Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: mpspcpLohwnQfbTfrSfeLs1TnsWKz9sT1a/wCgVYosg=
Subject key identifier: 17:25:B1:E4:05:AF:D3:09:DD:E7:4D:FF:1C:74:D7:B9:12:84:69:43
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019CAA900FAE80D7C52EE2CB8F74DCEA3F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 06D5
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: MkrVZgWtxf6Lcs8DVdJGf1+NOl8W0tbC6iXBrdMgG8A=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0f:ae:80:d7:c5:2e:e2:cb:8f:74:dc:ea:3f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=1725b1e405afd309dde74dff1c74d7b912846943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:0b:ac:fc:3f:00:ea:6a:7f:8c:a8:95:fe:
3e:b0:23:24:ac:31:53:9b:52:e9:f6:d6:ba:db:2e:
bc:1c:20:89:dd:01:27:60:bd:b7:24:6c:18:f0:ca:
a8:ce:40:82:c1:63:38:fd:1e:7b:41:9b:06:0c:1d:
ef:20:ee:32:2b:d6:52:82:02:31:08:c5:2b:88:d9:
33:04:70:37:36:95:12:fa:f1:85:f1:a9:84:84:ef:
16:e3:8c:3c:5e:8f:aa:09:5c:4a:a9:94:83:fd:e3:
4d:e1:a7:9b:82:57:6c:5d:a5:51:ee:0c:47:ae:61:
52:ae:69:2d:56:a4:f7:ff:7e:32:90:aa:ce:13:5d:
ae:79:78:b3:7b:72:02:4f:fe:22:f6:06:b8:51:6b:
af:7a:59:c4:12:c6:af:de:99:9c:84:9e:3f:f6:56:
2d:d5:49:d0:3a:7f:de:3b:aa:4a:f1:30:f9:01:4c:
c9:16:d2:4d:54:d0:45:30:3b:46:a8:c8:f8:fe:0d:
5f:68:00:fc:f8:ee:a6:d4:67:ac:5f:f9:c4:5d:50:
54:a5:26:c2:e9:08:49:86:c1:75:a8:c2:26:3c:09:
ae:6c:e2:87:4d:61:ff:cd:73:fd:83:d5:c7:24:ff:
3b:f9:e1:47:2d:88:53:5f:20:48:1b:12:98:ec:c0:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:B1:E4:05:AF:D3:09:DD:E7:4D:FF:1C:74:D7:B9:12:84:69:43
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5a:12:a8:22:a4:37:51:a8:cb:ca:28:f3:31:d7:29:25:97:
70:1e:83:6e:21:a1:27:cc:96:ff:dc:00:8c:d4:12:3a:b1:0c:
31:93:9f:1c:33:68:be:05:2c:fd:30:67:6b:2d:40:f5:bd:d0:
1c:e6:44:f2:bc:03:4c:69:70:0f:ad:fa:97:4e:2b:d1:fe:7e:
5d:d0:d7:c0:e1:56:14:a7:10:87:84:b1:be:6c:7e:52:b8:33:
45:34:00:1d:49:d0:96:1f:7f:be:fe:72:2a:70:a3:ea:6c:0b:
50:1b:35:0c:8f:0c:c0:df:30:9a:52:73:8d:57:69:3b:7e:ae:
27:c5:bb:c5:d3:4c:9e:07:f9:03:f0:5a:b8:8d:2e:3f:b1:af:
38:8b:ef:73:8b:96:36:24:a5:ae:b5:32:34:03:98:08:b4:ad:
c2:b4:16:67:70:ec:54:06:b2:6e:7b:23:f1:d3:3e:51:82:bc:
77:a6:35:48:9f:38:24:76:66:94:57:eb:80:9d:72:76:84:41:
a7:4c:26:c4:26:f8:08:05:29:34:18:83:c4:79:56:36:a6:b7:
07:5c:a1:f9:ee:65:53:d0:9c:7a:18:74:9d:7f:85:f2:91:bf:
2d:6c:e4:cc:2b:80:b1:c5:1c:a5:6a:43:00:eb:5c:ae:05:ca:
2b:d2:c4:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkA+ugNfFLuLLj3Tc6j+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy
MDc2MjQwHhcNMjYwMzAxMTgwMTMzWhcNMjYwMzAyMTgwMTMzWjAzMTEwLwYDVQQD
EygxNzI1YjFlNDA1YWZkMzA5ZGRlNzRkZmYxYzc0ZDdiOTEyODQ2OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tALrPw/AOpqf4yolf4+sCMkrDFT
m1Lp9ta62y68HCCJ3QEnYL23JGwY8MqozkCCwWM4/R57QZsGDB3vIO4yK9ZSggIx
CMUriNkzBHA3NpUS+vGF8amEhO8W44w8Xo+qCVxKqZSD/eNN4aebgldsXaVR7gxH
rmFSrmktVqT3/34ykKrOE12ueXize3ICT/4i9ga4UWuvelnEEsav3pmchJ4/9lYt
1UnQOn/eO6pK8TD5AUzJFtJNVNBFMDtGqMj4/g1faAD8+O6m1GesX/nEXVBUpSbC
6QhJhsF1qMImPAmubOKHTWH/zXP9g9XHJP87+eFHLYhTXyBIGxKY7MAtLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBclseQFr9MJ3edN/xx017kShGlDMB8GA1UdIwQY
MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt
NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj
LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFoSqCKk
N1Goy8oo8zHXKSWXcB6DbiGhJ8yW/9wAjNQSOrEMMZOfHDNovgUs/TBnay1A9b3Q
HOZE8rwDTGlwD636l04r0f5+XdDXwOFWFKcQh4Sxvmx+UrgzRTQAHUnQlh9/vv5y
KnCj6mwLUBs1DI8MwN8wmlJzjVdpO36uJ8W7xdNMngf5A/BauI0uP7GvOIvvc4uW
NiSlrrUyNAOYCLStwrQWZ3DsVAaybnsj8dM+UYK8d6Y1SJ84JHZmlFfrgJ1ydoRB
p0wmxCb4CAUpNBiDxHlWNqa3B1yh+e5lU9Ccehh0nX+F8pG/LWzkzCuAscUcpWpD
AOtcrgXKK9LEsg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:31 2026 by rpki-client