5TduuS3ZX7l38ab1uJ64vCxuNYub7iiIP1LMcB6AC5nJZv5ZVvOcsBOJ
B5I2B9xmZftbWbTG+8uJ+hxtsJMPje6GWLFJa9DyLs6fWHF8/mmiz6mG4whgCaiv
8YNfNYJbi+eA9qoMfOiFdIn9kIsqT6Q6vJT5s+sl/0+8NMt6CUwuMnOA7E2EpkR8
hWYDiCuSZ2sN4sMoxYLqlcXEqGEc0aaHyC2SDpu3kxab6n7I/DYYsIVgbHv7Z/rn
ksz3xGyY8ITKpO4v8PxAGGMsWkCN6MbLkcNtUUQubemYK6cKJZAl5NmRAh/j6iqH
CJLTkurFs2qt7w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:32 2026 by rpki-client