Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
File: 0Jp_f91UoXzl4SpBgutlJHn511g.mft (raw, json)
Hash identifier: /jNj+SmzsKiUY/YlbdRhFaQ+QJHN57MYDOeSG771pqw=
Subject key identifier: 2C:EB:DD:F5:65:99:E3:A1:D0:60:11:45:A5:85:6E:93:B2:10:8A:10
Authority key identifier: D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
Certificate issuer: /CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Certificate serial: 019D99D0C7FB4DBCEA58D0D5A920A61F98F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
Manifest number: 1743
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: 0Jp_f91UoXzl4SpBgutlJHn511g.crl (hash: jER3nYMuAtFMgu0hQEoZPxx7KLXdCls8AN8BFghIyv4=)
2: 7eWcGeApexXCyJ5zpUATMUfIfjE.roa (hash: 25j7Y9KcJOf9q796TODAMGOZw8uhZj4cuQLUqDrqWiw=)
3: eh5f2bSFFBPtD-itI_yMFOKVNl8.roa (hash: 1eTnOvtuGR3xM5v0Vi+oWqoLUpmMh/7COfXsHBvYGt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c7:fb:4d:bc:ea:58:d0:d5:a9:20:a6:1f:98:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09a7f7fdd54a17ce5e12a4182eb652479f9d758
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=2cebddf56599e3a1d0601145a5856e93b2108a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:00:71:e3:e6:96:90:b0:59:9f:83:65:07:
3c:51:43:d8:61:e4:c6:ec:1d:1f:a4:96:e7:90:64:
89:ec:c6:d9:cf:d4:a2:e2:7f:d2:aa:17:f6:af:6b:
eb:de:8f:a3:f6:dc:3b:36:ac:21:bf:98:81:7f:a5:
44:b7:2c:47:ab:8a:9f:32:e6:e1:50:28:f8:3d:53:
a9:85:32:0c:16:3d:63:0d:b7:13:ed:f0:2b:10:e1:
1d:0a:c8:76:6d:5a:9e:cd:1d:7b:a1:7d:91:b0:68:
2e:83:0d:bd:93:39:9a:a0:2f:3c:93:d2:3c:f8:fa:
26:8e:75:1d:2d:d1:26:04:c5:c2:ca:63:1b:db:b6:
7b:17:c7:3f:57:06:42:3b:f5:8c:00:62:b4:53:34:
22:f1:a1:c3:25:03:99:47:31:2e:37:2d:8b:e0:00:
0f:b0:d0:a8:29:92:0f:0b:e8:8b:fb:f6:28:de:e2:
d3:a8:94:52:fb:7a:91:0d:26:d9:a2:0d:1d:c7:f9:
4f:31:44:69:ed:3b:7e:cb:8c:ca:97:c6:c7:e1:b1:
f0:04:a7:5e:fa:73:48:7f:5a:5b:ca:fc:7c:9b:1f:
93:f1:dc:04:58:c2:74:dd:70:28:67:5f:ae:16:be:
4c:b3:33:7f:72:fb:34:36:93:64:88:46:6a:fe:e6:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:DD:F5:65:99:E3:A1:D0:60:11:45:A5:85:6E:93:B2:10:8A:10
X509v3 Authority Key Identifier:
keyid:D0:9A:7F:7F:DD:54:A1:7C:E5:E1:2A:41:82:EB:65:24:79:F9:D7:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Jp_f91UoXzl4SpBgutlJHn511g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b3d97e-5cc2-4669-b378-5875a4489dba/1/0Jp_f91UoXzl4SpBgutlJHn511g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7e:e9:8f:cd:2c:27:b4:25:22:0c:7c:83:8f:f1:84:19:f0:
