Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json)
Hash identifier: f4zp480V1NgRJTL/4NrBSxKmtCMfaxTyXv/vhJ64Q5Y=
Subject key identifier: 28:6D:A7:C7:0E:C8:A9:57:17:D3:F4:2A:D8:30:68:B4:38:73:44:0A
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 019D9BBE380002C6D67D6DDC8BD92F86BB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
Manifest number: 020C
Signing time: Fri 17 Apr 2026 14:00:27 +0000
Manifest this update: Fri 17 Apr 2026 14:00:27 +0000
Manifest next update: Sat 18 Apr 2026 14:00:27 +0000
Files and hashes: 1: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: uqJwtHw0M5vIcluFIhkgoR4hle2orN/qp2xneW0+3yk=)
2: u7g1EJ_IJa-0BdE_KUBnyoB2JSQ.roa (hash: xlygVLhoP9IZVqEPUv8JWvUxpAHcifeKoCfEWNZSZWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:38:00:02:c6:d6:7d:6d:dc:8b:d9:2f:86:bb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Apr 17 14:00:27 2026 GMT
Not After : Apr 18 14:00:27 2026 GMT
Subject: CN=286da7c70ec8a95717d3f42ad83068b43873440a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:db:2a:2b:a9:ba:3c:b4:65:2a:3d:8c:28:
0e:7e:2c:66:47:98:71:ef:92:c0:68:41:2d:b6:a7:
3a:cd:40:10:1a:de:f5:60:6d:d8:4b:85:1a:8b:ec:
d2:e6:0e:e3:68:ca:05:cc:45:52:e9:b2:d7:d9:c7:
3f:d0:ac:77:a6:5c:c6:5c:af:e3:7f:5d:dc:6c:fc:
94:af:db:e9:03:04:fd:2a:35:d7:e1:34:c9:14:99:
24:eb:ac:52:a1:4d:21:1d:b7:9e:d4:ce:be:cb:f0:
fb:e9:fb:00:01:33:83:81:69:1d:ad:eb:a1:d6:ee:
79:f3:d1:ab:4a:e9:9a:fd:57:f8:73:5b:69:ba:cb:
14:82:7d:d7:d4:ba:17:c3:5f:86:a5:7e:7e:31:01:
19:f8:14:01:64:ca:33:98:ce:44:37:9b:c9:08:71:
ea:15:bf:f2:fe:d2:03:38:4f:a9:67:79:6b:ed:f1:
b3:d1:8f:c7:e8:02:12:83:3a:21:e5:c7:f6:21:be:
c3:6c:b9:9d:26:0f:22:eb:35:72:46:66:40:f3:33:
7b:87:e9:fa:44:9f:ac:03:e0:f4:e7:d3:c0:3a:3a:
04:d9:bb:ac:ef:63:d9:0f:eb:7f:36:14:30:9c:c5:
63:60:4d:eb:8e:2e:25:7d:54:91:a6:95:b3:92:9a:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:A7:C7:0E:C8:A9:57:17:D3:F4:2A:D8:30:68:B4:38:73:44:0A
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:76:10:45:45:d0:dc:8b:a8:c2:82:84:30:9f:36:0a:25:e2:
2f:8b:21:f4:78:a1:11:fc:60:ec:d4:81:03:5b:80:1e:fc:04:
d0:19:09:6c:84:4b:0d:0b:c0:d6:77:81:c6:73:28:3f:96:a5:
91:52:e0:ab:e8:13:f9:12:4c:55:99:6e:46:bb:02:90:61:b0:
12:3f:d8:58:db:b0:e0:6d:3e:9f:2e:ff:bf:69:ca:00:a5:51:
81:0e:46:1b:d8:4c:b5:1c:11:35:5d:21:44:23:37:b9:a3:5f:
9b:20:03:6b:f6:e3:27:3d:4b:7e:93:6b:e9:2a:59:1f:93:47:
ca:75:81:f5:50:6a:fe:47:59:80:9f:e3:b3:1f:94:5a:2c:e9:
70:86:6f:d7:34:89:14:70:b3:2e:be:c1:46:38:95:e4:66:9d:
81:de:9a:d7:59:9a:80:e7:5d:04:c1:57:42:c4:ba:9d:1a:82:
09:b1:1b:c5:68:66:77:23:35:cd:6f:6a:25:10:a4:5d:54:bb:
cc:ee:97:42:9e:fa:67:93:ec:d6:97:93:a5:72:4b:fb:35:50:
92:1a:09:f4:57:1a:94:d8:99:8d:b8:26:72:99:89:5d:e4:82:
d6:d0:f5:a7:dd:a6:6a:0f:a2:e2:2e:34:23:d9:a8:2f:61:ff:
59:72:c9:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvjgAAsbWfW3ci9kvhrtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ODcxOTQzNGI2ZTNiNjA3ZjY0N2JiMGQ1OGE4MWRjMWVi
ZmRkNGQwHhcNMjYwNDE3MTQwMDI3WhcNMjYwNDE4MTQwMDI3WjAzMTEwLwYDVQQD
EygyODZkYTdjNzBlYzhhOTU3MTdkM2Y0MmFkODMwNjhiNDM4NzM0NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtnbKiupujy0ZSo9jCgOfixmR5hx
75LAaEEttqc6zUAQGt71YG3YS4Uai+zS5g7jaMoFzEVS6bLX2cc/0Kx3plzGXK/j
f13cbPyUr9vpAwT9KjXX4TTJFJkk66xSoU0hHbee1M6+y/D76fsAATODgWkdreuh
1u5589GrSuma/Vf4c1tpussUgn3X1LoXw1+GpX5+MQEZ+BQBZMozmM5EN5vJCHHq
Fb/y/tIDOE+pZ3lr7fGz0Y/H6AISgzoh5cf2Ib7DbLmdJg8i6zVyRmZA8zN7h+n6
RJ+sA+D059PAOjoE2bus72PZD+t/NhQwnMVjYE3rji4lfVSRppWzkpq1KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChtp8cOyKlXF9P0KtgwaLQ4c0QKMB8GA1UdIwQY
MBaAFCSHGUNLbjtgf2R7sNWKgdwev91NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAt
ZjMwMjhhZWE5OTc3LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MGViN2EtMWFlNC00YmJlLThjZTAtZjMwMjhhZWE5OTc3
LzEvSkljWlEwdHVPMkJfWkh1dzFZcUIzQjZfM1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3YQRUXQ
3IuowoKEMJ82CiXiL4sh9HihEfxg7NSBA1uAHvwE0BkJbIRLDQvA1neBxnMoP5al
kVLgq+gT+RJMVZluRrsCkGGwEj/YWNuw4G0+ny7/v2nKAKVRgQ5GG9hMtRwRNV0h
RCM3uaNfmyADa/bjJz1LfpNr6SpZH5NHynWB9VBq/kdZgJ/jsx+UWizpcIZv1zSJ
FHCzLr7BRjiV5Gadgd6a11magOddBMFXQsS6nRqCCbEbxWhmdyM1zW9qJRCkXVS7
zO6XQp76Z5Ps1peTpXJL+zVQkhoJ9FcalNiZjbgmcpmJXeSC1tD1p92mag+i4i40
I9moL2H/WXLJ1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:47 2026 by rpki-client