Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: ilkPxnUBsWVSP29mrjywmZYLKuzTJ7uvNJ3fMrrIEnk=
Subject key identifier: D3:D0:0F:E4:6C:27:D7:B9:94:2E:AE:C6:58:C2:D0:08:18:8C:4F:86
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019D2704279BA3B96DDCBFB4612256786C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 04E0
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: geSA4YY7UdYs0vGZo/028a0XummFCShdwfZD3WMcRuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:27:9b:a3:b9:6d:dc:bf:b4:61:22:56:78:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=d3d00fe46c27d7b9942eaec658c2d008188c4f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:1f:8f:00:45:a9:1a:3f:e7:87:13:9c:3c:
4d:6f:fa:a7:a6:52:94:1c:16:c4:cb:0b:b8:43:73:
56:d5:f2:15:0a:0d:fb:38:71:40:9b:ec:31:94:91:
07:de:b0:57:5e:a1:36:a0:7a:25:e9:17:35:ae:27:
f4:c5:a3:1d:f6:95:17:72:7c:2b:fa:cc:26:e2:97:
a6:e3:f1:94:65:43:e6:1c:4a:bd:f2:96:be:e6:6b:
14:f6:93:1b:9b:ed:45:5d:a3:9f:33:24:16:83:b9:
9e:d3:0f:9e:ae:8b:b3:4d:4c:90:f3:17:66:0b:5a:
9d:53:d4:07:1d:84:01:94:7a:98:5d:91:50:c6:3b:
d0:29:08:56:09:e0:61:21:bc:49:01:71:c5:0c:1f:
c2:c2:55:3a:b5:6f:61:76:6d:8b:fa:50:25:b0:b7:
58:7a:29:5f:b9:6a:97:a9:f9:b5:38:41:2a:4c:f1:
3b:e4:82:78:43:9f:39:62:46:ce:5b:40:46:5c:d8:
61:b2:0f:2b:22:a8:d8:24:1a:65:45:4c:2a:e2:d0:
7f:14:3a:20:28:63:b4:02:24:7c:e8:60:aa:b9:5a:
b1:5e:a9:99:08:30:92:13:cc:10:6f:5a:88:bc:92:
93:0e:a5:c4:d2:11:d7:a9:8b:49:f5:c8:5a:84:4a:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D0:0F:E4:6C:27:D7:B9:94:2E:AE:C6:58:C2:D0:08:18:8C:4F:86
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:d9:f2:7e:39:f0:f8:94:c3:b9:ab:45:3c:9c:39:71:a0:
fe:36:13:85:c5:c3:35:f2:64:6d:98:10:b1:d6:da:b9:70:f7:
b0:bf:20:69:b8:e6:fb:d3:b1:b5:f1:91:17:bc:bc:36:72:01:
cf:dd:a0:b1:a4:1d:a3:e8:2f:1f:ae:d8:3c:f7:4d:d9:67:02:
7c:17:35:74:95:61:70:88:e9:0c:17:15:78:08:17:b1:90:95:
90:b4:17:17:87:b4:4f:36:9f:55:f7:44:92:a1:0c:c3:d0:41:
89:6e:2d:eb:5a:d0:c6:da:4b:37:79:9a:91:d3:b5:57:9d:74:
a8:12:c7:cc:71:b0:92:50:f2:26:9f:0c:43:f5:fc:6d:39:c9:
57:88:5a:87:5d:e3:4d:cb:79:d1:dd:e4:b2:01:19:87:0f:5b:
a3:ef:b0:fa:dc:4d:f7:7b:c4:9f:22:36:47:20:59:77:df:ac:
fc:6e:b1:ff:23:da:bc:49:33:6b:db:f9:53:a6:d9:c7:78:9a:
84:7e:b4:e3:c4:80:e1:e0:b8:0c:39:24:30:27:08:a0:5a:c9:
08:12:75:7f:d0:12:c0:89:d9:65:e7:c8:70:81:e8:3d:1f:af:
99:eb:1e:e6:02:77:17:d0:8e:a1:2d:65:97:30:61:aa:92:43:
e4:8b:af:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCebo7lt3L+0YSJWeGyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjYwMzI1MjIwMTE2WhcNMjYwMzI2MjIwMTE2WjAzMTEwLwYDVQQD
EyhkM2QwMGZlNDZjMjdkN2I5OTQyZWFlYzY1OGMyZDAwODE4OGM0Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw00fjwBFqRo/54cTnDxNb/qnplKU
HBbEywu4Q3NW1fIVCg37OHFAm+wxlJEH3rBXXqE2oHol6Rc1rif0xaMd9pUXcnwr
+swm4pem4/GUZUPmHEq98pa+5msU9pMbm+1FXaOfMyQWg7me0w+erouzTUyQ8xdm
C1qdU9QHHYQBlHqYXZFQxjvQKQhWCeBhIbxJAXHFDB/CwlU6tW9hdm2L+lAlsLdY
eilfuWqXqfm1OEEqTPE75IJ4Q585YkbOW0BGXNhhsg8rIqjYJBplRUwq4tB/FDog
KGO0AiR86GCquVqxXqmZCDCSE8wQb1qIvJKTDqXE0hHXqYtJ9chahEqzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPQD+RsJ9e5lC6uxljC0AgYjE+GMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDrZ8n45
8PiUw7mrRTycOXGg/jYThcXDNfJkbZgQsdbauXD3sL8gabjm+9OxtfGRF7y8NnIB
z92gsaQdo+gvH67YPPdN2WcCfBc1dJVhcIjpDBcVeAgXsZCVkLQXF4e0TzafVfdE
kqEMw9BBiW4t61rQxtpLN3makdO1V510qBLHzHGwklDyJp8MQ/X8bTnJV4hah13j
Tct50d3ksgEZhw9bo++w+txN93vEnyI2RyBZd9+s/G6x/yPavEkza9v5U6bZx3ia
hH6048SA4eC4DDkkMCcIoFrJCBJ1f9ASwInZZefIcIHoPR+vmese5gJ3F9COoS1l
lzBhqpJD5Iuv0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:46 2026 by rpki-client