Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: zQvDcmYKSeyFchWWaxpULvk2+prpGk8YinIK+oF1LqU=
Subject key identifier: 53:2E:A6:C9:47:1D:8E:02:A3:D6:C0:5D:5D:BE:D7:43:C7:28:A0:B2
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019D27A8CDCCC4F5B3D63AE1C3261629AE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0F68
Signing time: Thu 26 Mar 2026 01:01:07 +0000
Manifest this update: Thu 26 Mar 2026 01:01:07 +0000
Manifest next update: Fri 27 Mar 2026 01:01:07 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: MTa5irOQ6YZN8O3hDusxk2CM0DfwqqDt9Wbv5AC6k7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:cd:cc:c4:f5:b3:d6:3a:e1:c3:26:16:29:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Mar 26 01:01:07 2026 GMT
Not After : Mar 27 01:01:07 2026 GMT
Subject: CN=532ea6c9471d8e02a3d6c05d5dbed743c728a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:c3:04:c6:be:64:19:7b:16:a4:40:71:60:
1f:70:f6:b0:60:07:90:ba:87:7d:d7:65:03:89:f7:
72:10:d6:5a:fb:97:7e:06:bf:32:0f:48:d0:31:91:
16:ba:fb:df:88:dc:46:17:4a:d5:54:36:b4:f8:47:
9a:0a:d4:48:ac:1d:0b:b0:1d:2c:7c:e0:0c:26:93:
91:c1:72:ea:b8:98:b0:82:48:d6:c4:55:df:1a:99:
67:f8:d2:e1:a5:1a:db:45:7a:2a:28:11:ed:b9:9b:
f6:75:cf:be:b5:c6:82:7b:8b:8c:07:22:d5:35:82:
1e:39:0c:cb:c6:e9:23:c0:d8:dd:83:08:85:87:db:
ad:98:fa:f4:a1:51:f6:8b:20:26:a3:8b:a2:2e:fb:
15:cc:fd:e6:9c:eb:3f:52:e0:9a:54:d8:2a:a7:5c:
87:dc:96:12:b3:81:83:b7:7f:02:1b:c1:f5:18:0e:
78:ee:fe:d0:d0:e5:0a:97:0c:fd:c3:6f:42:af:a1:
8a:c2:6e:76:8f:08:b1:92:16:71:e0:60:a0:0d:72:
b9:d3:77:51:64:71:d4:60:dd:4a:9c:85:76:41:f5:
6b:42:32:8d:fe:6a:ee:83:f3:2c:21:af:91:9f:c5:
44:16:20:15:4d:9d:13:d0:3c:93:0b:21:3b:d3:89:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2E:A6:C9:47:1D:8E:02:A3:D6:C0:5D:5D:BE:D7:43:C7:28:A0:B2
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:44:e1:f6:c6:28:ad:bc:37:37:a4:2c:05:30:ba:3b:a5:3f:
e1:59:89:54:85:f0:06:54:62:7c:53:2a:7a:51:68:af:67:53:
8f:e2:14:67:ec:3e:fc:05:c0:c7:6f:39:0f:70:f8:17:f9:28:
3f:4d:67:c6:c7:68:83:2e:a3:33:a0:95:8f:28:f4:df:b7:b3:
da:45:0b:d8:c5:bc:73:81:5d:11:63:ac:dc:41:c0:7e:14:4d:
cd:2d:98:24:c1:e6:ea:8a:ee:0c:10:1d:8b:b7:f1:06:15:aa:
d6:5c:b9:23:e9:e8:86:50:ad:17:ea:34:50:bb:f8:8c:7f:c6:
df:60:cc:55:d7:45:48:53:f0:c8:cc:36:b4:c7:7b:7a:17:73:
18:e1:e8:19:c5:0f:b0:cd:96:29:2f:7f:19:c1:56:c2:6e:0c:
dd:55:c7:d8:80:50:82:37:b0:8f:d5:e2:71:a8:cb:60:c0:2f:
e8:63:b4:e5:ee:94:5f:51:b1:f7:19:4a:1c:24:0a:be:11:af:
b8:f9:42:fc:20:c9:19:5b:e9:bb:ca:f5:b8:9d:fa:b3:64:f0:
e2:01:59:dc:f4:e3:0e:75:4e:b2:6f:39:47:87:64:38:78:f3:
c0:38:8c:7f:8b:89:07:3e:a2:f8:10:22:c4:10:d6:07:e3:c6:
f0:89:e1:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqM3MxPWz1jrhwyYWKa5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjYwMzI2MDEwMTA3WhcNMjYwMzI3MDEwMTA3WjAzMTEwLwYDVQQD
Eyg1MzJlYTZjOTQ3MWQ4ZTAyYTNkNmMwNWQ1ZGJlZDc0M2M3MjhhMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xXDBMa+ZBl7FqRAcWAfcPawYAeQ
uod912UDifdyENZa+5d+Br8yD0jQMZEWuvvfiNxGF0rVVDa0+EeaCtRIrB0LsB0s
fOAMJpORwXLquJiwgkjWxFXfGpln+NLhpRrbRXoqKBHtuZv2dc++tcaCe4uMByLV
NYIeOQzLxukjwNjdgwiFh9utmPr0oVH2iyAmo4uiLvsVzP3mnOs/UuCaVNgqp1yH
3JYSs4GDt38CG8H1GA547v7Q0OUKlwz9w29Cr6GKwm52jwixkhZx4GCgDXK503dR
ZHHUYN1KnIV2QfVrQjKN/mrug/MsIa+Rn8VEFiAVTZ0T0DyTCyE704nOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMupslHHY4Co9bAXV2+10PHKKCyMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIETh9sYo
rbw3N6QsBTC6O6U/4VmJVIXwBlRifFMqelFor2dTj+IUZ+w+/AXAx285D3D4F/ko
P01nxsdogy6jM6CVjyj037ez2kUL2MW8c4FdEWOs3EHAfhRNzS2YJMHm6oruDBAd
i7fxBhWq1ly5I+nohlCtF+o0ULv4jH/G32DMVddFSFPwyMw2tMd7ehdzGOHoGcUP
sM2WKS9/GcFWwm4M3VXH2IBQgjewj9XicajLYMAv6GO05e6UX1Gx9xlKHCQKvhGv
uPlC/CDJGVvpu8r1uJ36s2Tw4gFZ3PTjDnVOsm85R4dkOHjzwDiMf4uJBz6i+BAi
xBDWB+PG8Inhfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:19 2026 by rpki-client