Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier: 20kVDhOurteWfqGweBIkcFOWAvgt7TzFKT3TvhEnkyY=
Subject key identifier: 33:9B:4B:72:5F:48:4C:F6:9D:46:99:9B:6C:D7:3F:49:59:3D:F8:6F
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 019CAB34253B749988301CA182FEAC8B6465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number: 171B
Signing time: Sun 01 Mar 2026 21:00:47 +0000
Manifest this update: Sun 01 Mar 2026 21:00:47 +0000
Manifest next update: Mon 02 Mar 2026 21:00:47 +0000
Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: yZ3fDkVsZmvVEe0IXszEeeFVC2r1uULhFulLy2j3cUM=)
2: KsLpYaplYWekI62QRi3E0G61Ms4.roa (hash: PFuTGnOnXeAK/sML2FBSdaIxc5MVu6TA5GmDr9dlzjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:25:3b:74:99:88:30:1c:a1:82:fe:ac:8b:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Mar 1 21:00:47 2026 GMT
Not After : Mar 2 21:00:47 2026 GMT
Subject: CN=339b4b725f484cf69d46999b6cd73f49593df86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:dc:c0:ba:a6:ed:4f:24:8c:7d:c2:c2:15:
c8:3f:b0:d3:e4:c6:e2:72:d4:c7:67:1c:c7:9e:92:
f0:c1:0e:3a:ac:40:d0:86:01:52:76:18:84:0c:fd:
58:3d:28:6c:b5:5f:bf:63:6e:ee:17:2e:8a:f9:a6:
bf:ee:6f:b5:58:ac:9e:f3:9f:8a:34:40:8c:18:c8:
d4:ac:1e:98:62:6d:3a:0f:b0:8b:66:19:53:c4:7e:
af:85:0e:af:07:d0:3b:9f:92:99:68:31:04:c2:26:
ef:2c:59:a7:73:1c:27:a1:0f:68:8c:c9:e7:a0:8e:
81:e8:cc:51:f4:31:47:b9:86:61:28:cb:70:9c:eb:
5e:11:45:f8:60:60:1c:02:b2:95:a4:17:49:16:a2:
61:61:26:20:5d:de:7b:7c:06:eb:e0:d5:c9:e2:ff:
4f:a1:7f:a0:94:4d:9e:0c:cc:b2:ab:68:c2:83:bb:
94:0b:d9:93:3a:fb:73:60:00:1b:a9:8f:83:5d:79:
49:37:74:5a:21:22:4c:cd:b7:6a:6a:40:77:8f:10:
00:d7:dd:b8:86:45:ec:e7:67:50:21:8b:f8:cb:85:
31:5b:f5:09:9f:f2:46:72:b8:c9:58:7a:2f:bf:29:
1e:ac:8f:51:e1:1b:c8:0c:58:3c:24:70:de:76:97:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:4B:72:5F:48:4C:F6:9D:46:99:9B:6C:D7:3F:49:59:3D:F8:6F
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:ef:96:9b:24:a3:18:41:cf:df:1d:a7:72:93:ad:2b:1c:
9f:da:fe:77:0b:ed:09:df:33:6c:4b:62:3b:8e:92:51:a5:fb:
52:49:4b:b0:17:81:17:4d:8a:c7:06:77:9c:0f:83:6e:b2:45:
be:66:f0:4e:fb:7f:c3:d2:83:74:9e:95:08:fd:16:9d:70:ac:
0f:77:8b:62:1d:d0:a9:a9:45:a9:85:20:bd:b7:08:b5:b1:e5:
a6:5b:af:af:a0:00:d0:72:f8:1f:67:ed:22:1e:fa:63:77:87:
9d:ee:ae:34:2f:dd:2b:fa:a6:d6:a3:f0:ed:6c:2e:82:78:c3:
27:40:00:66:b9:1b:52:fe:22:86:94:9a:bf:f2:11:56:ed:a0:
0b:a4:4b:9a:bf:e0:e8:f2:97:84:af:66:14:a7:b3:68:f5:fd:
d9:5c:1d:d7:38:2b:01:a3:ea:f9:df:ce:b6:c5:53:1b:47:d6:
d5:1d:ef:e0:7e:37:b8:4e:ef:00:d1:12:ab:52:d8:3e:47:15:
94:82:de:39:bc:e8:18:93:8d:5b:ca:d1:90:b8:c1:0b:aa:a4:
e6:8b:8a:df:eb:9f:e5:df:4e:73:c5:e0:62:44:25:55:ad:d1:
d1:a9:8a:06:bb:52:37:0e:c8:a4:fd:6e:bb:07:d5:c6:a4:b9:
09:fa:a7:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNCU7dJmIMByhgv6si2RlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2
MTE4NjAwHhcNMjYwMzAxMjEwMDQ3WhcNMjYwMzAyMjEwMDQ3WjAzMTEwLwYDVQQD
EygzMzliNGI3MjVmNDg0Y2Y2OWQ0Njk5OWI2Y2Q3M2Y0OTU5M2RmODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg3cwLqm7U8kjH3CwhXIP7DT5Mbi
ctTHZxzHnpLwwQ46rEDQhgFSdhiEDP1YPShstV+/Y27uFy6K+aa/7m+1WKye85+K
NECMGMjUrB6YYm06D7CLZhlTxH6vhQ6vB9A7n5KZaDEEwibvLFmncxwnoQ9ojMnn
oI6B6MxR9DFHuYZhKMtwnOteEUX4YGAcArKVpBdJFqJhYSYgXd57fAbr4NXJ4v9P
oX+glE2eDMyyq2jCg7uUC9mTOvtzYAAbqY+DXXlJN3RaISJMzbdqakB3jxAA1924
hkXs52dQIYv4y4UxW/UJn/JGcrjJWHovvykerI9R4RvIDFg8JHDedpeFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDObS3JfSEz2nUaZm2zXP0lZPfhvMB8GA1UdIwQY
MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt
ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2
LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHLvlpsk
oxhBz98dp3KTrSscn9r+dwvtCd8zbEtiO46SUaX7UklLsBeBF02KxwZ3nA+DbrJF
vmbwTvt/w9KDdJ6VCP0WnXCsD3eLYh3QqalFqYUgvbcItbHlpluvr6AA0HL4H2ft
Ih76Y3eHne6uNC/dK/qm1qPw7WwugnjDJ0AAZrkbUv4ihpSav/IRVu2gC6RLmr/g
6PKXhK9mFKezaPX92Vwd1zgrAaPq+d/OtsVTG0fW1R3v4H43uE7vANESq1LYPkcV
lILeObzoGJONW8rRkLjBC6qk5ouK3+uf5d9Oc8XgYkQlVa3R0amKBrtSNw7IpP1u
uwfVxqS5Cfqnww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:41 2026 by rpki-client