5d:38:7b:e4:d1:d5:d0:46:f0:56:53:85:89:17:2b:04:8d:e8:
8f:7a:1e:58:31:38:8e:82:75:14:66:87:9a:60:ca:9f:17:cb:
d8:e2:75:db:0e:06:f2:7d:03:d3:1f:15:b5:b6:bd:57:e3:22:
e9:47:8a:73:2a:8b:34:79:e5:1c:10:2f:73:94:c9:86:3a:bb:
bd:44:e7:50:05:89:2c:cb:04:3c:d4:9d:59:b6:1c:8f:54:5b:
8d:02:7a:99:25:48:53:0a:ac:e6:b3:45:64:ee:ee:69:cb:3b:
91:d3:31:2e:73:ba:5d:a4:66:0e:c7:5e:00:a8:86:81:a9:69:
de:40:fc:6a:50:3d:f5:3f:fb:0f:cf:85:5b:35:f1:38:1e:b1:
ea:4b:6f:54:1b:1b:b2:27:0b:df:0d:cf:a6:77:2b:42:b8:f6:
66:8e:48:3b:ca:d1:fe:74:fd:24:52:4d:e9:35:e5:b8:ad:6f:
82:ed:1c:1f:ca:93:47:d7:dd:de:43:68:5a:b7:6d:7a:bc:db:
61:66:99:dc:60:87:3c:99:f9:73:46:76:e4:ac:2c:8b:e8:6b:
43:b8:13:fd:4c:ca:12:de:a7:fb:90:b6:8b:8d:a9:f3:8b:3d:
63:ef:e7:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Mf7TbzqWNDVqSCmH5j5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWE3ZjdmZGQ1NGExN2NlNWUxMmE0MTgyZWI2NTI0Nzlm
OWQ3NTgwHhcNMjYwNDE3MDUwMTI5WhcNMjYwNDE4MDUwMTI5WjAzMTEwLwYDVQQD
EygyY2ViZGRmNTY1OTllM2ExZDA2MDExNDVhNTg1NmU5M2IyMTA4YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMMAcePmlpCwWZ+DZQc8UUPYYeTG
7B0fpJbnkGSJ7MbZz9Si4n/Sqhf2r2vr3o+j9tw7Nqwhv5iBf6VEtyxHq4qfMubh
UCj4PVOphTIMFj1jDbcT7fArEOEdCsh2bVqezR17oX2RsGgugw29kzmaoC88k9I8
+PomjnUdLdEmBMXCymMb27Z7F8c/VwZCO/WMAGK0UzQi8aHDJQOZRzEuNy2L4AAP
sNCoKZIPC+iL+/Yo3uLTqJRS+3qRDSbZog0dx/lPMURp7Tt+y4zKl8bH4bHwBKde
+nNIf1pbyvx8mx+T8dwEWMJ03XAoZ1+uFr5MszN/cvs0NpNkiEZq/uYBnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzr3fVlmeOh0GARRaWFbpOyEIoQMB8GA1UdIwQY
MBaAFNCaf3/dVKF85eEqQYLrZSR5+ddYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgt
NTg3NWE0NDg5ZGJhLzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9iM2Q5N2UtNWNjMi00NjY5LWIzNzgtNTg3NWE0NDg5ZGJh
LzEvMEpwX2Y5MVVvWHpsNFNwQmd1dGxKSG41MTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGn7pj80s
J7QlIgx8g4/xhBnwXTh75NHV0EbwVlOFiRcrBI3oj3oeWDE4joJ1FGaHmmDKnxfL
2OJ12w4G8n0D0x8Vtba9V+Mi6UeKcyqLNHnlHBAvc5TJhjq7vUTnUAWJLMsEPNSd
WbYcj1RbjQJ6mSVIUwqs5rNFZO7uacs7kdMxLnO6XaRmDsdeAKiGgalp3kD8alA9
9T/7D8+FWzXxOB6x6ktvVBsbsicL3w3PpncrQrj2Zo5IO8rR/nT9JFJN6TXluK1v
gu0cH8qTR9fd3kNoWrdterzbYWaZ3GCHPJn5c0Z25Kwsi+hrQ7gT/UzKEt6n+5C2
i42p84s9Y+/nNw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:32:09 2026 by rpki-client