Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: 6UF2u6LEpjlTXU7SIghMconk6rT+bTqQLSVutMqIvtY=
Subject key identifier: 7A:91:33:2E:DD:02:40:64:5A:EB:3B:EE:DB:BB:03:CE:67:96:B9:9E
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019D9AE2B9000F5DE7C36D7B54F37FDAE415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 11B9
Signing time: Fri 17 Apr 2026 10:00:42 +0000
Manifest this update: Fri 17 Apr 2026 10:00:42 +0000
Manifest next update: Sat 18 Apr 2026 10:00:42 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: OTbQ2UM/hpZzaL8EaUlIet0XCa0YuORkEJI3C0bGBqQ=)
2: OHHaGHrJUG4Z7QEZTM3vHVpbnVE.roa (hash: nJnrlEE8x/srGp0O1q5atoaBywa0T1yFutOMsJNy5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b9:00:0f:5d:e7:c3:6d:7b:54:f3:7f:da:e4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Apr 17 10:00:42 2026 GMT
Not After : Apr 18 10:00:42 2026 GMT
Subject: CN=7a91332edd0240645aeb3beedbbb03ce6796b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:14:c8:fa:97:17:cd:d4:48:b7:f2:05:38:
4a:20:df:5f:33:17:cc:a6:7c:1e:33:2f:e0:4f:36:
50:57:e3:b3:de:17:13:9e:e1:3b:98:fc:30:b0:78:
8b:55:b9:74:6b:81:af:96:30:5f:a9:f5:57:ce:c6:
cd:38:a4:c5:c5:eb:05:14:36:5b:69:ea:c2:f5:9b:
d5:43:29:15:a8:65:0e:47:c1:b0:4c:39:40:12:12:
3d:ea:db:b7:36:24:76:7a:ea:90:ec:e8:2e:04:06:
f6:c0:ac:87:a9:ea:a1:d9:3a:4f:ff:a2:c7:df:70:
80:24:43:93:05:c9:eb:da:2e:67:71:14:bf:cc:4e:
ae:36:2c:2a:c2:b1:0b:0c:06:c4:b3:e1:4f:93:56:
59:36:34:99:e3:5b:48:5d:c4:32:83:0a:f7:a1:81:
48:00:8a:f1:1e:fa:c8:d3:5c:04:f2:52:eb:c9:26:
ed:9f:50:ec:e0:1b:72:37:9f:10:1c:ae:6f:83:b0:
a0:11:16:a6:e2:92:93:bf:8b:bd:b4:3c:b9:05:4d:
60:d6:33:c3:ba:96:20:4a:3e:f0:dd:a5:2a:1b:4c:
84:b1:22:b1:7a:b6:3e:f9:d3:e3:33:91:f3:17:15:
99:4d:4b:2f:f1:7b:ee:23:41:ce:a6:56:37:60:ed:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:91:33:2E:DD:02:40:64:5A:EB:3B:EE:DB:BB:03:CE:67:96:B9:9E
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fd:54:87:06:de:05:af:05:0c:79:27:36:fc:4a:83:9d:49:
cd:92:c0:b6:c7:bd:c7:34:a3:b2:a1:f6:0d:cd:b0:ca:ef:c4:
06:20:3a:ba:f3:5e:b8:4c:4f:1c:16:4e:be:be:8b:12:93:5d:
8d:bf:9c:3e:c9:a4:32:45:2a:19:bd:f5:c8:88:5e:36:09:13:
cd:32:b0:a1:aa:6c:88:8e:11:73:87:7d:f7:c9:4c:cd:24:8f:
b8:37:ec:79:2f:74:01:86:bb:35:71:86:e5:ec:21:d1:a5:27:
c9:08:7f:d3:9b:b7:da:74:2b:25:2a:b7:59:1e:1a:02:70:12:
64:08:26:7f:a2:1a:f0:fe:67:9a:37:2d:1c:4b:86:42:ac:a4:
7e:bf:1b:f8:4e:d2:b6:ec:4d:71:0e:3d:9d:de:5e:89:81:2a:
bc:a7:87:e1:62:16:55:95:aa:39:66:ff:4e:53:20:64:b2:46:
bf:86:73:cf:87:9e:e6:39:7e:ec:be:db:34:2b:fc:c1:7a:e3:
96:fe:ec:cf:3d:46:d2:b0:ca:9d:bf:69:30:17:a8:c2:bf:cf:
65:1b:73:26:18:70:f4:0a:7f:97:cf:a7:96:9e:f6:2f:93:67:
be:76:a2:a7:24:42:b1:a2:54:dd:65:db:b3:48:05:55:76:c4:
b2:ca:49:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4rkAD13nw217VPN/2uQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NTg3M2FlMjM1MGQwZTNlOGMzNTUzYmY5MDY0NjExMjc2
NGUxYzAwHhcNMjYwNDE3MTAwMDQyWhcNMjYwNDE4MTAwMDQyWjAzMTEwLwYDVQQD
Eyg3YTkxMzMyZWRkMDI0MDY0NWFlYjNiZWVkYmJiMDNjZTY3OTZiOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz4UyPqXF83USLfyBThKIN9fMxfM
pnweMy/gTzZQV+Oz3hcTnuE7mPwwsHiLVbl0a4GvljBfqfVXzsbNOKTFxesFFDZb
aerC9ZvVQykVqGUOR8GwTDlAEhI96tu3NiR2euqQ7OguBAb2wKyHqeqh2TpP/6LH
33CAJEOTBcnr2i5ncRS/zE6uNiwqwrELDAbEs+FPk1ZZNjSZ41tIXcQygwr3oYFI
AIrxHvrI01wE8lLrySbtn1Ds4BtyN58QHK5vg7CgERam4pKTv4u9tDy5BU1g1jPD
upYgSj7w3aUqG0yEsSKxerY++dPjM5HzFxWZTUsv8XvuI0HOplY3YO13uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqRMy7dAkBkWus77tu7A85nlrmeMB8GA1UdIwQY
MBaAFCZYc64jUNDj6MNVO/kGRhEnZOHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUt
ZmNkNGY3OTdkMzU2LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82M2MzNDQtYjUwZS00YWYwLTllOWUtZmNkNGY3OTdkMzU2
LzEvSmxoenJpTlEwT1BvdzFVNy1RWkdFU2RrNGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf1Uhwbe
Ba8FDHknNvxKg51JzZLAtse9xzSjsqH2Dc2wyu/EBiA6uvNeuExPHBZOvr6LEpNd
jb+cPsmkMkUqGb31yIheNgkTzTKwoapsiI4Rc4d998lMzSSPuDfseS90AYa7NXGG
5ewh0aUnyQh/05u32nQrJSq3WR4aAnASZAgmf6Ia8P5nmjctHEuGQqykfr8b+E7S
tuxNcQ49nd5eiYEqvKeH4WIWVZWqOWb/TlMgZLJGv4Zzz4ee5jl+7L7bNCv8wXrj
lv7szz1G0rDKnb9pMBeowr/PZRtzJhhw9Ap/l8+nlp72L5NnvnaipyRCsaJU3WXb
s0gFVXbEsspJdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:20 2026 by rpki-client