Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
File: jkFZeSO5geHA1Pyi_9CozcNme30.mft (raw, json)
Hash identifier: 9Tfs1sMXQ0qIBKtCa88kSG5rGD18GPWAfJCqVtPl+IY=
Subject key identifier: D8:04:49:2C:9C:1E:95:E1:BD:11:FA:4B:06:C8:C2:52:1B:5F:6D:8A
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 019D9A3E42077A78A028FCC565BED5536BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
Manifest number: 0257
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (hash: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=)
2: jkFZeSO5geHA1Pyi_9CozcNme30.crl (hash: 5RQvBqX82g7yBe0HI3BHhhAV8KywzQ4oU5o6lvuSXrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:42:07:7a:78:a0:28:fc:c5:65:be:d5:53:6b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=d804492c9c1e95e1bd11fa4b06c8c2521b5f6d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:3f:bc:a3:f0:bf:e5:54:e0:bc:4a:f4:23:
05:82:75:ec:61:10:61:b9:1b:83:9a:86:ae:1f:b6:
38:35:55:3a:63:28:e4:35:b2:79:bf:c2:2a:0e:33:
af:f0:16:03:81:78:b9:ce:99:15:59:eb:a2:45:4b:
1f:06:39:56:65:2d:a6:e7:ce:df:74:5a:07:1c:02:
6d:eb:e7:3b:78:45:24:20:a8:87:5b:8f:89:93:c9:
f8:0a:bf:0d:75:12:2a:10:45:7d:0a:8e:9c:14:98:
ba:d3:75:d7:a2:6c:b1:6d:a0:a5:ea:fd:e9:16:91:
c5:81:b8:d5:e8:b4:36:2b:ab:6f:c4:39:70:c4:d1:
ee:27:c6:ec:1d:fa:64:e9:18:23:a0:6e:4d:54:65:
81:71:23:cc:c1:cb:ff:de:8d:0f:c6:72:51:0d:fb:
9b:45:5e:bc:67:a6:8e:61:9c:e2:00:12:e1:82:15:
48:ad:5c:7f:14:f8:81:0d:2d:34:20:1d:2a:b7:c4:
e6:d2:ab:cd:78:ef:58:21:5d:e1:5c:c7:5c:1d:b7:
1b:b2:f4:8f:4f:da:eb:17:a8:0d:41:3d:9d:7c:7c:
3c:a1:a6:2e:fe:48:bd:1a:7a:ba:6a:7b:0c:5e:fc:
0f:d5:e0:82:29:36:98:83:e4:7a:d0:64:3b:08:5c:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:49:2C:9C:1E:95:E1:BD:11:FA:4B:06:C8:C2:52:1B:5F:6D:8A
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:10:89:74:a5:dd:46:df:f5:15:5f:f1:b4:73:3d:84:ed:5f:
91:8d:1b:90:d7:c4:2e:34:68:a1:24:0b:79:21:af:92:7f:44:
e8:8b:f9:93:ec:f5:fe:a5:08:5a:38:8f:5b:fb:d9:77:c8:32:
82:71:f2:fc:b8:f0:37:5d:67:12:28:9f:55:65:49:70:13:ea:
7f:c3:c3:57:58:4e:da:04:6c:21:f5:f8:18:97:ca:e8:91:3f:
e6:83:c5:9c:0c:e2:b9:f6:f6:18:a1:31:e7:d0:c6:11:f0:3f:
48:36:d5:3b:00:4d:07:d5:80:03:3e:7b:b7:20:04:13:20:94:
63:81:17:50:58:c9:5f:e2:f4:a4:ed:83:0f:c3:00:e3:a7:be:
df:a6:78:7b:5e:0d:12:ca:0a:16:44:54:e7:1b:5e:e8:2e:9e:
b4:24:79:70:86:b1:92:14:10:d9:bb:06:84:69:3e:44:dc:b1:
7d:f8:7c:4f:d2:7c:3f:36:a3:94:03:79:36:bf:db:8e:4e:37:
29:2f:fc:af:70:4b:24:c6:c2:96:17:99:17:64:d1:b6:7f:c8:
b9:3c:58:04:0b:57:ec:22:f0:f4:70:c4:8b:4e:e7:50:6e:7c:
0d:80:67:fb:ad:36:22:0b:37:9a:7d:1f:b8:c9:60:92:fa:01:
5e:7b:65:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkIHenigKPzFZb7VU2u7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNDE1OTc5MjNiOTgxZTFjMGQ0ZmNhMmZmZDBhOGNkYzM2
NjdiN2QwHhcNMjYwNDE3MDcwMTA0WhcNMjYwNDE4MDcwMTA0WjAzMTEwLwYDVQQD
EyhkODA0NDkyYzljMWU5NWUxYmQxMWZhNGIwNmM4YzI1MjFiNWY2ZDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOI/vKPwv+VU4LxK9CMFgnXsYRBh
uRuDmoauH7Y4NVU6YyjkNbJ5v8IqDjOv8BYDgXi5zpkVWeuiRUsfBjlWZS2m587f
dFoHHAJt6+c7eEUkIKiHW4+Jk8n4Cr8NdRIqEEV9Co6cFJi603XXomyxbaCl6v3p
FpHFgbjV6LQ2K6tvxDlwxNHuJ8bsHfpk6RgjoG5NVGWBcSPMwcv/3o0PxnJRDfub
RV68Z6aOYZziABLhghVIrVx/FPiBDS00IB0qt8Tm0qvNeO9YIV3hXMdcHbcbsvSP
T9rrF6gNQT2dfHw8oaYu/ki9Gnq6ansMXvwP1eCCKTaYg+R60GQ7CFz3LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgESSycHpXhvRH6SwbIwlIbX22KMB8GA1UdIwQY
MBaAFI5BWXkjuYHhwNT8ov/QqM3DZnt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQt
NDdiYTMzYmEzYzA1LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQtNDdiYTMzYmEzYzA1
LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhCJdKXd
Rt/1FV/xtHM9hO1fkY0bkNfELjRooSQLeSGvkn9E6Iv5k+z1/qUIWjiPW/vZd8gy
gnHy/LjwN11nEiifVWVJcBPqf8PDV1hO2gRsIfX4GJfK6JE/5oPFnAziufb2GKEx
59DGEfA/SDbVOwBNB9WAAz57tyAEEyCUY4EXUFjJX+L0pO2DD8MA46e+36Z4e14N
EsoKFkRU5xte6C6etCR5cIaxkhQQ2bsGhGk+RNyxffh8T9J8PzajlAN5Nr/bjk43
KS/8r3BLJMbClheZF2TRtn/IuTxYBAtX7CLw9HDEi07nUG58DYBn+602Igs3mn0f
uMlgkvoBXntlTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:49 2026 by rpki-client