Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: CgGgBERYr0guxvY1QCDOyM4ngYXEfDcTxXWGFyWzEUs=
Subject key identifier: A5:65:DE:C8:E7:A1:E6:1B:08:C8:8F:25:E5:01:AB:6A:48:6C:68:01
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019D299761EC2EB2EB3BBF6A433BDAC42C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 189B
Signing time: Thu 26 Mar 2026 10:01:19 +0000
Manifest this update: Thu 26 Mar 2026 10:01:19 +0000
Manifest next update: Fri 27 Mar 2026 10:01:19 +0000
Files and hashes: 1: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (hash: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: WHqH2EhDK6xxFIiXyNlsjw-yMMg.roa (hash: boc+B5V0r/3xbux19AoHg18zg6QdefO3+vjSL8b5Cv8=)
4: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: ggetCVdRJwbFQqwyFj555u9/fow16CZFf1K2Ds1wv/s=)
5: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:61:ec:2e:b2:eb:3b:bf:6a:43:3b:da:c4:2c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Mar 26 10:01:19 2026 GMT
Not After : Mar 27 10:01:19 2026 GMT
Subject: CN=a565dec8e7a1e61b08c88f25e501ab6a486c6801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:a9:b0:3a:71:b3:50:f7:e0:50:c0:23:b1:
f3:d9:dd:61:e0:47:b7:15:81:0b:5a:ad:e6:0f:21:
4c:81:ee:4a:e7:d0:68:6f:36:2d:e8:9b:be:97:4b:
d5:f0:2a:95:9b:23:14:73:76:49:3c:29:db:90:f1:
dd:cf:a9:44:83:a5:15:b6:c2:b7:f4:5a:77:8a:0b:
0b:57:bd:c9:c1:01:6d:6b:1f:4b:ab:fa:18:f4:1f:
86:87:de:6e:ec:bf:20:b7:b0:70:8d:79:11:4d:fc:
61:7f:ca:e5:32:75:ef:a9:a9:56:3b:a0:f7:77:7f:
d6:b4:12:1b:4a:58:bc:7f:cc:d1:9c:8e:65:71:6f:
63:71:43:b9:98:41:9f:4d:12:fd:c1:c8:be:04:c3:
0e:b8:d7:7e:e1:e7:08:50:16:4c:79:1b:c3:4a:6a:
49:29:c2:6e:ae:f7:37:9c:c6:ad:3b:e1:24:07:bd:
53:4a:d8:8e:06:38:e5:4f:6f:b8:36:a0:58:aa:a8:
0f:90:8b:7e:e6:de:24:b4:9f:8e:33:1e:ae:28:13:
d7:e9:8b:0c:1c:30:41:0a:0b:20:6b:00:f2:c0:a5:
16:98:62:f3:88:60:7c:45:53:bb:b5:38:39:af:87:
6d:fa:5a:fb:8f:35:26:b2:ac:2e:b3:22:51:3e:68:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:DE:C8:E7:A1:E6:1B:08:C8:8F:25:E5:01:AB:6A:48:6C:68:01
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:e1:95:5c:e7:8a:49:73:83:ab:8e:e2:fe:06:8e:6a:46:
a4:71:2f:a1:85:5d:f4:0e:8d:ce:d6:fb:0f:e8:4a:53:c6:65:
ad:1b:f6:ac:4d:af:46:ea:d0:0b:98:30:1c:cb:cc:fc:9a:3d:
8b:f1:28:66:76:41:84:4c:ce:ba:1f:20:74:aa:1e:19:28:8b:
28:93:a5:87:a6:04:4b:21:e9:42:01:b1:f4:8c:1e:fe:9d:73:
41:9f:a2:4e:85:f9:9d:1a:32:d8:64:2f:6f:17:ff:8b:4f:f5:
e7:7a:9b:5e:1f:04:6f:61:35:54:5f:3e:54:6f:f4:32:a5:3e:
b8:4b:77:0d:62:8c:cc:dd:73:9b:42:b9:71:d3:54:5c:6d:f5:
05:8e:53:5b:a2:0c:d8:a5:8a:8c:f7:88:57:ab:15:de:f1:a8:
b2:64:68:48:84:66:71:98:06:39:3c:76:20:36:e6:c8:ff:53:
ab:98:ad:79:51:13:2c:fe:22:e1:ab:5d:51:17:b5:50:21:b7:
ac:90:6b:e0:00:dd:a2:5a:2b:de:67:e8:07:01:2f:30:ba:cf:
b4:eb:d9:79:4a:3d:76:c9:b0:ec:2a:fa:06:3a:eb:51:83:68:
b8:5d:93:eb:08:a2:00:e7:1f:22:b4:3d:ae:45:71:30:c8:b6:
19:42:be:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2HsLrLrO79qQzvaxCxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjYwMzI2MTAwMTE5WhcNMjYwMzI3MTAwMTE5WjAzMTEwLwYDVQQD
EyhhNTY1ZGVjOGU3YTFlNjFiMDhjODhmMjVlNTAxYWI2YTQ4NmM2ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymepsDpxs1D34FDAI7Hz2d1h4Ee3
FYELWq3mDyFMge5K59BobzYt6Ju+l0vV8CqVmyMUc3ZJPCnbkPHdz6lEg6UVtsK3
9Fp3igsLV73JwQFtax9Lq/oY9B+Gh95u7L8gt7BwjXkRTfxhf8rlMnXvqalWO6D3
d3/WtBIbSli8f8zRnI5lcW9jcUO5mEGfTRL9wci+BMMOuNd+4ecIUBZMeRvDSmpJ
KcJurvc3nMatO+EkB71TStiOBjjlT2+4NqBYqqgPkIt+5t4ktJ+OMx6uKBPX6YsM
HDBBCgsgawDywKUWmGLziGB8RVO7tTg5r4dt+lr7jzUmsqwusyJRPmhyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVl3sjnoeYbCMiPJeUBq2pIbGgBMB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXvhlVzn
iklzg6uO4v4GjmpGpHEvoYVd9A6Nztb7D+hKU8ZlrRv2rE2vRurQC5gwHMvM/Jo9
i/EoZnZBhEzOuh8gdKoeGSiLKJOlh6YESyHpQgGx9Iwe/p1zQZ+iToX5nRoy2GQv
bxf/i0/153qbXh8Eb2E1VF8+VG/0MqU+uEt3DWKMzN1zm0K5cdNUXG31BY5TW6IM
2KWKjPeIV6sV3vGosmRoSIRmcZgGOTx2IDbmyP9Tq5iteVETLP4i4atdURe1UCG3
rJBr4ADdolor3mfoBwEvMLrPtOvZeUo9dsmw7Cr6BjrrUYNouF2T6wiiAOcfIrQ9
rkVxMMi2GUK+Ig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:28 2026 by rpki-client