Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: 4NobMvYZ48lkBpWosJYVc6mT4AC7YGGH0QUb/C94tZ0=
Subject key identifier: 3A:EE:49:F8:58:5C:F8:E2:A9:31:86:C6:88:50:BA:54:7F:0B:A3:03
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019EC1B70C88E798650F51AC024708FB6121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 070D
Signing time: Sat 13 Jun 2026 16:00:59 +0000
Manifest this update: Sat 13 Jun 2026 16:00:59 +0000
Manifest next update: Sun 14 Jun 2026 16:00:59 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: sNjygD4N71FLLLZLs+j+xG5JfIxP/7ouLap/Dp4gvR0=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:0c:88:e7:98:65:0f:51:ac:02:47:08:fb:61:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Jun 13 16:00:59 2026 GMT
Not After : Jun 14 16:00:59 2026 GMT
Subject: CN=3aee49f8585cf8e2a93186c68850ba547f0ba303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:a4:f6:13:f1:df:84:74:91:8b:f9:c4:76:
33:6d:9d:38:d0:c6:c8:30:67:9b:5d:34:34:5b:30:
4c:60:59:dc:32:7d:40:5f:a1:df:4f:b1:4e:51:78:
f8:c6:66:1c:66:0f:7b:a2:5b:b1:af:4f:de:29:25:
08:c0:80:15:08:de:36:54:dc:e2:dd:69:2d:d2:5e:
e3:a7:dc:25:6c:e7:30:34:1c:90:c3:06:a9:f9:c4:
ac:2e:7c:e4:df:7b:d7:af:ff:ae:35:a2:3f:17:0e:
46:b2:ce:b2:df:d1:03:6a:44:d1:06:4f:11:69:f2:
87:ec:64:3a:53:4f:96:a8:d9:98:b1:d6:48:ce:0f:
05:4f:ab:27:21:00:5a:04:a0:ff:22:88:91:ef:f9:
a1:97:f4:97:71:06:12:4b:90:e9:8c:20:a9:5f:67:
43:70:9e:34:cd:37:70:dd:28:f6:f8:3e:2e:41:56:
c7:55:55:e2:42:e1:43:b3:de:80:f1:4f:e0:9b:ed:
28:91:dd:53:53:b1:1e:8a:14:22:4d:d0:ef:a7:79:
82:ff:7b:1c:d5:e1:b3:67:95:2e:49:8f:d6:a2:c7:
f2:c5:ad:ad:13:3b:7c:0a:af:9a:3c:c8:ae:6e:31:
3d:0c:e6:6d:5f:38:07:22:f0:bc:97:06:8a:b6:78:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EE:49:F8:58:5C:F8:E2:A9:31:86:C6:88:50:BA:54:7F:0B:A3:03
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e3:02:ce:a6:a7:81:97:66:6f:5b:e0:93:77:91:b7:9f:c9:
2d:e1:95:cb:53:7b:5d:e4:df:41:e8:4a:7c:1e:d2:2e:ba:6f:
68:7f:09:14:e7:0f:c2:82:43:1c:fa:70:fc:3d:d0:4c:c1:f2:
68:2d:e7:df:03:78:f2:93:1d:85:57:15:e7:a7:db:29:fe:5c:
6e:39:a0:36:b6:89:14:4c:e5:05:0b:c4:9d:53:54:f6:88:10:
f9:c4:c6:2a:f3:a8:5c:40:dd:e8:dd:bc:07:14:92:73:78:06:
8c:42:b7:88:73:5d:ac:e6:70:03:9b:1b:19:14:9e:9f:d8:8e:
ff:05:85:76:a3:be:af:23:16:90:a2:e5:ff:6f:9e:1a:52:3a:
32:49:9c:e6:b0:be:59:f6:04:31:99:67:16:8a:3e:93:01:a5:
04:a2:90:26:97:32:19:0f:dc:e5:7a:8a:b8:e1:bb:82:c3:83:
fe:06:70:1b:bf:bd:55:31:ef:77:f3:ac:64:58:14:3c:5c:c1:
55:8a:e3:e9:14:7b:49:f8:2b:1a:58:51:df:80:a0:40:ba:0e:
ca:47:6c:81:9d:30:b0:6a:f3:a3:12:5f:d4:8d:b5:fe:3d:11:
fe:c7:2d:b1:a2:e5:d2:cd:72:df:10:ed:e5:d4:b1:5c:c1:6c:
61:c6:67:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtwyI55hlD1GsAkcI+2EhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjYwNjEzMTYwMDU5WhcNMjYwNjE0MTYwMDU5WjAzMTEwLwYDVQQD
EygzYWVlNDlmODU4NWNmOGUyYTkzMTg2YzY4ODUwYmE1NDdmMGJhMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuSk9hPx34R0kYv5xHYzbZ040MbI
MGebXTQ0WzBMYFncMn1AX6HfT7FOUXj4xmYcZg97oluxr0/eKSUIwIAVCN42VNzi
3Wkt0l7jp9wlbOcwNByQwwap+cSsLnzk33vXr/+uNaI/Fw5Gss6y39EDakTRBk8R
afKH7GQ6U0+WqNmYsdZIzg8FT6snIQBaBKD/IoiR7/mhl/SXcQYSS5DpjCCpX2dD
cJ40zTdw3Sj2+D4uQVbHVVXiQuFDs96A8U/gm+0okd1TU7EeihQiTdDvp3mC/3sc
1eGzZ5UuSY/Wosfyxa2tEzt8Cq+aPMiubjE9DOZtXzgHIvC8lwaKtnhv/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDruSfhYXPjiqTGGxohQulR/C6MDMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOMCzqan
gZdmb1vgk3eRt5/JLeGVy1N7XeTfQehKfB7SLrpvaH8JFOcPwoJDHPpw/D3QTMHy
aC3n3wN48pMdhVcV56fbKf5cbjmgNraJFEzlBQvEnVNU9ogQ+cTGKvOoXEDd6N28
BxSSc3gGjEK3iHNdrOZwA5sbGRSen9iO/wWFdqO+ryMWkKLl/2+eGlI6Mkmc5rC+
WfYEMZlnFoo+kwGlBKKQJpcyGQ/c5XqKuOG7gsOD/gZwG7+9VTHvd/OsZFgUPFzB
VYrj6RR7SfgrGlhR34CgQLoOykdsgZ0wsGrzoxJf1I21/j0R/sctsaLl0s1y3xDt
5dSxXMFsYcZn1g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:44:15 2026 by rpki-client