Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: oUTZOZBbwvgnEEZmtoh3a9Iih2xH/zavU8u6MIBPeWk=
Subject key identifier: 21:EA:45:F0:10:90:A8:73:54:BA:AF:A9:F2:DC:8D:1B:EE:15:04:C4
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019DA4C15EEDB7A3ED7A50B0AFDF1AD44C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: 0297
Signing time: Sun 19 Apr 2026 08:00:29 +0000
Manifest this update: Sun 19 Apr 2026 08:00:29 +0000
Manifest next update: Mon 20 Apr 2026 08:00:29 +0000
Files and hashes: 1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: wVHlBti3B/fADormYoenL42eM+iYAfLA8kTQ4tA2Qi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:5e:ed:b7:a3:ed:7a:50:b0:af:df:1a:d4:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Apr 19 08:00:29 2026 GMT
Not After : Apr 20 08:00:29 2026 GMT
Subject: CN=21ea45f01090a87354baafa9f2dc8d1bee1504c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:30:4d:06:fd:40:26:35:c0:7c:41:c4:03:
66:35:06:f0:16:0c:2e:55:3e:f7:36:0f:d0:f8:16:
c4:7d:d5:ed:79:dc:e7:51:22:5d:05:e7:4a:cb:ef:
38:23:c9:a3:ec:c5:a7:94:cd:2a:72:7c:00:13:96:
10:ad:cb:71:45:2f:21:46:ff:bd:96:69:12:8e:03:
80:09:d1:a4:d2:9a:61:c3:73:37:a0:23:ce:8b:26:
4d:eb:b7:d0:c5:d1:f3:64:fd:b5:2a:5e:75:bb:7d:
cd:70:8f:5c:d6:df:48:04:5f:53:94:c7:3a:06:4f:
17:9e:40:bf:6f:e1:ab:df:19:58:68:2e:65:85:b6:
b8:45:d4:80:9f:3e:43:00:31:ea:20:20:4b:8e:1c:
6b:eb:fd:1e:99:19:a4:c1:91:2e:d3:fd:9e:4d:d4:
1e:5f:dc:4f:ae:cc:24:28:37:2c:91:6f:cf:e6:ef:
84:79:e4:f6:8e:cc:e1:a8:08:9d:c6:5d:fe:7b:86:
81:25:0a:85:1c:c5:96:25:3f:78:81:ed:8c:82:2e:
ed:e0:34:19:be:7d:37:e5:82:4e:c5:0c:ff:79:4b:
39:61:6d:41:88:a2:31:0e:a4:9c:c8:60:0a:49:3f:
0b:e5:10:c9:30:dd:82:3e:ab:97:f0:d0:64:c5:06:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:45:F0:10:90:A8:73:54:BA:AF:A9:F2:DC:8D:1B:EE:15:04:C4
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:67:92:f7:3f:ac:ba:5c:1e:41:42:08:84:f2:04:9f:52:
2a:bb:3a:2c:73:30:a2:a5:76:61:7a:cc:d5:87:6d:57:12:4e:
01:f6:50:bb:a1:26:2f:db:d6:b6:fe:40:64:62:7c:b0:b9:7f:
18:85:4c:f2:80:20:62:a6:fd:53:43:08:45:18:77:ec:2b:c1:
2e:73:cd:e4:d0:c6:0d:65:10:68:bc:08:c5:1c:4e:bf:7c:29:
6e:31:ec:41:9e:26:ef:78:50:ac:db:5e:ff:49:e3:fd:ed:8e:
5b:dd:db:b2:38:f1:b5:44:70:a4:33:73:ad:0b:15:2a:6c:a3:
5a:30:9b:2d:00:68:8f:96:af:8b:8b:94:32:a9:dc:62:63:0b:
c8:d8:33:29:b0:35:d6:b6:78:e3:4f:8d:e3:f6:52:ee:3f:ec:
4b:f3:53:30:ef:5b:a7:c5:47:a3:bd:ae:be:57:45:00:58:b9:
11:9e:ce:68:5a:1e:05:cc:59:2d:db:4c:ea:54:05:fe:dd:61:
48:67:6c:d5:6b:1c:fe:4b:7d:4d:20:b4:fb:cb:f2:a9:51:4f:
7a:6f:12:97:02:1d:03:84:3c:2e:76:75:de:aa:03:a2:52:61:
0b:54:02:d2:21:98:f2:cd:b0:5f:b0:13:8e:08:78:52:e1:ce:
23:33:88:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwV7tt6PtelCwr98a1Ew7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzljZWY0NThkZTUwMzkyZTNjMDJiNjkxODJmMzRjNjAx
NDhkMjQwHhcNMjYwNDE5MDgwMDI5WhcNMjYwNDIwMDgwMDI5WjAzMTEwLwYDVQQD
EygyMWVhNDVmMDEwOTBhODczNTRiYWFmYTlmMmRjOGQxYmVlMTUwNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskswTQb9QCY1wHxBxANmNQbwFgwu
VT73Ng/Q+BbEfdXtedznUSJdBedKy+84I8mj7MWnlM0qcnwAE5YQrctxRS8hRv+9
lmkSjgOACdGk0pphw3M3oCPOiyZN67fQxdHzZP21Kl51u33NcI9c1t9IBF9TlMc6
Bk8XnkC/b+Gr3xlYaC5lhba4RdSAnz5DADHqICBLjhxr6/0emRmkwZEu0/2eTdQe
X9xPrswkKDcskW/P5u+EeeT2jszhqAidxl3+e4aBJQqFHMWWJT94ge2Mgi7t4DQZ
vn035YJOxQz/eUs5YW1BiKIxDqScyGAKST8L5RDJMN2CPquX8NBkxQZqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHqRfAQkKhzVLqvqfLcjRvuFQTEMB8GA1UdIwQY
MBaAFI55zvRY3lA5LjwCtpGC80xgFI0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMt
Y2MxMjA4MTQ4NzI5LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMzRkNTQtNDk0My00ZGViLTg5MWMtY2MxMjA4MTQ4NzI5
LzEvam5uTzlGamVVRGt1UEFLMmtZTHpUR0FValNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaZnkvc/
rLpcHkFCCITyBJ9SKrs6LHMwoqV2YXrM1YdtVxJOAfZQu6EmL9vWtv5AZGJ8sLl/
GIVM8oAgYqb9U0MIRRh37CvBLnPN5NDGDWUQaLwIxRxOv3wpbjHsQZ4m73hQrNte
/0nj/e2OW93bsjjxtURwpDNzrQsVKmyjWjCbLQBoj5avi4uUMqncYmMLyNgzKbA1
1rZ440+N4/ZS7j/sS/NTMO9bp8VHo72uvldFAFi5EZ7OaFoeBcxZLdtM6lQF/t1h
SGds1Wsc/kt9TSC0+8vyqVFPem8SlwIdA4Q8LnZ13qoDolJhC1QC0iGY8s2wX7AT
jgh4UuHOIzOI3A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:53:59 2026 by rpki-client