
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: MdP/MGl+fy9Qi082YWKt0TPTBKccD1+oRtvvs/yw/XE=
Subject key identifier: 5E:CE:A1:E2:EF:84:39:33:F0:C9:F9:FA:5F:D5:C2:EE:B3:21:71:20
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019EC1B67D93E981E42B325DEE09F5E04A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 11CF
Signing time: Sat 13 Jun 2026 16:00:22 +0000
Manifest this update: Sat 13 Jun 2026 16:00:22 +0000
Manifest next update: Sun 14 Jun 2026 16:00:22 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: EngrkmPIY4b3PBTpnHPez0tlWBIebVQ/co9x9cuR7mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:7d:93:e9:81:e4:2b:32:5d:ee:09:f5:e0:4a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Jun 13 16:00:22 2026 GMT
Not After : Jun 14 16:00:22 2026 GMT
Subject: CN=5ecea1e2ef843933f0c9f9fa5fd5c2eeb3217120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:d3:a0:25:2d:4c:3a:84:0b:05:5e:b2:95:
ba:35:bb:0c:e8:12:05:d7:63:db:1b:56:06:0b:88:
97:cf:a2:e3:a7:3e:f6:39:b4:d4:ce:95:40:54:70:
af:bb:8d:49:11:7d:68:e8:65:a8:ee:2d:01:33:09:
ee:61:f5:97:b5:9d:4c:9f:55:c2:b8:a1:75:83:b4:
93:ca:40:54:8b:b9:5e:7e:5b:c4:f0:ad:7d:79:fb:
2c:73:54:3a:61:96:3d:fc:5c:23:b9:d2:28:55:83:
b1:85:51:56:b3:6a:d4:fd:a1:06:8c:3c:03:dd:7e:
17:61:46:a8:3d:76:eb:36:1f:c8:c9:07:a1:d3:8c:
52:33:55:7a:60:88:46:ea:e9:67:88:ed:06:11:35:
eb:18:7f:c7:4a:4b:3c:79:9d:26:79:29:86:49:88:
7b:14:55:6b:30:04:11:4e:07:f4:b6:ec:c6:68:c7:
2a:62:28:75:43:91:d0:a3:1c:87:69:4d:1e:df:c8:
2f:70:8c:8e:f1:81:7a:7a:20:a9:29:95:6f:9f:b4:
23:8b:02:7f:53:aa:c5:de:e4:ad:9a:7f:64:f4:9e:
65:c6:bc:27:e6:3a:75:1c:10:ad:60:ef:75:7c:8a:
42:32:f4:3b:d4:9d:12:12:dc:5d:f1:fc:3e:ac:76:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CE:A1:E2:EF:84:39:33:F0:C9:F9:FA:5F:D5:C2:EE:B3:21:71:20
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:14:55:0d:e1:1c:50:7a:2a:46:d3:d5:56:56:38:31:25:
8c:96:0f:03:da:46:35:aa:a4:84:c7:c7:43:31:ec:dd:30:09:
0b:7e:4c:c8:6e:e0:33:99:64:45:97:01:8c:64:45:b9:ca:7e:
2a:e1:35:e5:b1:8e:d0:24:67:e8:9b:6c:44:cd:7d:17:7b:1a:
d4:40:53:80:ae:44:e4:5d:f1:30:80:98:34:92:68:88:06:49:
24:62:4a:c7:c0:37:18:ac:fc:63:bd:01:cb:cc:22:89:b7:f9:
62:7b:67:06:4b:e3:0a:4a:2c:d1:18:50:eb:b9:74:27:3b:55:
54:b8:1e:81:65:c9:aa:0e:c7:cb:3d:f1:c4:80:96:eb:58:e7:
66:d5:4c:b1:ca:3c:f4:fc:dd:03:d0:28:99:1d:36:aa:03:d2:
37:85:4a:4f:e2:b4:79:e7:fd:81:fa:3f:d8:ef:06:2c:28:c9:
f0:af:28:c6:8d:05:cf:57:4d:27:4b:75:0d:5c:b4:05:26:57:
bb:08:df:cb:bc:6e:f7:78:f2:48:0d:8d:5d:4e:8d:7a:1b:7f:
83:d5:b9:3e:78:03:2e:0a:ab:3f:ca:ee:dd:19:ef:c2:de:02:
d9:15:2e:a4:2f:88:03:39:4b:59:e7:bd:cb:82:3e:3f:66:77:
1c:1b:a3:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btn2T6YHkKzJd7gn14EoPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjYwNjEzMTYwMDIyWhcNMjYwNjE0MTYwMDIyWjAzMTEwLwYDVQQD
Eyg1ZWNlYTFlMmVmODQzOTMzZjBjOWY5ZmE1ZmQ1YzJlZWIzMjE3MTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtDToCUtTDqECwVespW6NbsM6BIF
12PbG1YGC4iXz6Ljpz72ObTUzpVAVHCvu41JEX1o6GWo7i0BMwnuYfWXtZ1Mn1XC
uKF1g7STykBUi7leflvE8K19efssc1Q6YZY9/FwjudIoVYOxhVFWs2rU/aEGjDwD
3X4XYUaoPXbrNh/IyQeh04xSM1V6YIhG6ulniO0GETXrGH/HSks8eZ0meSmGSYh7
FFVrMAQRTgf0tuzGaMcqYih1Q5HQoxyHaU0e38gvcIyO8YF6eiCpKZVvn7QjiwJ/
U6rF3uStmn9k9J5lxrwn5jp1HBCtYO91fIpCMvQ71J0SEtxd8fw+rHZgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7OoeLvhDkz8Mn5+l/Vwu6zIXEgMB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIIUVQ3h
HFB6KkbT1VZWODEljJYPA9pGNaqkhMfHQzHs3TAJC35MyG7gM5lkRZcBjGRFucp+
KuE15bGO0CRn6JtsRM19F3sa1EBTgK5E5F3xMICYNJJoiAZJJGJKx8A3GKz8Y70B
y8wiibf5YntnBkvjCkos0RhQ67l0JztVVLgegWXJqg7Hyz3xxICW61jnZtVMsco8
9PzdA9AomR02qgPSN4VKT+K0eef9gfo/2O8GLCjJ8K8oxo0Fz1dNJ0t1DVy0BSZX
uwjfy7xu93jySA2NXU6Neht/g9W5PngDLgqrP8ru3Rnvwt4C2RUupC+IAzlLWee9
y4I+P2Z3HBuj3w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:41 2026 by rpki-client