Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: +fXQcwwd2mix8ZSTCZFBULf+LwhECUnSdd7SJ8cYcms=
Subject key identifier: D9:B1:9F:10:90:98:75:50:AC:0E:9A:C7:E4:9E:B3:AD:7F:5B:A2:C2
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019CA9B3C05FE6A28B5243B7A2D2CBA1E9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 0566
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: bsJgfsOg+tvDq1DFwCBE2Co1832NKdpdbOLgxzxw7dA=)
2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:c0:5f:e6:a2:8b:52:43:b7:a2:d2:cb:a1:e9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=d9b19f1090987550ac0e9ac7e49eb3ad7f5ba2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:75:fc:ef:6b:68:83:41:cc:6b:bd:1e:e7:
ad:90:cd:ee:2b:b0:a7:b4:af:81:cf:24:ab:68:ce:
a8:fc:f2:6d:63:dd:1d:24:5f:dc:7d:c7:6b:f6:ab:
fc:b3:04:d4:c9:de:10:eb:0e:ce:fb:76:e4:19:90:
09:9a:68:72:01:a4:62:11:72:69:c4:ef:e7:71:66:
ee:ce:fa:14:c4:83:79:f3:f1:51:86:b9:52:47:b6:
79:4d:80:42:ec:fb:1a:5f:e2:b9:7c:17:e7:e1:84:
c7:38:71:37:ea:3d:25:1f:27:cd:b0:0d:d4:ed:e1:
ee:24:e9:39:3b:90:d8:52:04:54:21:bb:57:66:6a:
42:49:be:13:56:f8:84:93:87:b7:96:92:33:40:cb:
7a:22:95:48:5f:d4:0f:2e:2a:15:ae:68:94:bf:76:
c2:76:b4:d2:4c:68:c1:41:25:29:2a:c5:25:7a:be:
15:7b:a9:a1:f5:48:04:b9:f2:47:6b:d5:ce:ca:30:
e9:a6:47:fd:3e:ee:3d:67:a1:d9:d1:e7:eb:75:9c:
ca:da:61:fc:f6:63:8d:13:fa:d7:f6:fe:11:63:56:
f6:18:fa:ae:ce:41:ac:0d:09:21:a8:2c:5a:3a:6f:
9e:3d:12:8f:1f:d3:9b:3f:d0:57:50:7d:4a:1b:84:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:9F:10:90:98:75:50:AC:0E:9A:C7:E4:9E:B3:AD:7F:5B:A2:C2
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:00:46:cb:e1:ff:52:40:64:2c:f1:83:3e:b4:07:09:63:e9:
54:9f:ac:f5:d4:8b:06:94:28:aa:79:b8:6f:0e:56:0e:13:ef:
d0:28:5e:71:e1:58:e5:9e:01:02:e8:f3:c1:84:79:80:c8:60:
13:0d:61:03:0f:aa:96:82:14:5b:fb:a7:e4:50:a8:e5:ac:c9:
5d:c4:18:af:a1:4c:ca:54:ac:fa:d6:ad:32:0f:f7:67:1c:60:
bf:6b:5e:33:90:96:22:f3:7d:55:50:cd:66:b8:a8:b9:f4:e3:
82:8d:57:22:9d:e3:9b:86:e7:ba:a9:ec:0e:00:c6:22:03:5e:
5b:25:cc:15:37:e2:a6:d9:41:3f:7a:a1:7d:b6:5d:ca:9b:81:
42:9a:63:b7:2b:0c:1d:5c:4e:41:f4:b2:6f:b2:3d:43:a5:7c:
8f:08:5f:5a:d3:6e:30:fa:e0:40:0a:74:97:29:d9:c6:0e:d0:
60:fb:ad:94:3c:2a:f8:b7:6a:ed:1a:f1:3c:49:73:f9:72:83:
dd:c9:41:7a:ff:05:85:12:a7:4e:aa:91:cc:75:3c:2f:5b:2d:
51:70:62:e2:f6:01:d8:c9:63:1e:a0:ab:d1:ca:1d:91:7d:16:
87:7c:7b:36:fc:e6:a8:01:a8:99:a8:4c:f3:f3:24:20:44:44:
57:02:c3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps8Bf5qKLUkO3otLLoempMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky
NzkyM2EwHhcNMjYwMzAxMTQwMDU1WhcNMjYwMzAyMTQwMDU1WjAzMTEwLwYDVQQD
EyhkOWIxOWYxMDkwOTg3NTUwYWMwZTlhYzdlNDllYjNhZDdmNWJhMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBh1/O9raINBzGu9HuetkM3uK7Cn
tK+BzySraM6o/PJtY90dJF/cfcdr9qv8swTUyd4Q6w7O+3bkGZAJmmhyAaRiEXJp
xO/ncWbuzvoUxIN58/FRhrlSR7Z5TYBC7PsaX+K5fBfn4YTHOHE36j0lHyfNsA3U
7eHuJOk5O5DYUgRUIbtXZmpCSb4TVviEk4e3lpIzQMt6IpVIX9QPLioVrmiUv3bC
drTSTGjBQSUpKsUler4Ve6mh9UgEufJHa9XOyjDppkf9Pu49Z6HZ0efrdZzK2mH8
9mONE/rX9v4RY1b2GPquzkGsDQkhqCxaOm+ePRKPH9ObP9BXUH1KG4SvKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmxnxCQmHVQrA6ax+Ses61/W6LCMB8GA1UdIwQY
MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt
NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz
LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgBGy+H/
UkBkLPGDPrQHCWPpVJ+s9dSLBpQoqnm4bw5WDhPv0CheceFY5Z4BAujzwYR5gMhg
Ew1hAw+qloIUW/un5FCo5azJXcQYr6FMylSs+tatMg/3Zxxgv2teM5CWIvN9VVDN
ZrioufTjgo1XIp3jm4bnuqnsDgDGIgNeWyXMFTfiptlBP3qhfbZdypuBQppjtysM
HVxOQfSyb7I9Q6V8jwhfWtNuMPrgQAp0lynZxg7QYPutlDwq+Ldq7RrxPElz+XKD
3clBev8FhRKnTqqRzHU8L1stUXBi4vYB2MljHqCr0codkX0Wh3x7NvzmqAGomahM
8/MkIEREVwLDFw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:16 2026 by rpki-client