Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: is6zNdSp8EToyi0siPVM51KE04FPNlnPaehEwe1D42g=
Subject key identifier: 15:98:26:F2:73:37:60:00:C0:DF:F4:F6:76:76:8B:92:DC:98:FC:26
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019DA48A5156B1B0AD7938006B618381572B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 17C6
Signing time: Sun 19 Apr 2026 07:00:21 +0000
Manifest this update: Sun 19 Apr 2026 07:00:21 +0000
Manifest next update: Mon 20 Apr 2026 07:00:21 +0000
Files and hashes: 1: JbQak1AHMgi1qfOaMonuPRObwoY.roa (hash: Juh7X9uOOXLlYXsFrZb1hTO8VS9wOnWEcXeGaWt5Akw=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: UB/9nhjp6DLJ+G6pYnggsXPFtmxBKFDEy1yZmv/AgTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:51:56:b1:b0:ad:79:38:00:6b:61:83:81:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Apr 19 07:00:21 2026 GMT
Not After : Apr 20 07:00:21 2026 GMT
Subject: CN=159826f273376000c0dff4f676768b92dc98fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:82:4e:9f:ca:bf:06:59:72:3f:97:9a:fa:
e4:62:d7:62:16:85:6a:75:f4:ac:c7:c6:5d:a3:47:
31:d8:9d:6d:74:0c:53:da:df:6e:db:62:a4:24:36:
c0:cf:74:9c:99:0e:9c:13:da:3e:ac:04:05:9d:a3:
9b:40:2f:99:7d:15:d9:a6:4f:2f:bd:1c:ab:d0:97:
db:ca:8b:f3:46:d9:d6:d3:6f:78:28:43:59:69:56:
36:e2:4b:36:7d:46:e6:bc:e3:85:5c:8e:7e:54:c4:
34:8e:66:3a:22:ff:3d:f9:bd:4e:30:73:d6:29:e0:
f5:7f:8a:f4:a7:92:b7:e4:9e:10:bc:92:13:d5:18:
f5:8d:19:2e:f2:66:33:87:88:13:d0:94:a0:27:c7:
23:b6:f6:48:0d:86:1a:cc:f1:aa:a3:da:ce:55:b8:
fc:83:78:b2:8a:79:7e:79:ee:b9:59:f3:25:f2:1c:
e0:7f:2c:f9:3a:2f:88:e3:f7:26:fa:c8:ef:01:5b:
22:e1:28:4a:e8:96:b5:47:d2:d2:4c:0e:ce:5e:2d:
51:03:67:a7:3c:e7:7b:64:e8:3f:37:fc:d0:2e:e0:
0f:aa:96:ab:6a:36:ca:4e:90:f3:4b:ce:2b:67:c0:
3f:9d:b9:56:cd:cd:f6:5f:05:a4:e5:99:65:4e:94:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:98:26:F2:73:37:60:00:C0:DF:F4:F6:76:76:8B:92:DC:98:FC:26
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:1d:d0:98:88:d2:50:59:b8:40:a5:2a:19:9e:77:91:4a:
7b:78:f8:5e:6a:28:4a:5f:af:49:7c:a4:c2:01:4b:0e:5d:7b:
f0:21:9f:5f:ee:df:2e:4a:0e:ed:36:16:86:87:0a:a2:c1:73:
5e:88:40:07:15:41:9c:39:b6:29:97:63:53:30:49:e6:ce:3a:
01:1a:ee:b9:46:3b:a0:e8:4f:99:44:76:e2:8d:ec:23:75:4b:
d1:fa:35:76:ac:53:0d:41:09:b5:ea:54:6c:c9:cd:5b:2f:c4:
16:f7:a0:b7:f3:3d:59:05:4b:2c:0a:93:4b:d6:ce:6b:c3:e4:
91:d8:e3:db:93:e3:ce:ea:1f:1b:be:fb:f2:29:d2:cb:58:8e:
66:e0:6b:6e:fb:68:df:38:eb:be:d1:08:2e:ee:f7:d9:29:04:
d2:91:85:a2:f7:9c:e1:b3:4c:ff:c8:7a:bd:5b:ba:0c:22:60:
38:42:2d:16:83:ac:6f:e4:31:d4:84:0d:65:d7:c3:79:a0:ef:
ad:aa:e6:ef:c2:0d:cc:77:9b:cb:ea:65:8e:db:c2:79:7f:ba:
5f:e9:48:31:34:41:e2:ee:27:fb:94:50:f9:9d:1d:f2:0c:b2:
ee:b8:96:b2:41:44:8c:89:98:9f:b5:c6:34:88:5d:c0:d7:66:
a3:57:3a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kilFWsbCteTgAa2GDgVcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNDQzN2YwNWNkZTZiMDA0MTE0OWY2MWM0NzNjOGVkMThk
YjRiNDQwHhcNMjYwNDE5MDcwMDIxWhcNMjYwNDIwMDcwMDIxWjAzMTEwLwYDVQQD
EygxNTk4MjZmMjczMzc2MDAwYzBkZmY0ZjY3Njc2OGI5MmRjOThmYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FiCTp/KvwZZcj+XmvrkYtdiFoVq
dfSsx8Zdo0cx2J1tdAxT2t9u22KkJDbAz3ScmQ6cE9o+rAQFnaObQC+ZfRXZpk8v
vRyr0JfbyovzRtnW0294KENZaVY24ks2fUbmvOOFXI5+VMQ0jmY6Iv89+b1OMHPW
KeD1f4r0p5K35J4QvJIT1Rj1jRku8mYzh4gT0JSgJ8cjtvZIDYYazPGqo9rOVbj8
g3iyinl+ee65WfMl8hzgfyz5Oi+I4/cm+sjvAVsi4ShK6Ja1R9LSTA7OXi1RA2en
POd7ZOg/N/zQLuAPqparajbKTpDzS84rZ8A/nblWzc32XwWk5ZllTpR//QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWYJvJzN2AAwN/09nZ2i5LcmPwmMB8GA1UdIwQY
MBaAFI1EN/Bc3msAQRSfYcRzyO0Y20tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalVRMzhGemVhd0JCRko5aHhIUEk3UmpiUzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82MjM5YTAtZjYxYi00ZDQ0LTk5ZmQt
NzFiOTA5MWVkYWIwLzEvalVRMzhGemVhd0JCRko5aHhIUEk3UmpiUzBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82MjM5YTAtZjYxYi00ZDQ0LTk5ZmQtNzFiOTA5MWVkYWIw
LzEvalVRMzhGemVhd0JCRko5aHhIUEk3UmpiUzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGAd0JiI
0lBZuEClKhmed5FKe3j4XmooSl+vSXykwgFLDl178CGfX+7fLkoO7TYWhocKosFz
XohABxVBnDm2KZdjUzBJ5s46ARruuUY7oOhPmUR24o3sI3VL0fo1dqxTDUEJtepU
bMnNWy/EFvegt/M9WQVLLAqTS9bOa8Pkkdjj25PjzuofG7778inSy1iOZuBrbvto
3zjrvtEILu732SkE0pGFovec4bNM/8h6vVu6DCJgOEItFoOsb+Qx1IQNZdfDeaDv
rarm78INzHeby+pljtvCeX+6X+lIMTRB4u4n+5RQ+Z0d8gyy7riWskFEjImYn7XG
NIhdwNdmo1c6Vw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 17:02:16 2026 by rpki-client