Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: deynBETtb0s2CoxBgKhakhAT6n+eR49Xu+1ph9KgC6A=
Subject key identifier: 35:3A:B3:D1:43:07:6A:4A:2C:F1:8D:DE:AC:01:40:48:A6:10:D0:81
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019D9D7591FFE43FCF31BF04427771B3305F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: A0
Signing time: Fri 17 Apr 2026 22:00:20 +0000
Manifest this update: Fri 17 Apr 2026 22:00:20 +0000
Manifest next update: Sat 18 Apr 2026 22:00:20 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: KmZoX5Se3clKHgRyc+xm68ieXMv5NwFY3VMvNdCsMjg=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:91:ff:e4:3f:cf:31:bf:04:42:77:71:b3:30:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Apr 17 22:00:20 2026 GMT
Not After : Apr 18 22:00:20 2026 GMT
Subject: CN=353ab3d143076a4a2cf18ddeac014048a610d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:c6:23:c6:20:7a:cd:62:76:94:b0:81:86:
30:e0:7f:11:04:e6:9b:61:0f:dd:27:57:ee:f4:4b:
93:71:9e:fa:ed:d6:c6:2e:53:af:b1:87:5c:39:e1:
03:4a:6e:2c:a5:bd:cc:63:9f:2e:55:6c:49:de:31:
ad:71:94:49:24:24:5d:dd:52:fa:ac:ac:5e:7a:8f:
95:4e:0e:b7:7a:8a:9b:20:6b:18:e7:53:d1:9f:47:
33:08:64:53:d5:c8:85:ce:fb:15:e9:da:9a:83:ee:
56:60:9d:ff:8b:ef:b7:0e:e9:a7:c1:40:ce:da:46:
fd:85:21:6d:37:55:07:1b:51:fb:c5:de:7d:38:73:
21:89:77:66:42:70:f9:69:b8:c7:ec:ea:a7:b8:e3:
d1:df:c8:56:dc:1b:a4:ea:9d:fa:3b:eb:ab:02:1d:
b4:19:10:77:f1:82:b3:2b:60:55:35:6d:a2:df:d0:
f8:81:8f:37:32:e4:89:44:cd:13:cc:91:0a:aa:52:
56:d8:c4:89:5f:04:9f:6b:1f:5d:7b:00:68:32:17:
48:74:49:06:60:ff:71:9e:c0:a4:62:f5:7d:0c:d4:
2a:37:07:10:a2:b1:40:2b:37:35:40:b5:fb:c8:52:
ba:ab:fc:f4:d4:c8:e9:40:2a:8a:2d:94:43:a1:9f:
90:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3A:B3:D1:43:07:6A:4A:2C:F1:8D:DE:AC:01:40:48:A6:10:D0:81
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0d:53:24:56:77:48:31:5b:dc:4f:98:b9:b8:1a:56:b9:f2:
17:71:25:09:77:08:25:a3:af:be:bd:7a:c8:f3:a5:a6:1c:a1:
e4:3f:0d:e1:7e:aa:be:f2:07:69:3d:b1:d3:67:e1:e2:e2:7e:
f0:fb:0f:38:27:04:d8:3f:b7:e8:62:a9:7a:fe:ec:cb:97:d2:
c6:0e:7c:c0:e6:b1:05:3a:9f:fd:4a:6a:ed:0c:2c:24:d7:d7:
b3:da:12:a9:01:41:5b:0d:f6:c3:b4:15:de:0a:02:00:8c:99:
64:26:08:40:1e:61:67:f9:9e:5d:93:83:1c:3a:14:35:48:c0:
15:70:d4:d9:1a:19:1c:a8:f6:09:ec:a5:86:a3:4f:19:89:b1:
17:cc:93:dc:98:da:24:0a:dc:14:67:ea:81:46:14:f6:d6:68:
af:dd:17:15:db:5f:b7:b6:27:de:f0:0a:b5:63:fa:6c:12:16:
36:27:ab:ee:0b:de:0e:e2:de:a0:f5:23:f4:3f:f7:29:e9:50:
cc:9b:a3:9e:3f:3d:ee:df:72:98:67:db:3e:bb:10:fa:ce:50:
1a:c9:46:69:07:f0:a6:96:bd:70:28:ef:a3:5c:d4:58:77:8f:
78:43:a5:a4:12:96:27:1c:7c:9c:96:db:8b:97:80:68:1a:81:
cb:b4:1e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddZH/5D/PMb8EQndxszBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmNjOTVmMTkwZjZmYWRmZmEzOTM0MTMxYzc0Y2IzYTA2
ODhkNzIwHhcNMjYwNDE3MjIwMDIwWhcNMjYwNDE4MjIwMDIwWjAzMTEwLwYDVQQD
EygzNTNhYjNkMTQzMDc2YTRhMmNmMThkZGVhYzAxNDA0OGE2MTBkMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufXGI8Yges1idpSwgYYw4H8RBOab
YQ/dJ1fu9EuTcZ767dbGLlOvsYdcOeEDSm4spb3MY58uVWxJ3jGtcZRJJCRd3VL6
rKxeeo+VTg63eoqbIGsY51PRn0czCGRT1ciFzvsV6dqag+5WYJ3/i++3DumnwUDO
2kb9hSFtN1UHG1H7xd59OHMhiXdmQnD5abjH7OqnuOPR38hW3Buk6p36O+urAh20
GRB38YKzK2BVNW2i39D4gY83MuSJRM0TzJEKqlJW2MSJXwSfax9dewBoMhdIdEkG
YP9xnsCkYvV9DNQqNwcQorFAKzc1QLX7yFK6q/z01MjpQCqKLZRDoZ+Q9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU6s9FDB2pKLPGN3qwBQEimENCBMB8GA1UdIwQY
MBaAFCX8yV8ZD2+t/6OTQTHHTLOgaI1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTkt
YmExZTYwOWZjNDIxLzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTktYmExZTYwOWZjNDIx
LzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA1TJFZ3
SDFb3E+YubgaVrnyF3ElCXcIJaOvvr16yPOlphyh5D8N4X6qvvIHaT2x02fh4uJ+
8PsPOCcE2D+36GKpev7sy5fSxg58wOaxBTqf/Upq7QwsJNfXs9oSqQFBWw32w7QV
3goCAIyZZCYIQB5hZ/meXZODHDoUNUjAFXDU2RoZHKj2CeylhqNPGYmxF8yT3Jja
JArcFGfqgUYU9tZor90XFdtft7Yn3vAKtWP6bBIWNier7gveDuLeoPUj9D/3KelQ
zJujnj897t9ymGfbPrsQ+s5QGslGaQfwppa9cCjvo1zUWHePeEOlpBKWJxx8nJbb
i5eAaBqBy7QeAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:14 2026 by rpki-client