Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: GO2NBkBFidA/fiAYAEiDk/Jw6UhwY7yr7vTIHg2Y+zI=
Subject key identifier: DD:35:C4:00:3F:61:48:81:08:F4:80:B7:11:45:80:99:7E:6E:9F:9A
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 019D9DACA0BC95F77B6B5B29215061767D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 1494
Signing time: Fri 17 Apr 2026 23:00:29 +0000
Manifest this update: Fri 17 Apr 2026 23:00:29 +0000
Manifest next update: Sat 18 Apr 2026 23:00:29 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: O5WPE2s8xL2apHRIRb6T1smHR/nirT1lCB7ujYOYsCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:a0:bc:95:f7:7b:6b:5b:29:21:50:61:76:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Apr 17 23:00:29 2026 GMT
Not After : Apr 18 23:00:29 2026 GMT
Subject: CN=dd35c4003f61488108f480b7114580997e6e9f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:2b:f9:59:f4:e5:a0:ad:b6:ca:e4:aa:72:
43:d8:47:94:9e:b2:3e:c5:03:20:39:db:df:ba:5b:
60:eb:d9:6a:eb:f1:be:2f:db:d4:5f:45:cd:0e:d7:
9c:4a:b3:d8:05:8f:fb:fc:7b:87:d4:99:51:17:7a:
8c:bb:c7:ba:ec:83:4d:35:87:24:0b:a0:22:69:5f:
ae:2e:ce:ec:13:b4:19:29:b1:f7:8c:85:14:96:05:
a8:2d:41:75:11:1e:03:0b:a9:6d:79:03:34:81:05:
57:65:11:47:5f:c9:e8:ce:d6:b3:25:90:cd:fb:2a:
5c:7f:d1:6b:51:7f:ee:8d:d3:f1:86:69:2a:4d:08:
fe:b5:b5:06:4e:64:47:b1:f0:ad:d8:a0:55:05:7b:
af:a4:21:0c:d5:c3:b1:31:91:5e:ee:99:81:29:29:
11:72:fb:c5:4e:0d:d8:bd:a8:37:34:32:98:ee:25:
c4:df:43:08:0d:04:d7:5b:72:8a:54:6b:09:cb:1c:
ac:7c:2a:45:7d:88:b1:8c:ab:ba:e7:72:a8:c3:65:
62:93:17:8e:e8:2c:7e:98:d3:c9:06:b2:7d:6c:5f:
43:20:b4:5a:b0:18:15:3e:98:64:89:53:f4:a8:0b:
cd:71:ce:f4:14:4c:6f:06:2f:b4:3e:62:02:22:11:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:35:C4:00:3F:61:48:81:08:F4:80:B7:11:45:80:99:7E:6E:9F:9A
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:41:20:dc:00:84:dd:25:77:26:43:db:a2:bc:d0:ef:21:
eb:5c:08:6a:7b:54:32:ed:56:3d:e8:b5:9d:8c:de:0a:27:38:
db:dd:89:c4:16:1e:57:5f:68:f8:95:d9:48:45:98:0f:3c:3f:
ce:16:6f:f1:be:86:72:85:6e:17:1a:c9:05:d9:b3:b8:3b:06:
7a:23:bf:fb:bc:32:cd:1e:5c:1a:a3:bc:ef:40:5e:04:43:c3:
ea:1c:e7:23:f0:fe:20:7f:2f:b1:95:d7:36:39:77:23:88:3d:
13:d0:1d:17:b5:ed:7b:15:6b:3f:db:c8:29:ce:1f:b4:29:df:
66:1a:cf:e9:1b:11:be:09:a2:93:ec:32:ac:7f:e4:9a:37:74:
32:a3:5a:8b:7c:36:59:52:8b:d8:4c:61:ce:32:a8:09:39:35:
ed:e4:71:db:72:24:95:4f:d3:77:72:ce:2f:1e:99:6d:f2:37:
d2:4a:1f:ae:7a:ea:7a:d5:79:de:90:12:43:9d:c7:7f:ea:df:
e3:92:8c:ef:f3:6b:a0:e2:28:a6:8a:4c:23:4c:af:d9:50:ac:
87:5c:fc:f3:c1:cf:3c:42:d3:2c:bf:12:e5:5f:aa:dc:ca:7b:
d4:7c:40:0e:f5:99:d9:e1:4a:55:f4:bb:50:fc:61:99:d1:19:
13:d1:ab:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drKC8lfd7a1spIVBhdn1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjYwNDE3MjMwMDI5WhcNMjYwNDE4MjMwMDI5WjAzMTEwLwYDVQQD
EyhkZDM1YzQwMDNmNjE0ODgxMDhmNDgwYjcxMTQ1ODA5OTdlNmU5ZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYr+Vn05aCttsrkqnJD2EeUnrI+
xQMgOdvfultg69lq6/G+L9vUX0XNDtecSrPYBY/7/HuH1JlRF3qMu8e67INNNYck
C6AiaV+uLs7sE7QZKbH3jIUUlgWoLUF1ER4DC6lteQM0gQVXZRFHX8noztazJZDN
+ypcf9FrUX/ujdPxhmkqTQj+tbUGTmRHsfCt2KBVBXuvpCEM1cOxMZFe7pmBKSkR
cvvFTg3Yvag3NDKY7iXE30MIDQTXW3KKVGsJyxysfCpFfYixjKu653Kow2VikxeO
6Cx+mNPJBrJ9bF9DILRasBgVPphkiVP0qAvNcc70FExvBi+0PmICIhG7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN01xAA/YUiBCPSAtxFFgJl+bp+aMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzVBINwA
hN0ldyZD26K80O8h61wIantUMu1WPei1nYzeCic4292JxBYeV19o+JXZSEWYDzw/
zhZv8b6GcoVuFxrJBdmzuDsGeiO/+7wyzR5cGqO870BeBEPD6hznI/D+IH8vsZXX
Njl3I4g9E9AdF7XtexVrP9vIKc4ftCnfZhrP6RsRvgmik+wyrH/kmjd0MqNai3w2
WVKL2ExhzjKoCTk17eRx23IklU/Td3LOLx6ZbfI30kofrnrqetV53pASQ53Hf+rf
45KM7/NroOIopopMI0yv2VCsh1z888HPPELTLL8S5V+q3Mp71HxADvWZ2eFKVfS7
UPxhmdEZE9Gr+w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:05:33 2026 by rpki-client