Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: Z6RNFcLdegvXrQwxBOJP+16q82h/K9KycNY78saT1Ao=
Subject key identifier: 14:81:1E:FB:90:06:08:A8:A9:4D:0F:CE:47:28:4B:94:48:B7:0D:9D
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 019D9AE319AECBF6D9FCF6887607DF255C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 1145
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: iVUDQvNRBgYRLc0qSiHShANZ41Y1GrXCivs1aN0hLOU=)
2: hzKfJWZlIV8JBysFWarDH5yRiEk.roa (hash: CAWz472DO1trBiLZNnU0TTJf5YszDXotuDHQXa3fYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:19:ae:cb:f6:d9:fc:f6:88:76:07:df:25:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=14811efb900608a8a94d0fce47284b9448b70d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:5c:55:df:71:2b:f1:0f:a8:83:f8:b7:7b:
d5:49:d3:64:3f:f9:de:05:e0:76:94:5d:08:e1:b7:
94:6b:52:8b:98:5f:42:09:53:52:4b:6f:68:73:f7:
f3:40:5c:e3:8e:e0:17:87:2f:43:4f:a9:48:89:4d:
a3:5c:41:28:8f:48:1b:b5:a7:5d:71:64:89:d3:b1:
08:be:86:a9:6c:5f:fa:bf:6d:c4:13:db:cb:fb:c5:
71:eb:39:a3:75:b9:bb:9d:f4:bf:db:1b:dc:4e:e2:
82:a5:26:43:5e:82:b1:77:10:10:50:77:5c:00:f0:
05:3b:5a:b8:72:b7:10:90:16:ca:6f:43:5b:a0:e2:
58:ac:87:bb:3d:c2:c1:89:eb:1a:61:bb:8a:8a:41:
f5:d0:6e:31:3c:98:ef:9f:74:a0:95:71:4d:06:39:
d0:c3:77:38:a3:0f:3c:d5:98:c3:a9:70:74:18:75:
31:41:e1:f2:76:1a:02:c6:5d:49:29:62:8e:27:cd:
d4:cd:c4:51:ba:52:a4:62:13:ad:40:45:18:4c:4b:
2c:10:87:16:98:fb:6e:b9:e2:c8:e6:6b:da:f3:bb:
a6:af:5e:54:67:7f:9d:f7:ec:64:f0:d0:8e:8a:ce:
63:b9:e1:c8:8e:29:94:a4:2c:c5:de:10:53:30:72:
99:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:1E:FB:90:06:08:A8:A9:4D:0F:CE:47:28:4B:94:48:B7:0D:9D
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b8:97:a6:3c:36:57:74:4d:14:86:1f:71:dc:d6:82:f5:e7:
9a:15:5c:0b:35:36:a4:52:0f:5f:dc:e3:3b:e2:b4:4b:90:b3:
51:d1:c9:4d:2e:1d:29:f4:55:a0:61:11:cb:8c:40:70:f3:24:
93:2a:ce:b0:a5:a1:67:79:6e:11:54:8f:c7:b4:5f:55:ca:13:
da:b1:da:1e:93:02:62:9e:40:48:f1:22:33:93:54:1b:c8:70:
19:36:89:2c:39:ba:b3:ea:01:b8:99:bb:a0:19:c0:44:17:df:
78:99:00:39:df:be:b8:51:82:a8:c4:18:85:1e:04:53:03:af:
f3:73:ad:a2:08:63:6a:de:0a:b4:81:b9:31:ba:d8:eb:27:d1:
d9:68:ef:67:9b:01:d7:e1:d9:b6:0f:fc:f8:db:5e:1d:8f:b7:
3f:4f:20:09:49:65:e1:fa:2a:e3:8f:54:ae:08:c0:f9:85:81:
52:87:98:62:a3:f5:75:39:f0:6b:23:d5:4a:6b:2c:a3:4c:40:
42:89:d9:fe:7f:76:4e:e5:c3:86:d4:56:9c:96:35:62:06:c7:
20:23:1e:3f:bf:2b:1b:4c:d8:27:90:b8:e4:40:2a:43:ae:54:
94:50:b5:3c:a9:14:72:6e:16:33:08:0e:cd:1e:1a:bc:cd:18:
56:c5:60:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xmuy/bZ/PaIdgffJVxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw
NDQ2ODkwHhcNMjYwNDE3MTAwMTA3WhcNMjYwNDE4MTAwMTA3WjAzMTEwLwYDVQQD
EygxNDgxMWVmYjkwMDYwOGE4YTk0ZDBmY2U0NzI4NGI5NDQ4YjcwZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwotcVd9xK/EPqIP4t3vVSdNkP/ne
BeB2lF0I4beUa1KLmF9CCVNSS29oc/fzQFzjjuAXhy9DT6lIiU2jXEEoj0gbtadd
cWSJ07EIvoapbF/6v23EE9vL+8Vx6zmjdbm7nfS/2xvcTuKCpSZDXoKxdxAQUHdc
APAFO1q4crcQkBbKb0NboOJYrIe7PcLBiesaYbuKikH10G4xPJjvn3SglXFNBjnQ
w3c4ow881ZjDqXB0GHUxQeHydhoCxl1JKWKOJ83UzcRRulKkYhOtQEUYTEssEIcW
mPtuueLI5mva87umr15UZ3+d9+xk8NCOis5jueHIjimUpCzF3hBTMHKZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSBHvuQBgioqU0PzkcoS5RItw2dMB8GA1UdIwQY
MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt
M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw
LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLiXpjw2
V3RNFIYfcdzWgvXnmhVcCzU2pFIPX9zjO+K0S5CzUdHJTS4dKfRVoGERy4xAcPMk
kyrOsKWhZ3luEVSPx7RfVcoT2rHaHpMCYp5ASPEiM5NUG8hwGTaJLDm6s+oBuJm7
oBnARBffeJkAOd++uFGCqMQYhR4EUwOv83Otoghjat4KtIG5MbrY6yfR2WjvZ5sB
1+HZtg/8+NteHY+3P08gCUll4foq449UrgjA+YWBUoeYYqP1dTnwayPVSmsso0xA
QonZ/n92TuXDhtRWnJY1YgbHICMeP78rG0zYJ5C45EAqQ65UlFC1PKkUcm4WMwgO
zR4avM0YVsVg6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:44 2026 by rpki-client