Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: sRqp4aWE+Ma11w6+k+CPVPuATph04f7k043uP/yG89w=
Subject key identifier: 47:8E:7B:AD:C2:45:BB:FC:BD:29:B6:87:61:73:54:40:D1:34:6D:C0
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019D265FD9FFBF801DD5E9E535ED9BE302E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: 2kwVco4VQoCFZ/O3Xh1OPBJ76gANLLhDb/oOLlvKUkE=)
2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d9:ff:bf:80:1d:d5:e9:e5:35:ed:9b:e3:02:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=478e7badc245bbfcbd29b68761735440d1346dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:14:fc:8c:73:70:fc:e8:38:e4:f9:1a:eb:
ee:d0:2e:90:e9:a5:35:65:91:25:d7:6f:9f:3d:48:
4a:98:ce:9d:57:e6:33:97:6c:e7:97:d0:44:64:b7:
bd:f2:68:53:4a:89:57:85:e8:9f:45:23:4a:a5:d1:
72:8a:22:32:48:22:00:1d:37:e8:63:f4:c9:66:3a:
cf:44:13:0c:0c:6c:fb:96:bd:33:ad:02:31:7e:f5:
51:2b:db:f4:82:58:ed:66:cd:d6:dc:a1:1b:b2:f9:
3f:b5:16:80:8b:5a:1f:55:30:c1:c3:1c:6d:cf:6f:
7a:ca:71:17:28:20:bd:b7:86:2b:bb:18:be:28:4d:
1f:a5:d7:6e:89:52:0b:cd:27:44:40:53:86:b9:a9:
d1:a8:7c:97:67:3f:c0:e1:e1:58:ca:09:e5:1a:ab:
b6:5c:5f:13:65:06:d9:ff:b7:db:a0:cc:63:aa:08:
ce:de:c0:97:91:f9:f8:c9:f4:f6:48:4f:95:e9:2a:
43:14:36:26:0d:1f:ef:75:77:fa:80:b8:c1:df:2f:
a5:c9:c1:a9:99:94:00:33:43:00:f0:5a:b7:44:b1:
7e:c1:1a:35:1c:38:f2:0e:ac:54:d2:22:3d:2c:88:
59:56:27:4f:c9:70:83:64:2c:13:37:20:61:36:01:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8E:7B:AD:C2:45:BB:FC:BD:29:B6:87:61:73:54:40:D1:34:6D:C0
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f6:a8:ce:35:84:00:6a:9a:07:4c:94:71:b3:de:3f:97:af:
93:35:5f:1c:ef:23:c5:03:fc:85:c2:ed:d9:dc:b1:7a:f4:11:
2c:c2:40:ac:c2:36:1c:a3:80:49:65:17:21:57:83:ba:98:6e:
86:20:10:03:04:54:23:b2:16:e5:0c:13:6a:1c:80:2b:4c:00:
80:ea:35:eb:12:84:c6:3f:b5:c4:91:6b:b7:1f:c2:e9:43:fa:
70:b7:90:86:20:5a:1c:f7:fb:7a:12:ba:d8:52:7b:d9:a2:c1:
de:a9:67:b4:2b:ce:19:74:ac:af:4c:42:24:bb:dc:49:56:ae:
57:72:b4:ca:7a:c0:29:99:8c:93:25:c7:8e:cc:7d:2a:08:18:
fb:2e:dc:4c:ff:4e:19:90:91:6a:d8:92:04:fa:80:7e:7f:ae:
61:38:0b:c9:f1:b7:03:dc:24:66:e9:3c:4c:2e:a5:e8:cf:1e:
30:cb:a0:b6:b8:4d:6b:30:e4:8b:49:e9:9e:7d:1e:d6:33:d8:
34:14:d6:f6:40:c5:07:26:f8:8b:93:cd:b9:59:95:35:4b:1c:
26:6f:c7:af:ec:0f:3a:d8:2b:7c:c5:9c:90:90:0a:a6:9e:dc:
8e:d9:ee:39:bf:25:4c:45:93:a3:d8:e7:63:bc:c0:b9:11:5d:
73:72:6b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9n/v4Ad1enlNe2b4wLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2FkMmExZDlhYjVjOWI0ZmJiNGU1ZTAyNTIxZWUwNTJi
ODlkNWYwHhcNMjYwMzI1MTkwMTQ5WhcNMjYwMzI2MTkwMTQ5WjAzMTEwLwYDVQQD
Eyg0NzhlN2JhZGMyNDViYmZjYmQyOWI2ODc2MTczNTQ0MGQxMzQ2ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPkU/IxzcPzoOOT5Guvu0C6Q6aU1
ZZEl12+fPUhKmM6dV+Yzl2znl9BEZLe98mhTSolXheifRSNKpdFyiiIySCIAHTfo
Y/TJZjrPRBMMDGz7lr0zrQIxfvVRK9v0gljtZs3W3KEbsvk/tRaAi1ofVTDBwxxt
z296ynEXKCC9t4Yruxi+KE0fpdduiVILzSdEQFOGuanRqHyXZz/A4eFYygnlGqu2
XF8TZQbZ/7fboMxjqgjO3sCXkfn4yfT2SE+V6SpDFDYmDR/vdXf6gLjB3y+lycGp
mZQAM0MA8Fq3RLF+wRo1HDjyDqxU0iI9LIhZVidPyXCDZCwTNyBhNgF2BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeOe63CRbv8vSm2h2FzVEDRNG3AMB8GA1UdIwQY
MBaAFI060qHZq1ybT7tOXgJSHuBSuJ1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAt
NGE5ZTI5NjE1YzA1LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hMmJmMzUtNTRhMy00Zjc4LWI3MjAtNGE5ZTI5NjE1YzA1
LzEvalRyU29kbXJYSnRQdTA1ZUFsSWU0Rks0blY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfaozjWE
AGqaB0yUcbPeP5evkzVfHO8jxQP8hcLt2dyxevQRLMJArMI2HKOASWUXIVeDuphu
hiAQAwRUI7IW5QwTahyAK0wAgOo16xKExj+1xJFrtx/C6UP6cLeQhiBaHPf7ehK6
2FJ72aLB3qlntCvOGXSsr0xCJLvcSVauV3K0ynrAKZmMkyXHjsx9KggY+y7cTP9O
GZCRatiSBPqAfn+uYTgLyfG3A9wkZuk8TC6l6M8eMMugtrhNazDki0npnn0e1jPY
NBTW9kDFByb4i5PNuVmVNUscJm/Hr+wPOtgrfMWckJAKpp7cjtnuOb8lTEWTo9jn
Y7zAuRFdc3JriQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client