Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft
File: Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft (raw, json)
Hash identifier: GgB6y6YLxp39z0JXgKF7ejcfcQ10kyMJvVccXHCjglU=
Subject key identifier: AE:24:A0:E1:30:39:23:CB:FC:21:BE:86:27:9A:ED:60:F0:01:1C:DA
Authority key identifier: 27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C
Certificate issuer: /CN=271f6c1770313c098ac3fcca409fa0a85f7aec1c
Certificate serial: 019D333EDD29D8CBDE82051660121FBAD114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft
Manifest number: D4
Signing time: Sat 28 Mar 2026 07:00:51 +0000
Manifest this update: Sat 28 Mar 2026 07:00:51 +0000
Manifest next update: Sun 29 Mar 2026 07:00:51 +0000
Files and hashes: 1: Jx9sF3AxPAmKw_zKQJ-gqF967Bw.crl (hash: ZGmtbfbXRwd6aLNx7/o8fw7XA5wLTYAr7jbyLs/C8r0=)
2: bjjAALgFVUM3aFXnho1YkQLd90A.roa (hash: b9O6VtHaS4ecpyD2zgO7fBR68/h1giUVaDWXCjvnsVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:dd:29:d8:cb:de:82:05:16:60:12:1f:ba:d1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271f6c1770313c098ac3fcca409fa0a85f7aec1c
Validity
Not Before: Mar 28 07:00:51 2026 GMT
Not After : Mar 29 07:00:51 2026 GMT
Subject: CN=ae24a0e1303923cbfc21be86279aed60f0011cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:ae:1b:67:fb:86:7e:b2:44:15:6a:9c:a4:
08:bb:12:b0:bf:e9:3d:ab:75:2c:6e:51:80:ce:26:
f3:dd:84:05:1c:1d:02:90:14:0e:50:6e:4e:b3:15:
d1:b6:c5:46:fd:06:19:d7:34:a7:26:0c:cb:db:fa:
bf:32:9d:8b:c7:c5:3c:b6:ef:7a:b0:c1:62:fe:8d:
8f:b1:b7:ad:d8:3d:a6:b5:3d:30:c6:a5:5a:03:65:
db:09:a3:05:d0:65:75:8c:e9:ba:4f:fa:b4:c5:50:
96:dc:ff:95:2f:59:3d:07:a9:21:c9:36:e6:21:e3:
24:f1:65:83:3a:0f:d5:a9:df:af:43:4b:9a:cd:f4:
d7:7c:f4:cb:9d:0e:e8:96:f2:e9:3e:b3:d3:1a:19:
5d:63:49:dd:8a:5c:5d:b8:c8:45:78:91:b0:ef:75:
f0:d9:3a:22:ad:dd:1d:c4:03:37:46:cd:20:a4:99:
01:1b:6f:d1:46:85:2b:94:92:e6:c1:c4:07:3b:c2:
49:a4:14:cf:1e:47:bc:67:38:7d:31:28:cd:8c:da:
46:bc:2e:e6:8c:62:40:ae:b3:af:45:db:9b:ca:e3:
dc:ca:d3:c0:bc:5f:16:a2:e7:c3:77:13:e9:76:3d:
fe:d4:8a:38:97:35:5a:1a:d9:01:fa:ed:26:e4:9a:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:A0:E1:30:39:23:CB:FC:21:BE:86:27:9A:ED:60:F0:01:1C:DA
X509v3 Authority Key Identifier:
keyid:27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8c:6f:af:55:14:50:4b:42:19:3f:79:02:cc:a0:8f:46:d9:
90:6e:a9:b4:9a:1d:e9:32:a9:b5:b2:d7:5d:f3:09:88:28:a1:
