Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: JaUnPMnhxPdGXCAXP/YDAKfMAmmh/r1ULd2Rh+Mn3YY=
Subject key identifier: BF:49:8B:84:09:2C:AF:04:CD:3D:6C:01:1E:0F:2A:C2:26:C7:C4:3D
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 019DA378DDC69DF7A9AF25FF90B261DA3501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 123C
Signing time: Sun 19 Apr 2026 02:01:40 +0000
Manifest this update: Sun 19 Apr 2026 02:01:40 +0000
Manifest next update: Mon 20 Apr 2026 02:01:40 +0000
Files and hashes: 1: EXA4SpEwX1vQWpFirH7mk4IJU8M.roa (hash: Lyc+y0k9pCkViy1JNMhW8hiC3bm7cXEkAowTAltTXTA=)
2: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: aGzlViYySo9dWbLlQWfimtDVrIfgPGEXLjt9H4cVnNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:dd:c6:9d:f7:a9:af:25:ff:90:b2:61:da:35:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Apr 19 02:01:40 2026 GMT
Not After : Apr 20 02:01:40 2026 GMT
Subject: CN=bf498b84092caf04cd3d6c011e0f2ac226c7c43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:42:14:23:43:e4:4f:88:f4:b0:68:89:2d:
15:3b:90:1e:ac:89:c1:61:b8:42:89:72:e4:7b:1f:
2f:2b:26:01:a3:e2:a1:db:a3:fd:c8:5d:2d:98:62:
d9:a0:e2:68:53:2e:d0:91:6f:32:46:c0:ba:3d:80:
c9:87:97:5e:34:b6:4e:25:e2:b4:14:8a:7e:d5:17:
71:7a:53:d1:f5:2c:a6:5a:0e:dd:74:9c:ed:9a:f0:
36:c1:7d:c4:69:f3:58:56:a8:da:b7:a4:65:ee:63:
3c:79:28:ae:a6:ed:fa:67:b8:fd:fc:f5:8c:de:e9:
de:65:8e:9b:c6:ff:e0:ac:f5:3c:19:9a:13:93:3d:
4c:90:35:0e:f5:c9:3b:e7:b8:0e:26:2d:9e:72:db:
4f:11:f1:ff:1b:32:5c:16:a2:69:b9:4f:4a:b1:1b:
30:16:e0:43:4b:2f:b3:9e:f5:50:77:5b:fe:18:ce:
78:54:93:e8:87:c5:e8:fa:2d:c8:f3:9d:e0:6c:81:
59:a2:d1:fc:78:7f:41:2b:e2:27:72:db:19:43:5e:
e7:69:ba:2c:6e:1b:30:f0:3d:03:2d:3a:b9:53:bc:
07:41:98:13:52:ba:b2:5a:8b:83:2e:06:65:72:43:
ed:e7:0a:d6:fc:7c:64:1e:62:3c:48:82:91:5a:c9:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:49:8B:84:09:2C:AF:04:CD:3D:6C:01:1E:0F:2A:C2:26:C7:C4:3D
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:02:f0:70:11:bf:56:ef:c7:45:1d:e6:29:84:fc:b8:c1:22:
8f:cc:7c:f7:bb:43:3f:de:75:bf:7f:b3:e2:69:43:38:23:7c:
82:fd:e3:35:0c:fe:90:1d:8b:29:ae:8b:1b:c7:69:de:5f:03:
b3:57:54:fb:a2:d7:4e:9f:12:43:5e:96:75:1a:18:39:9e:d1:
e5:ab:75:64:4d:5b:92:ba:95:a1:40:44:c5:07:da:c1:93:d1:
36:fa:d6:35:50:5e:87:c5:ae:73:80:f7:e5:d2:88:10:b6:8c:
9f:82:33:f6:9e:da:5e:13:a5:65:86:fe:24:c9:bc:d9:87:91:
a4:93:c0:85:c4:80:26:30:c6:96:00:87:e6:e4:87:95:d2:5d:
c5:f6:93:1c:a8:4b:ba:59:96:5c:c3:ac:d1:e5:4e:1f:27:dc:
15:e0:c2:a2:1e:af:c4:da:b0:2c:b2:90:f6:d5:20:43:11:3a:
a9:d9:57:ff:bd:d1:dd:4a:cf:f5:21:5f:fd:be:28:8c:4a:ef:
7c:4b:d2:49:25:98:f0:45:a8:62:00:02:1b:61:20:80:5f:50:
38:d7:48:ad:21:b2:ca:a3:be:66:d5:2d:6e:d4:9e:2c:88:c4:
b6:08:fe:ff:78:a7:85:fb:cc:ed:9e:19:95:6c:ea:5d:54:ed:
be:9c:ce:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeN3GnfepryX/kLJh2jUBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx
ZjRlYzkwHhcNMjYwNDE5MDIwMTQwWhcNMjYwNDIwMDIwMTQwWjAzMTEwLwYDVQQD
EyhiZjQ5OGI4NDA5MmNhZjA0Y2QzZDZjMDExZTBmMmFjMjI2YzdjNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRCFCND5E+I9LBoiS0VO5AerInB
YbhCiXLkex8vKyYBo+Kh26P9yF0tmGLZoOJoUy7QkW8yRsC6PYDJh5deNLZOJeK0
FIp+1RdxelPR9SymWg7ddJztmvA2wX3EafNYVqjat6Rl7mM8eSiupu36Z7j9/PWM
3uneZY6bxv/grPU8GZoTkz1MkDUO9ck757gOJi2ecttPEfH/GzJcFqJpuU9KsRsw
FuBDSy+znvVQd1v+GM54VJPoh8Xo+i3I853gbIFZotH8eH9BK+InctsZQ17nabos
bhsw8D0DLTq5U7wHQZgTUrqyWouDLgZlckPt5wrW/HxkHmI8SIKRWsnYcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9Ji4QJLK8EzT1sAR4PKsImx8Q9MB8GA1UdIwQY
MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt
NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1
LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgLwcBG/
Vu/HRR3mKYT8uMEij8x897tDP951v3+z4mlDOCN8gv3jNQz+kB2LKa6LG8dp3l8D
s1dU+6LXTp8SQ16WdRoYOZ7R5at1ZE1bkrqVoUBExQfawZPRNvrWNVBeh8Wuc4D3
5dKIELaMn4Iz9p7aXhOlZYb+JMm82YeRpJPAhcSAJjDGlgCH5uSHldJdxfaTHKhL
ulmWXMOs0eVOHyfcFeDCoh6vxNqwLLKQ9tUgQxE6qdlX/73R3UrP9SFf/b4ojErv
fEvSSSWY8EWoYgACG2EggF9QONdIrSGyyqO+ZtUtbtSeLIjEtgj+/3inhfvM7Z4Z
lWzqXVTtvpzO9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:00 2026 by rpki-client