Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: oFa3UqSU9eExvpZE+ZyeiEsJ05xRyWVw6x4SkKbfmN4=
Subject key identifier: 7A:8A:48:1A:9E:9A:B7:20:EE:E9:56:75:85:92:81:8A:E0:53:DD:66
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019DA48B22DF90646CF84E142DBF6798F8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 02AC
Signing time: Sun 19 Apr 2026 07:01:14 +0000
Manifest this update: Sun 19 Apr 2026 07:01:14 +0000
Manifest next update: Mon 20 Apr 2026 07:01:14 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: C8iTqGE5qT47nIicGu7xWLrDee7EEdAQTTEPZ/XLeNU=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:22:df:90:64:6c:f8:4e:14:2d:bf:67:98:f8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Apr 19 07:01:14 2026 GMT
Not After : Apr 20 07:01:14 2026 GMT
Subject: CN=7a8a481a9e9ab720eee956758592818ae053dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:1c:36:94:1a:5c:45:ee:d9:ab:6e:5b:3e:
db:e7:b0:cc:b3:ca:0c:b2:0f:35:54:cf:5e:fd:65:
af:d1:f2:12:e0:84:b5:1b:af:85:87:05:88:b2:88:
7d:8c:73:9b:ba:fb:13:e1:d9:ce:e5:bd:1d:9c:9b:
6d:6c:b7:f2:74:91:3b:bc:18:a2:7c:59:6c:be:67:
74:d9:00:40:0b:f7:a2:65:35:d2:17:2b:75:da:2e:
3f:47:95:0b:e1:9f:61:29:3c:63:30:95:bb:eb:03:
2a:59:d4:18:a8:49:df:61:46:1a:12:3c:b9:a8:e4:
d6:8e:b3:97:e0:cf:be:9a:36:91:cd:c4:19:4c:66:
c5:58:2e:d5:ca:27:0a:05:bf:40:05:62:6f:5e:47:
b4:f7:8f:ac:0a:a5:73:a1:22:7b:0c:03:94:bb:75:
54:b0:72:ae:c5:fa:cb:f9:30:bf:2d:62:58:29:bf:
dd:96:8b:c8:75:2e:f3:03:e8:7a:b1:9b:b7:fa:75:
75:f7:26:28:ad:74:8f:52:d3:0b:da:e1:2a:d8:16:
19:d3:e8:c1:47:9e:7c:d2:c4:45:5a:44:88:38:2d:
a0:c3:e8:d5:7c:a8:95:27:57:1c:56:da:a5:00:88:
8a:51:6f:47:34:84:07:ff:1b:43:c2:cd:96:f3:3c:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:48:1A:9E:9A:B7:20:EE:E9:56:75:85:92:81:8A:E0:53:DD:66
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:f0:93:67:9b:a0:da:00:e4:b5:a0:0c:18:52:c5:b7:86:
c4:ab:99:62:0b:70:83:3a:0e:aa:0e:fb:1c:fa:b8:e3:c8:38:
52:c8:02:3e:3c:da:bd:e0:e3:ed:8e:aa:1c:0a:4c:3d:89:92:
22:f6:0c:65:0a:c9:90:3e:7d:da:86:e0:c1:6d:f3:a1:9f:e8:
c4:56:d4:a8:47:3d:ee:13:e7:c1:ef:45:30:25:d3:cf:79:4d:
c1:d4:9f:69:f2:ee:50:e4:be:64:39:94:7d:55:fd:a6:1c:9c:
e3:b2:24:b9:2b:fe:ac:a5:a7:42:46:9f:5b:24:56:f0:36:c1:
21:f5:05:46:d1:05:b6:df:ee:fe:52:fd:6f:3b:9b:19:09:3e:
bc:20:af:bf:e2:3f:e6:6a:77:74:3c:f0:92:9e:5a:d4:4f:cb:
fc:25:e5:4d:fe:a4:a9:30:ee:1f:f7:11:f7:e3:82:fa:23:cb:
63:ae:6a:28:42:d4:ef:8a:6a:fc:f8:b4:b0:65:57:21:66:a7:
db:70:ed:09:7e:88:8f:7f:9f:fc:fb:dc:10:0f:b9:2d:99:67:
39:58:eb:14:85:82:c0:a2:1e:e5:08:70:9a:0c:2f:0a:48:41:
6d:aa:07:78:87:42:24:70:09:65:7c:a5:43:c9:1f:74:7b:14:
07:9e:88:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kiyLfkGRs+E4ULb9nmPjKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi
MWQ5MGEwHhcNMjYwNDE5MDcwMTE0WhcNMjYwNDIwMDcwMTE0WjAzMTEwLwYDVQQD
Eyg3YThhNDgxYTllOWFiNzIwZWVlOTU2NzU4NTkyODE4YWUwNTNkZDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYcNpQaXEXu2atuWz7b57DMs8oM
sg81VM9e/WWv0fIS4IS1G6+FhwWIsoh9jHObuvsT4dnO5b0dnJttbLfydJE7vBii
fFlsvmd02QBAC/eiZTXSFyt12i4/R5UL4Z9hKTxjMJW76wMqWdQYqEnfYUYaEjy5
qOTWjrOX4M++mjaRzcQZTGbFWC7VyicKBb9ABWJvXke094+sCqVzoSJ7DAOUu3VU
sHKuxfrL+TC/LWJYKb/dlovIdS7zA+h6sZu3+nV19yYorXSPUtML2uEq2BYZ0+jB
R5580sRFWkSIOC2gw+jVfKiVJ1ccVtqlAIiKUW9HNIQH/xtDws2W8zyaIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqKSBqemrcg7ulWdYWSgYrgU91mMB8GA1UdIwQY
MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt
MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm
LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAfwk2eb
oNoA5LWgDBhSxbeGxKuZYgtwgzoOqg77HPq448g4UsgCPjzaveDj7Y6qHApMPYmS
IvYMZQrJkD592obgwW3zoZ/oxFbUqEc97hPnwe9FMCXTz3lNwdSfafLuUOS+ZDmU
fVX9phyc47IkuSv+rKWnQkafWyRW8DbBIfUFRtEFtt/u/lL9bzubGQk+vCCvv+I/
5mp3dDzwkp5a1E/L/CXlTf6kqTDuH/cR9+OC+iPLY65qKELU74pq/Pi0sGVXIWan
23DtCX6Ij3+f/PvcEA+5LZlnOVjrFIWCwKIe5QhwmgwvCkhBbaoHeIdCJHAJZXyl
Q8kfdHsUB56IJg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:42 2026 by rpki-client