d6:92:75:af:9b:a5:c1:2b:fd:95:ab:74:81:9e:d4:d1:3d:55:
89:d3:ed:20:c5:7c:ae:c9:10:58:8a:bd:93:0d:33:be:ac:47:
47:ce:2e:63:05:73:16:0f:7d:d4:2f:1e:1a:39:b5:0c:e6:dd:
b6:ea:83:ce:63:f8:e9:c5:06:9b:c5:c6:bf:14:c5:29:2e:41:
4c:55:05:32:c0:07:23:d3:0e:d2:c2:c5:11:47:79:59:8a:f0:
1e:8f:02:72:1b:37:c5:a1:5c:cc:37:5d:cb:62:df:7f:bc:65:
07:25:5c:9b:3e:92:eb:4f:5c:6e:72:5f:53:04:11:42:43:0a:
87:24:9d:4a:0f:28:c2:69:f7:63:83:d0:bc:ec:8b:2a:e5:04:
86:27:e9:54:f2:08:fc:ee:b2:e0:79:b9:0b:ff:02:1b:0c:84:
84:a7:4d:07:ba:31:bb:53:cd:3e:0c:2c:69:65:a0:b2:62:b3:
ee:a4:91:a4:6a:72:84:a7:ec:61:e9:14:14:38:1f:c2:05:b7:
b5:66:8d:9c:ff:e9:3f:fb:ef:fc:a2:17:78:75:04:45:27:bf:
f4:5d:36:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPt0p2MveggUWYBIfutEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWY2YzE3NzAzMTNjMDk4YWMzZmNjYTQwOWZhMGE4NWY3
YWVjMWMwHhcNMjYwMzI4MDcwMDUxWhcNMjYwMzI5MDcwMDUxWjAzMTEwLwYDVQQD
EyhhZTI0YTBlMTMwMzkyM2NiZmMyMWJlODYyNzlhZWQ2MGYwMDExY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV+uG2f7hn6yRBVqnKQIuxKwv+k9
q3UsblGAzibz3YQFHB0CkBQOUG5OsxXRtsVG/QYZ1zSnJgzL2/q/Mp2Lx8U8tu96
sMFi/o2Psbet2D2mtT0wxqVaA2XbCaMF0GV1jOm6T/q0xVCW3P+VL1k9B6khyTbm
IeMk8WWDOg/Vqd+vQ0uazfTXfPTLnQ7olvLpPrPTGhldY0ndilxduMhFeJGw73Xw
2Toird0dxAM3Rs0gpJkBG2/RRoUrlJLmwcQHO8JJpBTPHke8Zzh9MSjNjNpGvC7m
jGJArrOvRdubyuPcytPAvF8WoufDdxPpdj3+1Io4lzVaGtkB+u0m5Jo6SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4koOEwOSPL/CG+hiea7WDwARzaMB8GA1UdIwQY
MBaAFCcfbBdwMTwJisP8ykCfoKhfeuwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSng5c0YzQXhQQW1Ld196S1FKLWdxRjk2N0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jMTBiNWUtNmVlZS00OWEyLWI0NDct
MWU2ZGVkMTM4ZDE5LzEvSng5c0YzQXhQQW1Ld196S1FKLWdxRjk2N0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jMTBiNWUtNmVlZS00OWEyLWI0NDctMWU2ZGVkMTM4ZDE5
LzEvSng5c0YzQXhQQW1Ld196S1FKLWdxRjk2N0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIxvr1UU
UEtCGT95Asygj0bZkG6ptJod6TKptbLXXfMJiCih1pJ1r5ulwSv9lat0gZ7U0T1V
idPtIMV8rskQWIq9kw0zvqxHR84uYwVzFg991C8eGjm1DObdtuqDzmP46cUGm8XG
vxTFKS5BTFUFMsAHI9MO0sLFEUd5WYrwHo8Cchs3xaFczDddy2Lff7xlByVcmz6S
609cbnJfUwQRQkMKhySdSg8owmn3Y4PQvOyLKuUEhifpVPII/O6y4Hm5C/8CGwyE
hKdNB7oxu1PNPgwsaWWgsmKz7qSRpGpyhKfsYekUFDgfwgW3tWaNnP/pP/vv/KIX
eHUERSe/9F028g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:37 2026 by rpki-client