Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: yS4hgyAJwNNnMYDutjY/sixfcYShEXDQpvBI9N59sAY=
Subject key identifier: 2D:7D:45:1B:2B:7C:A7:19:7E:7B:41:AC:E7:41:19:57:FB:82:DD:31
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019D9C2CD388D5AF0F704D8611E5B862AC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 02E6
Signing time: Fri 17 Apr 2026 16:01:16 +0000
Manifest this update: Fri 17 Apr 2026 16:01:16 +0000
Manifest next update: Sat 18 Apr 2026 16:01:16 +0000
Files and hashes: 1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: asBY1kf98YGQDHLQ9UMH2i1tvdLIwGWHi0UiALzI7wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:d3:88:d5:af:0f:70:4d:86:11:e5:b8:62:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Apr 17 16:01:16 2026 GMT
Not After : Apr 18 16:01:16 2026 GMT
Subject: CN=2d7d451b2b7ca7197e7b41ace7411957fb82dd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:b3:8e:4d:6c:48:07:6e:35:44:d8:9e:ae:
25:b0:0e:e1:eb:82:67:25:83:66:75:2d:d1:c4:25:
21:34:99:46:7f:de:53:d0:6d:aa:63:ed:21:0e:c9:
12:50:68:30:c8:87:65:b3:fa:24:19:ae:78:a8:90:
15:7d:69:18:a8:5b:12:40:c6:31:81:2e:67:78:83:
0c:e5:05:ac:a8:7e:77:d0:c3:ad:cc:65:23:34:64:
55:66:18:bf:2e:6d:ac:5e:a8:70:a2:db:30:d3:d8:
5c:71:f1:10:9a:e7:85:13:7b:4f:f4:e6:21:dd:0b:
7b:9a:3a:cc:81:35:9e:ce:64:67:ec:ce:88:dd:d4:
31:e6:e6:1f:4f:ce:92:16:f8:18:38:e8:61:63:cc:
ce:88:f8:f0:93:2e:76:a0:b0:d7:be:92:c3:91:ec:
ba:ee:80:6c:ff:2b:b8:5f:6d:64:b6:c4:3b:db:65:
c1:2f:cc:c1:4a:16:e3:50:0f:cc:f5:21:91:5d:1b:
39:28:67:a1:b8:0c:bc:a4:1f:17:78:96:b1:ba:a0:
a2:5c:c6:21:01:c6:0f:1b:f1:5d:87:db:74:72:ea:
b9:eb:ec:f3:5e:0b:83:35:34:8f:e2:5f:66:e8:db:
09:81:d9:a7:2f:d0:fc:c3:6a:f8:43:75:f4:85:38:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:45:1B:2B:7C:A7:19:7E:7B:41:AC:E7:41:19:57:FB:82:DD:31
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ec:b1:ab:f8:9c:df:27:38:4f:84:b2:2c:31:dd:58:87:96:
90:bb:79:10:de:e4:6c:a5:a4:50:cf:b2:6f:b5:4c:97:06:4d:
ac:ff:4e:f9:c4:e3:7b:15:b1:dc:41:7d:17:a5:c9:a1:ad:0b:
88:2c:9c:4e:10:46:36:3a:ed:68:ec:ab:16:cd:3d:3b:15:f0:
eb:09:d5:c3:17:e0:04:fc:87:8a:4d:ad:ae:ef:3e:a6:67:3b:
54:05:95:53:c5:9f:a7:84:3c:4e:b5:c9:e5:f5:2a:bb:bc:8c:
a3:fe:e3:ce:f2:5c:ed:a5:d4:67:77:a4:4c:ed:51:d1:95:6c:
12:d5:61:23:a9:3f:3d:2b:ea:48:f6:7e:63:71:20:52:e2:5c:
f2:2e:3a:b3:07:84:69:44:45:93:d6:a6:30:65:50:d5:5c:a5:
33:d2:6e:3c:91:58:3b:2e:a2:18:4a:cb:8a:68:24:31:10:56:
4c:b8:d9:45:12:17:ee:e8:3c:13:d9:dd:d3:8e:15:3f:41:d2:
9d:8f:3c:e9:5a:94:d6:2c:58:c7:d4:46:35:be:de:cb:f7:59:
5f:89:7b:9a:3b:78:eb:94:32:d5:f4:38:9e:a8:7b:e9:9e:19:
2f:db:f6:31:b8:68:6a:3f:c9:38:98:6c:83:a4:f9:12:ee:3c:
1a:ac:c5:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLNOI1a8PcE2GEeW4YqwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjYwNDE3MTYwMTE2WhcNMjYwNDE4MTYwMTE2WjAzMTEwLwYDVQQD
EygyZDdkNDUxYjJiN2NhNzE5N2U3YjQxYWNlNzQxMTk1N2ZiODJkZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutezjk1sSAduNUTYnq4lsA7h64Jn
JYNmdS3RxCUhNJlGf95T0G2qY+0hDskSUGgwyIdls/okGa54qJAVfWkYqFsSQMYx
gS5neIMM5QWsqH530MOtzGUjNGRVZhi/Lm2sXqhwotsw09hccfEQmueFE3tP9OYh
3Qt7mjrMgTWezmRn7M6I3dQx5uYfT86SFvgYOOhhY8zOiPjwky52oLDXvpLDkey6
7oBs/yu4X21ktsQ722XBL8zBShbjUA/M9SGRXRs5KGehuAy8pB8XeJaxuqCiXMYh
AcYPG/Fdh9t0cuq56+zzXguDNTSP4l9m6NsJgdmnL9D8w2r4Q3X0hTg0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC19RRsrfKcZfntBrOdBGVf7gt0xMB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeyxq/ic
3yc4T4SyLDHdWIeWkLt5EN7kbKWkUM+yb7VMlwZNrP9O+cTjexWx3EF9F6XJoa0L
iCycThBGNjrtaOyrFs09OxXw6wnVwxfgBPyHik2tru8+pmc7VAWVU8Wfp4Q8TrXJ
5fUqu7yMo/7jzvJc7aXUZ3ekTO1R0ZVsEtVhI6k/PSvqSPZ+Y3EgUuJc8i46sweE
aURFk9amMGVQ1VylM9JuPJFYOy6iGErLimgkMRBWTLjZRRIX7ug8E9nd044VP0HS
nY886VqU1ixYx9RGNb7ey/dZX4l7mjt465Qy1fQ4nqh76Z4ZL9v2Mbhoaj/JOJhs
g6T5Eu48GqzFEA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:56:01 2026 by rpki-client