Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: N3HC/eB4s4ncTuiR3BEmKbQk4SovBVdx2I3vDZDZRZA=
Subject key identifier: 1E:BC:60:C3:D1:D0:67:4C:4F:2D:83:F0:B6:77:E1:E5:9F:9D:86:75
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019E1F109FC043CD5A2B756F6B81CFF86710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0E37
Signing time: Wed 13 May 2026 02:00:43 +0000
Manifest this update: Wed 13 May 2026 02:00:43 +0000
Manifest next update: Thu 14 May 2026 02:00:43 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: IvQPhCBngIvC/3I4rUEE05Lj96q13QcptlRS+uqnHAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:9f:c0:43:cd:5a:2b:75:6f:6b:81:cf:f8:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: May 13 02:00:43 2026 GMT
Not After : May 14 02:00:43 2026 GMT
Subject: CN=1ebc60c3d1d0674c4f2d83f0b677e1e59f9d8675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:ba:76:c0:62:22:9b:29:b5:f5:71:85:5e:
77:9f:8c:b7:e9:3b:bf:89:81:a4:e5:d7:9f:e4:0c:
4f:19:4e:83:fa:1a:ec:95:ed:f0:bb:a3:0f:23:16:
78:10:47:73:95:35:8f:e1:49:88:66:2b:b1:45:95:
97:4d:bd:c0:27:5c:be:00:9d:5c:8d:73:5a:93:96:
f2:56:fc:0a:e6:1f:77:db:f0:1d:10:b3:d7:36:9a:
1d:7c:0f:64:57:52:9f:71:d8:44:7a:3c:0d:c8:47:
f2:ba:2c:61:fc:7c:7c:d6:70:32:ab:be:fe:8c:53:
f8:cd:84:76:67:66:ca:a0:0c:97:cd:a6:00:51:9a:
ac:cd:47:0d:92:11:bd:5f:4c:9e:ba:66:02:16:90:
b0:0d:36:04:53:ea:cc:cb:92:d6:26:cb:91:31:4e:
c0:09:2e:1d:28:82:a4:d2:d8:5c:39:1e:b1:85:2f:
22:ed:3d:53:14:fd:bc:16:41:d2:77:38:f2:7c:bb:
21:17:9b:9a:79:15:6d:1d:84:c1:50:2a:c5:89:7b:
07:a4:51:3c:db:2c:e6:34:59:b0:d5:3e:04:2b:93:
f0:ac:9e:c4:f0:12:c5:98:73:0d:75:59:2d:05:01:
30:64:37:e9:1c:66:06:94:ff:5f:f6:03:c0:d2:94:
53:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:60:C3:D1:D0:67:4C:4F:2D:83:F0:B6:77:E1:E5:9F:9D:86:75
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7b:0b:c1:d6:ef:3f:7a:e8:49:5a:a9:a6:ba:58:90:e8:34:
33:56:a2:87:6f:8d:9e:e2:5a:3a:e3:a0:81:0d:24:2a:5b:ff:
87:20:b5:27:c5:ff:3a:e3:1a:32:ab:1d:2c:d5:de:a3:a5:7a:
0d:97:40:bf:d8:49:1f:e5:34:99:a1:96:23:ae:29:73:5f:65:
a8:d8:0a:7f:b6:7c:4b:3a:29:15:bb:cf:dc:87:93:ce:3b:18:
8c:61:e3:c0:38:c5:b0:62:27:68:76:79:1a:1c:29:53:a2:29:
00:4c:2f:1a:1a:06:8b:77:d3:d8:ae:0e:c3:8e:c3:5d:f8:ab:
47:4b:cb:f2:2a:4e:eb:1b:19:72:04:71:1c:cd:87:a2:50:a4:
5f:a2:2a:80:f8:ee:fc:50:50:99:1d:84:85:95:8d:2c:e2:c5:
74:b0:24:45:be:dc:39:f7:2d:3a:07:a0:39:d1:69:29:69:b4:
6b:7f:f3:b3:9a:24:a4:e0:56:0c:72:7b:be:17:6d:67:11:0f:
e1:47:b9:e7:e7:55:c0:ae:89:d6:ad:87:a9:6b:d1:69:ed:bf:
23:a0:01:8d:97:2f:c8:63:04:7d:48:e3:96:c2:c6:94:34:4f:
51:3f:2c:54:8d:cf:83:97:a1:01:ba:35:58:ac:38:6e:40:f6:
2f:7d:35:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEJ/AQ81aK3Vva4HP+GcQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkN2ZhYTViYjliM2VhNDAxMzdkYjg2YzQwNzJmY2UxNThm
NmE1Y2YwHhcNMjYwNTEzMDIwMDQzWhcNMjYwNTE0MDIwMDQzWjAzMTEwLwYDVQQD
EygxZWJjNjBjM2QxZDA2NzRjNGYyZDgzZjBiNjc3ZTFlNTlmOWQ4Njc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+y6dsBiIpsptfVxhV53n4y36Tu/
iYGk5def5AxPGU6D+hrsle3wu6MPIxZ4EEdzlTWP4UmIZiuxRZWXTb3AJ1y+AJ1c
jXNak5byVvwK5h932/AdELPXNpodfA9kV1KfcdhEejwNyEfyuixh/Hx81nAyq77+
jFP4zYR2Z2bKoAyXzaYAUZqszUcNkhG9X0yeumYCFpCwDTYEU+rMy5LWJsuRMU7A
CS4dKIKk0thcOR6xhS8i7T1TFP28FkHSdzjyfLshF5uaeRVtHYTBUCrFiXsHpFE8
2yzmNFmw1T4EK5PwrJ7E8BLFmHMNdVktBQEwZDfpHGYGlP9f9gPA0pRTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB68YMPR0GdMTy2D8LZ34eWfnYZ1MB8GA1UdIwQY
MBaAFI1/qlu5s+pAE324bEBy/OFY9qXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDIt
Zjk5OWUxYmViOTYxLzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zYmYyM2EtOTA0Yy00ZTRmLTlmMDItZjk5OWUxYmViOTYx
LzEvalgtcVc3bXo2a0FUZmJoc1FITDg0VmoycGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnsLwdbv
P3roSVqpprpYkOg0M1aih2+NnuJaOuOggQ0kKlv/hyC1J8X/OuMaMqsdLNXeo6V6
DZdAv9hJH+U0maGWI64pc19lqNgKf7Z8SzopFbvP3IeTzjsYjGHjwDjFsGInaHZ5
GhwpU6IpAEwvGhoGi3fT2K4Ow47DXfirR0vL8ipO6xsZcgRxHM2HolCkX6IqgPju
/FBQmR2EhZWNLOLFdLAkRb7cOfctOgegOdFpKWm0a3/zs5okpOBWDHJ7vhdtZxEP
4Ue55+dVwK6J1q2HqWvRae2/I6ABjZcvyGMEfUjjlsLGlDRPUT8sVI3Pg5ehAbo1
WKw4bkD2L301XA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:35 2026 by rpki-client