Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: NC60bMoneFmnBgoWU4BtvlhYudRbTO2bAc3+gTp4cek=
Subject key identifier: 35:2F:5E:D5:1C:03:6B:6D:33:68:C4:AC:7D:94:0B:22:5F:A0:24:93
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019D9850971D6A116E59D46BE0F68F3656F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0CCF
Signing time: Thu 16 Apr 2026 22:01:51 +0000
Manifest this update: Thu 16 Apr 2026 22:01:51 +0000
Manifest next update: Fri 17 Apr 2026 22:01:51 +0000
Files and hashes: 1: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: GjWoTLf/pAtL3KIR7q/b36rbu0YoRgy6/xXlS1hAeQ4=)
2: OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa (hash: qtUmf9EbD2abkMef7mdvs22HGXF5Nws7qs6ZujPLgX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:97:1d:6a:11:6e:59:d4:6b:e0:f6:8f:36:56:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Apr 16 22:01:51 2026 GMT
Not After : Apr 17 22:01:51 2026 GMT
Subject: CN=352f5ed51c036b6d3368c4ac7d940b225fa02493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:ef:52:d3:15:a3:a9:27:60:3b:07:c6:d6:
53:20:1c:49:b9:95:07:b1:68:b6:c7:a6:d7:63:32:
70:b5:27:54:c0:c7:1c:25:9b:4e:a7:33:b5:a0:54:
c0:a3:2e:ba:70:be:70:06:3b:c1:58:cc:5d:6b:15:
75:df:fd:a5:e8:e0:fe:1a:74:ee:5c:58:f0:1d:61:
70:9a:80:0b:58:28:80:3d:a8:80:eb:6e:7f:c0:7c:
71:84:4c:72:34:bb:80:c2:fc:17:a3:a0:5f:36:34:
d0:0b:c7:9d:07:59:df:5b:17:46:ab:70:c0:64:7b:
c9:67:59:ed:5e:d4:e2:1b:8b:34:38:1f:14:28:2c:
c7:9d:a8:44:10:87:d0:86:da:e2:7d:7c:28:42:17:
29:42:92:55:d7:6e:f2:04:6e:8d:4d:3e:06:60:84:
a7:b4:6b:c5:ef:f5:9c:e0:fb:33:d5:d7:22:aa:1c:
1a:9b:fd:f3:f8:49:44:19:45:8f:a6:d2:c4:2d:a4:
b4:2a:c8:cb:ec:42:38:44:ba:2e:9e:13:4b:6c:99:
f3:18:92:1f:95:7d:11:46:37:51:49:16:81:43:3d:
52:e9:0a:99:0a:8e:a4:3c:ed:3e:0e:f2:f1:fc:42:
7c:5f:bd:4f:59:3d:5e:8b:6f:16:45:c1:b8:b2:10:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:5E:D5:1C:03:6B:6D:33:68:C4:AC:7D:94:0B:22:5F:A0:24:93
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fe:6c:75:66:32:62:a2:3c:54:d4:f6:d8:1e:7f:2e:24:be:
83:2c:dc:63:1d:35:85:19:84:43:b9:76:56:2b:4e:bc:f3:93:
43:27:73:10:5c:9c:50:98:7d:10:8a:76:c2:18:b1:cb:ea:df:
db:ba:63:f0:b4:30:05:d6:49:b1:6e:55:0f:53:13:51:05:34:
01:25:5d:0b:2c:30:0f:e9:f1:0f:c0:eb:1f:08:77:c4:27:af:
58:93:41:36:0c:14:62:eb:1e:9b:bd:05:4a:36:fa:b4:3a:26:
68:2d:18:9d:46:0f:37:7f:23:7b:49:5b:b4:83:bc:49:e5:bc:
d4:c1:2a:29:f1:a4:30:d4:fe:ea:26:06:9a:b0:c4:23:97:fb:
29:d4:4f:65:21:92:01:12:90:02:55:46:d9:6d:dd:23:39:31:
41:4a:ca:96:cb:b4:f7:67:da:aa:dd:16:ba:18:fe:e6:58:c9:
e5:42:72:62:16:42:7f:98:dc:71:a3:b4:82:82:b5:d8:b8:61:
97:5b:4d:35:11:70:a1:62:b1:3b:bb:97:5f:2b:16:14:8c:6f:
f9:e0:ad:8e:7e:c0:ae:7a:2c:22:b3:3b:7b:71:2f:bd:dd:a7:
53:fa:83:b6:e2:3e:29:08:44:ee:6a:46:60:5d:ae:51:ee:97:
4d:ad:10:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUJcdahFuWdRr4PaPNlbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZjAwN2U0ZmJkNWE2MjJhYTg1M2M0MjVhMDEwZWU3ODlm
NzExNWIwHhcNMjYwNDE2MjIwMTUxWhcNMjYwNDE3MjIwMTUxWjAzMTEwLwYDVQQD
EygzNTJmNWVkNTFjMDM2YjZkMzM2OGM0YWM3ZDk0MGIyMjVmYTAyNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjXvUtMVo6knYDsHxtZTIBxJuZUH
sWi2x6bXYzJwtSdUwMccJZtOpzO1oFTAoy66cL5wBjvBWMxdaxV13/2l6OD+GnTu
XFjwHWFwmoALWCiAPaiA625/wHxxhExyNLuAwvwXo6BfNjTQC8edB1nfWxdGq3DA
ZHvJZ1ntXtTiG4s0OB8UKCzHnahEEIfQhtrifXwoQhcpQpJV127yBG6NTT4GYISn
tGvF7/Wc4Psz1dciqhwam/3z+ElEGUWPptLELaS0KsjL7EI4RLounhNLbJnzGJIf
lX0RRjdRSRaBQz1S6QqZCo6kPO0+DvLx/EJ8X71PWT1ei28WRcG4shC8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUvXtUcA2ttM2jErH2UCyJfoCSTMB8GA1UdIwQY
MBaAFCXwB+T71aYiqoU8QloBDueJ9xFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEt
ZWM2OGUzNWE3MWVmLzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYmVmNGMtZmQ5MS00N2JhLTk5ZTEtZWM2OGUzNWE3MWVm
LzEvSmZBSDVQdlZwaUtxaFR4Q1dnRU81NG4zRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWP5sdWYy
YqI8VNT22B5/LiS+gyzcYx01hRmEQ7l2VitOvPOTQydzEFycUJh9EIp2whixy+rf
27pj8LQwBdZJsW5VD1MTUQU0ASVdCywwD+nxD8DrHwh3xCevWJNBNgwUYusem70F
Sjb6tDomaC0YnUYPN38je0lbtIO8SeW81MEqKfGkMNT+6iYGmrDEI5f7KdRPZSGS
ARKQAlVG2W3dIzkxQUrKlsu092faqt0Wuhj+5ljJ5UJyYhZCf5jccaO0goK12Lhh
l1tNNRFwoWKxO7uXXysWFIxv+eCtjn7ArnosIrM7e3Evvd2nU/qDtuI+KQhE7mpG
YF2uUe6XTa0QtA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:14 2026 by rpki-client