Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: fJ88tNSZtr5SxLhoH6mlXcAZc5pre6DMam22fkLjNj8=
Subject key identifier: AC:30:FD:BE:73:3A:28:0A:5D:37:F0:28:69:E5:87:38:F2:38:06:82
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019D9C9A737C6221D55CA150E424695DF4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 10F4
Signing time: Fri 17 Apr 2026 18:01:00 +0000
Manifest this update: Fri 17 Apr 2026 18:01:00 +0000
Manifest next update: Sat 18 Apr 2026 18:01:00 +0000
Files and hashes: 1: BSTG1ttnOn5TiV5vto-5DGzkv5E.roa (hash: 9vJ/dkO9dcx6CPua0P9hZtcRYppMY64t3Y1Q4CY2UxQ=)
2: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: aevii35e2ku7TltMFJOvyd1sPTaBIgaKLS4DnKofjWI=)
3: KkmWSGykoPl9WKIjokmVqUHLE_E.roa (hash: bNMQL1twNCxrJQ7tLIUTLyGCOVMxMviSfN90YHRBRho=)
4: LSs7jJVtuYrRTPczs6ZkVJL73zs.roa (hash: hMye0Wrx9U0ST59KqaMgbH8lXZVPY0W9iBqW/uFQLzI=)
5: k7JflfqXnMHelt6wfEleP-MOc70.roa (hash: rjDtKCAd/y7DIDwn4KthMGn3kODXPkka7cFwUkDi28M=)
6: lWXP4ZD7LyYWsz6B8qMtLIJG-sE.roa (hash: qryQy/5tlRLO0dyPYHVWOe1mQmpdbIPyn8DRUs1T4c4=)
7: mkQb5astOXlF9aqqEzzgXK8P4sE.roa (hash: hQAMPQuYpMvhUOw6tcbiYvo2RyId0JQGIKuqDGNYqaE=)
8: oWslWTdsPisLu5dLVq8YM202DZ8.roa (hash: 6ByCKcMEW1ltcRcQ9i9epnu9qzfwpABCMtLyrHAD/uA=)
9: s4rhjerfhsq49RDwrY2imc6pigs.roa (hash: ohkoid0GtCL3tCMVcP87iu5zXvmVKSxAuJuHsjuZBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:73:7c:62:21:d5:5c:a1:50:e4:24:69:5d:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Apr 17 18:01:00 2026 GMT
Not After : Apr 18 18:01:00 2026 GMT
Subject: CN=ac30fdbe733a280a5d37f02869e58738f2380682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:7c:83:23:49:ca:58:57:4b:ad:3f:fc:c3:
23:1a:f0:ce:91:cb:d9:5c:49:03:5d:8a:f2:8f:90:
74:db:ca:3b:22:3c:e6:34:2c:08:e3:58:88:47:f5:
eb:c4:82:fc:97:8a:63:14:07:22:e9:a5:63:2c:3b:
0a:3e:ee:ce:36:a0:1d:93:8e:98:ba:14:de:ca:8a:
b2:96:2d:ed:53:5d:5b:23:0b:94:a6:1c:4d:9c:1d:
55:dc:cb:17:ee:b8:14:27:23:1a:d9:03:96:41:52:
6e:39:19:1b:ff:cc:bf:7d:63:9d:23:4e:e6:c6:44:
49:b9:2e:ab:d1:f7:0f:cc:d6:d0:71:98:7d:60:4e:
0f:4a:ed:58:95:70:2b:6e:cc:2b:e6:15:a7:20:4b:
8a:7d:1f:36:0e:b0:5e:0b:98:3a:64:78:e2:cc:a4:
8a:22:3b:1f:b1:ec:1f:17:67:f5:b5:54:65:55:03:
99:f7:aa:cc:2e:4f:5e:4a:ab:87:a9:fe:02:9c:11:
07:38:b8:67:c9:7e:37:d2:94:14:81:79:c5:22:76:
f8:06:be:6e:70:96:09:25:c5:b0:e4:08:08:2a:3c:
24:e4:05:aa:30:52:54:a6:da:6b:1e:2e:9a:e9:0d:
df:af:e4:8b:74:25:54:56:b6:04:dc:a4:e6:78:03:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:30:FD:BE:73:3A:28:0A:5D:37:F0:28:69:E5:87:38:F2:38:06:82
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a3:2a:b5:e2:3a:e9:d3:58:55:2d:63:09:9e:41:2f:7d:12:
62:cf:73:0f:f4:5e:c4:5e:7b:17:10:b1:7e:58:47:7e:80:1b:
d6:f0:a7:f6:d2:17:81:d2:01:a6:32:08:35:d3:76:38:05:bc:
cf:5c:0d:bd:2d:44:cc:17:07:4a:7d:eb:e0:56:b3:18:9a:48:
72:62:1c:ae:80:af:b9:65:54:6e:4c:fc:8f:1e:96:89:c7:3e:
42:23:07:f1:0b:c2:95:e4:25:a7:b7:03:ed:15:9d:53:03:66:
a8:a3:ab:41:fe:94:6f:d0:4a:aa:09:61:70:ea:7e:94:21:e3:
cd:16:fa:cd:2e:60:25:5e:fb:3d:58:94:2d:98:5c:5b:91:8c:
dc:53:4d:8f:f7:fb:ca:b6:f4:08:7c:9e:d8:51:34:75:2c:39:
a2:da:11:f1:9b:44:4d:7d:f8:b6:0b:ac:2b:40:c8:a2:9c:b8:
44:83:50:8d:89:16:6a:6d:6b:ae:19:f5:18:93:ad:2e:76:9f:
b9:31:c7:aa:d2:f7:cb:d9:f3:94:2b:24:77:4d:08:28:62:52:
fb:9a:c0:a2:7f:4a:d4:79:3b:3d:7b:55:f5:2b:c4:4e:42:c3:
48:0b:d4:4c:b7:66:b3:2f:ee:fa:16:23:b1:9a:87:23:ac:c1:
e2:89:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:16 2026 by rpki-client