Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: Kl9QLds391LAwV1gy/YG5Rp8mwgcSWqK8NNwVPZ7/P8=
Subject key identifier: F6:CE:DF:A6:4E:53:4A:AC:7C:B2:3A:C7:76:07:4E:4E:F5:1B:0D:E9
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019D981905A953AD71DAA334C8670C50345A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0750
Signing time: Thu 16 Apr 2026 21:01:09 +0000
Manifest this update: Thu 16 Apr 2026 21:01:09 +0000
Manifest next update: Fri 17 Apr 2026 21:01:09 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: mSuThuH92cKANT+5r+f4zhkSvQsGQuVy/gv3MO2Uzn0=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:05:a9:53:ad:71:da:a3:34:c8:67:0c:50:34:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Apr 16 21:01:09 2026 GMT
Not After : Apr 17 21:01:09 2026 GMT
Subject: CN=f6cedfa64e534aac7cb23ac776074e4ef51b0de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:39:08:ba:80:26:2a:e5:bf:f9:c8:55:3d:
55:1f:8e:71:bc:d2:3d:69:ec:1a:a1:29:97:b0:22:
28:a7:ec:27:5a:1b:81:f7:35:e3:e1:b2:7d:dd:ea:
40:7a:a3:91:d3:f8:0b:e2:c2:01:f0:c3:5b:13:ba:
70:ac:b1:72:23:57:cc:60:9c:f8:61:9f:4b:a4:41:
ab:9c:94:5b:6d:f0:22:f1:91:3b:66:f3:7c:16:bf:
d8:8a:ac:9b:16:01:14:79:06:33:85:a2:4e:0e:db:
b2:0c:51:84:f2:8b:04:33:31:8c:49:1d:af:b0:eb:
ae:dc:54:2b:2b:f4:ee:15:01:65:2a:72:30:b9:d4:
fb:8f:66:39:fc:77:9d:7b:78:e4:54:62:58:50:4d:
2c:1b:0d:0c:ce:bd:f7:3f:cb:b4:8e:cc:dd:93:38:
5d:7c:e4:82:a3:69:12:77:4e:26:85:78:75:af:84:
0e:fd:3d:63:b7:f8:31:77:59:2e:11:7a:91:5f:6f:
71:ed:d1:59:eb:6d:d1:85:09:f3:f3:69:25:68:9e:
e1:9f:0d:8a:d2:cb:f0:b1:07:a5:3e:16:8b:c8:5f:
8a:8a:27:7b:2e:1a:35:15:28:7c:07:70:7c:d1:5c:
85:62:44:29:6a:78:1c:dc:b8:b0:12:c7:6d:88:18:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:DF:A6:4E:53:4A:AC:7C:B2:3A:C7:76:07:4E:4E:F5:1B:0D:E9
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:32:fc:bd:dc:97:ba:c2:2a:b0:b5:1f:fe:1b:8a:ce:6a:
fa:8f:73:c2:36:5a:74:3a:c0:ae:6a:ea:c1:91:d8:75:02:93:
50:1f:89:61:5a:ed:74:dc:db:d3:b5:e2:73:b9:61:6f:ca:7a:
48:e9:ab:58:ed:cb:87:eb:dc:20:ed:e1:4d:1a:51:93:8c:52:
f1:33:49:c2:86:50:aa:36:37:fd:85:d7:2a:aa:c6:28:65:eb:
17:d2:b8:8d:38:d5:19:8e:e7:29:18:cb:0c:b8:26:9c:85:f8:
d9:af:87:e0:6d:7c:d1:9b:69:90:b7:47:1e:30:99:62:9f:be:
68:19:39:9b:4b:cc:ce:5e:77:bb:34:26:f6:4a:7a:b5:34:22:
08:7a:0e:ea:c0:bb:77:85:1b:75:f9:ba:a3:dc:9a:96:ca:90:
2a:f3:10:34:21:6b:df:b9:e4:a1:84:4b:15:a4:7e:3f:db:ea:
11:3c:9b:6a:e5:02:20:5e:40:a6:fb:8f:f6:65:e3:a2:de:26:
1f:35:54:92:1e:47:59:8d:f8:16:f2:52:a3:bd:2f:31:9c:be:
2a:90:4c:53:47:5e:46:ce:eb:ed:66:fb:d1:bb:e6:29:fa:12:
21:b1:59:ae:42:57:18:35:f8:89:e3:21:1b:ab:5d:9a:03:21:
f1:6b:8d:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGQWpU61x2qM0yGcMUDRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy
MDc2MjQwHhcNMjYwNDE2MjEwMTA5WhcNMjYwNDE3MjEwMTA5WjAzMTEwLwYDVQQD
EyhmNmNlZGZhNjRlNTM0YWFjN2NiMjNhYzc3NjA3NGU0ZWY1MWIwZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS45CLqAJirlv/nIVT1VH45xvNI9
aewaoSmXsCIop+wnWhuB9zXj4bJ93epAeqOR0/gL4sIB8MNbE7pwrLFyI1fMYJz4
YZ9LpEGrnJRbbfAi8ZE7ZvN8Fr/YiqybFgEUeQYzhaJODtuyDFGE8osEMzGMSR2v
sOuu3FQrK/TuFQFlKnIwudT7j2Y5/Hede3jkVGJYUE0sGw0Mzr33P8u0jszdkzhd
fOSCo2kSd04mhXh1r4QO/T1jt/gxd1kuEXqRX29x7dFZ623RhQnz82klaJ7hnw2K
0svwsQelPhaLyF+Kiid7Lho1FSh8B3B80VyFYkQpangc3LiwEsdtiBh88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbO36ZOU0qsfLI6x3YHTk71Gw3pMB8GA1UdIwQY
MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt
NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj
LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREYy/L3c
l7rCKrC1H/4bis5q+o9zwjZadDrArmrqwZHYdQKTUB+JYVrtdNzb07Xic7lhb8p6
SOmrWO3Lh+vcIO3hTRpRk4xS8TNJwoZQqjY3/YXXKqrGKGXrF9K4jTjVGY7nKRjL
DLgmnIX42a+H4G180ZtpkLdHHjCZYp++aBk5m0vMzl53uzQm9kp6tTQiCHoO6sC7
d4Ubdfm6o9yalsqQKvMQNCFr37nkoYRLFaR+P9vqETybauUCIF5ApvuP9mXjot4m
HzVUkh5HWY34FvJSo70vMZy+KpBMU0deRs7r7Wb70bvmKfoSIbFZrkJXGDX4ieMh
G6tdmgMh8WuNMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:31 2026 by rpki-client