Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: y/Ka9yMyNExeySFudnuXfZMWVurErcnr4TqkZY6TrlA=
Subject key identifier: 57:51:8B:F2:D0:04:6B:B3:42:58:E2:34:AF:BB:35:9E:88:7A:D5:27
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019D996285D300A046148EA71238DBA8BFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: Q+Ksjkil9wxaKy2j3wFaYrBYlecDH+WwxFpBJukkxlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:85:d3:00:a0:46:14:8e:a7:12:38:db:a8:bf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=57518bf2d0046bb34258e234afbb359e887ad527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:33:c8:c5:a7:fd:03:10:6b:c7:87:46:1e:
41:82:75:e5:e3:22:27:0e:20:4f:46:8a:c1:1d:24:
e9:b0:f6:c1:93:a5:31:97:8d:a4:97:6d:ed:20:8c:
2b:6f:64:e1:85:be:58:d1:46:f6:90:c2:a4:14:af:
ec:3a:bc:b7:05:ef:60:49:c2:63:37:3f:db:cd:b0:
88:2a:c2:9e:53:a6:32:eb:5b:60:56:77:77:08:6d:
25:41:4d:e8:e1:56:4d:a5:dc:6d:98:08:fd:15:bb:
96:c7:16:fa:16:d5:cc:44:a3:74:52:0f:9b:37:2d:
2d:81:a4:13:1e:08:4d:c9:a9:16:00:31:8c:02:2f:
f8:eb:9e:74:01:bc:52:95:b7:b3:f0:95:0b:a1:65:
3b:8b:04:0d:f0:c6:e5:c2:6f:a3:c6:43:04:b2:4e:
e9:6d:d5:b4:f7:29:10:19:cd:7c:b7:20:d6:95:f1:
90:87:b8:7c:84:4d:af:13:7a:92:49:9e:4d:09:73:
1c:57:8f:ae:35:aa:5a:e3:ca:99:72:04:2f:2d:0d:
28:4d:a6:44:2b:33:7e:05:67:8f:fe:74:14:e6:35:
f7:f8:cf:49:5e:8e:61:6c:87:7c:19:c3:00:db:bb:
0d:5b:59:dc:98:59:e0:c7:48:f1:f7:98:ad:1b:56:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:51:8B:F2:D0:04:6B:B3:42:58:E2:34:AF:BB:35:9E:88:7A:D5:27
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2b:3b:f1:23:cb:26:60:38:0f:1e:17:39:72:07:dc:bb:21:
9c:2a:98:72:80:38:87:04:ec:02:76:cc:aa:9a:16:98:bb:7a:
7a:eb:c8:d8:34:39:b8:2b:c5:6b:4d:cb:2b:2a:5a:60:e9:08:
e8:d2:87:a8:4f:a8:fc:e6:bf:88:2f:19:63:51:e4:f3:64:1a:
f5:8a:c2:cd:4f:e9:e1:13:f3:b9:d7:2c:49:37:8e:23:5a:11:
60:3d:0d:2f:9e:83:c6:35:ec:cd:6d:94:12:b9:e8:1e:ad:77:
8b:3b:24:75:e4:3f:1d:3a:02:05:e6:4c:2a:42:6e:c2:4b:8a:
03:da:cd:ca:a1:ef:7f:2f:ab:87:d4:06:69:bf:2c:da:21:c7:
90:b0:21:01:4a:05:1b:dd:bc:e8:95:77:1e:19:8f:bc:d7:2a:
ed:69:0c:3b:0d:1a:74:10:52:6c:75:6c:25:52:38:e0:c8:02:
c6:04:a4:58:29:ae:62:9b:41:29:f2:2f:76:25:6e:95:c9:08:
63:61:0f:d0:b5:41:05:15:3b:5d:b1:01:93:cd:cb:5c:06:9a:
f4:7a:a3:a2:53:9a:db:28:c2:33:47:bf:03:e3:ac:cd:b9:8e:
6d:65:be:78:41:f5:1e:f6:32:45:35:31:70:35:8f:57:0d:0c:
6d:cb:fa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYoXTAKBGFI6nEjjbqL/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OTYwODYxYjc5ZjRlYWI1MDc0MDgzNzhiYTkwODdjYzFl
NDRlMjcwHhcNMjYwNDE3MDMwMTAzWhcNMjYwNDE4MDMwMTAzWjAzMTEwLwYDVQQD
Eyg1NzUxOGJmMmQwMDQ2YmIzNDI1OGUyMzRhZmJiMzU5ZTg4N2FkNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HwzyMWn/QMQa8eHRh5BgnXl4yIn
DiBPRorBHSTpsPbBk6Uxl42kl23tIIwrb2Thhb5Y0Ub2kMKkFK/sOry3Be9gScJj
Nz/bzbCIKsKeU6Yy61tgVnd3CG0lQU3o4VZNpdxtmAj9FbuWxxb6FtXMRKN0Ug+b
Ny0tgaQTHghNyakWADGMAi/46550AbxSlbez8JULoWU7iwQN8Mblwm+jxkMEsk7p
bdW09ykQGc18tyDWlfGQh7h8hE2vE3qSSZ5NCXMcV4+uNapa48qZcgQvLQ0oTaZE
KzN+BWeP/nQU5jX3+M9JXo5hbId8GcMA27sNW1ncmFngx0jx95itG1axzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdRi/LQBGuzQljiNK+7NZ6IetUnMB8GA1UdIwQY
MBaAFCWWCGG3n06rUHQIN4upCHzB5E4nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUt
N2E5MDRmMjBmNTNjLzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80OGQ5ODctZWUxNy00OTA2LWI1OTUtN2E5MDRmMjBmNTNj
LzEvSlpZSVliZWZUcXRRZEFnM2k2a0lmTUhrVGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiys78SPL
JmA4Dx4XOXIH3LshnCqYcoA4hwTsAnbMqpoWmLt6euvI2DQ5uCvFa03LKypaYOkI
6NKHqE+o/Oa/iC8ZY1Hk82Qa9YrCzU/p4RPzudcsSTeOI1oRYD0NL56DxjXszW2U
ErnoHq13izskdeQ/HToCBeZMKkJuwkuKA9rNyqHvfy+rh9QGab8s2iHHkLAhAUoF
G9286JV3HhmPvNcq7WkMOw0adBBSbHVsJVI44MgCxgSkWCmuYptBKfIvdiVulckI
Y2EP0LVBBRU7XbEBk83LXAaa9HqjolOa2yjCM0e/A+OszbmObWW+eEH1HvYyRTUx
cDWPVw0Mbcv6MA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:40 2026 by rpki-client