Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: bSjw5kbitU3PUPS+RWOz8u7/il3lzlJOY0LZeaRRCwQ=
Subject key identifier: 1C:DB:0D:AF:E6:D9:97:E9:1D:64:54:DB:91:37:2F:02:A8:24:DC:30
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019D9A0717F8E979261C409875AC5C7E2EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:49 +0000
Manifest this update: Fri 17 Apr 2026 06:00:49 +0000
Manifest next update: Sat 18 Apr 2026 06:00:49 +0000
Files and hashes: 1: OQ9Hd0aNbo2NqKQaJbOywBhZIsI.roa (hash: 2qz4jxI2YE3EpG4tgKD3UnEwvItdboMyeyLo8EjTciU=)
2: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: zTtEYVofE8+sHKO1gINVCbsbUX8dDi2eRrbx0VzIL+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:17:f8:e9:79:26:1c:40:98:75:ac:5c:7e:2e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Apr 17 06:00:49 2026 GMT
Not After : Apr 18 06:00:49 2026 GMT
Subject: CN=1cdb0dafe6d997e91d6454db91372f02a824dc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:cf:4c:78:cd:19:bb:cd:a0:07:97:24:6d:
94:37:bf:c7:32:39:94:e2:be:2b:4b:dc:25:62:1c:
65:26:be:dd:06:8a:85:08:91:e9:b1:13:11:7e:cc:
0c:6d:61:dd:46:11:fb:f0:04:53:a8:9c:26:d4:89:
0d:ea:54:20:e9:76:0a:4d:e1:7b:3d:95:c5:f1:75:
2d:e4:67:65:8e:2f:36:9c:d5:d0:b3:c6:a7:30:43:
d5:85:d3:88:5f:f7:19:85:7b:93:a7:af:c3:77:52:
a6:4b:a6:e6:ba:aa:1f:4e:a3:fe:6f:0e:49:40:31:
24:39:f2:59:99:4c:ec:d6:48:78:b6:75:ce:75:00:
6e:c8:8a:6b:fb:16:ff:05:c4:a0:56:82:d2:d3:41:
4f:be:45:bd:66:59:fe:79:c6:52:ff:c4:1e:cb:fb:
a9:13:03:4c:08:c9:df:70:3e:81:5c:b9:0e:c5:10:
49:6a:07:f4:20:c0:4f:e5:2f:a2:90:2f:07:e9:a1:
32:30:5e:e9:5e:b3:25:bb:b9:07:b7:a8:e9:4e:04:
7a:78:82:7f:fd:71:a8:5c:69:7c:82:b5:11:e8:74:
57:0d:f9:cd:fa:97:69:c1:95:0b:78:66:cf:48:fb:
4f:ae:d9:8b:0a:55:55:d9:30:b4:d4:e0:45:69:4c:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:0D:AF:E6:D9:97:E9:1D:64:54:DB:91:37:2F:02:A8:24:DC:30
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:52:06:82:20:bc:01:0d:82:78:9d:77:98:8c:ce:c5:7b:7f:
ec:c6:cd:0c:a9:59:4f:43:14:d3:09:44:77:68:cb:08:cb:48:
67:50:a1:46:3e:6e:e8:11:e9:47:a2:bc:b9:21:a9:5c:80:7a:
49:a8:2c:a1:ad:50:64:7d:e3:ff:50:ba:4d:cf:06:56:6a:b4:
50:d4:51:44:40:3f:8e:3c:f4:41:aa:49:30:38:13:fb:a0:35:
14:e1:29:12:ce:31:fc:13:8f:55:54:84:21:0c:88:80:00:1b:
ee:70:bc:3e:b8:0d:93:06:3f:a4:d4:71:f6:70:a6:b0:f4:3c:
c0:41:5a:be:ab:db:eb:c9:33:ed:16:32:1c:78:33:7c:3e:cb:
89:a1:fc:de:11:15:d3:59:c2:c2:22:f5:75:56:98:dc:6c:0d:
b0:bf:ec:36:a2:9e:9b:05:c4:c6:8f:c3:f1:d3:37:ef:b9:a6:
1c:88:93:9e:72:82:c8:9a:c4:ae:b5:6e:06:38:15:4d:6c:01:
ce:06:2c:02:eb:fd:6e:71:68:bc:c8:10:0d:96:af:5c:ae:f6:
21:f0:81:42:98:f7:c2:8e:23:f4:92:8d:89:fc:69:5e:4b:b6:
27:34:67:b5:28:e6:ce:e4:51:18:3a:bc:e4:4d:d4:b1:4f:cf:
52:0a:20:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBxf46XkmHECYdaxcfi74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3
ZDAwZjEwHhcNMjYwNDE3MDYwMDQ5WhcNMjYwNDE4MDYwMDQ5WjAzMTEwLwYDVQQD
EygxY2RiMGRhZmU2ZDk5N2U5MWQ2NDU0ZGI5MTM3MmYwMmE4MjRkYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzHPTHjNGbvNoAeXJG2UN7/HMjmU
4r4rS9wlYhxlJr7dBoqFCJHpsRMRfswMbWHdRhH78ARTqJwm1IkN6lQg6XYKTeF7
PZXF8XUt5Gdlji82nNXQs8anMEPVhdOIX/cZhXuTp6/Dd1KmS6bmuqofTqP+bw5J
QDEkOfJZmUzs1kh4tnXOdQBuyIpr+xb/BcSgVoLS00FPvkW9Zln+ecZS/8Qey/up
EwNMCMnfcD6BXLkOxRBJagf0IMBP5S+ikC8H6aEyMF7pXrMlu7kHt6jpTgR6eIJ/
/XGoXGl8grUR6HRXDfnN+pdpwZULeGbPSPtPrtmLClVV2TC01OBFaUxkQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzbDa/m2ZfpHWRU25E3LwKoJNwwMB8GA1UdIwQY
MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt
MWMxZTg1MzJkNWIwLzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw
LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1IGgiC8
AQ2CeJ13mIzOxXt/7MbNDKlZT0MU0wlEd2jLCMtIZ1ChRj5u6BHpR6K8uSGpXIB6
Sagsoa1QZH3j/1C6Tc8GVmq0UNRRREA/jjz0QapJMDgT+6A1FOEpEs4x/BOPVVSE
IQyIgAAb7nC8PrgNkwY/pNRx9nCmsPQ8wEFavqvb68kz7RYyHHgzfD7LiaH83hEV
01nCwiL1dVaY3GwNsL/sNqKemwXExo/D8dM377mmHIiTnnKCyJrErrVuBjgVTWwB
zgYsAuv9bnFovMgQDZavXK72IfCBQpj3wo4j9JKNifxpXku2JzRntSjmzuRRGDq8
5E3UsU/PUgogqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:07 2026 by rpki-client