Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: zlCWHCcknpJ331tdap4WWI2JRzXZCOISwvyjEWMEx4k=
Subject key identifier: 44:2C:B7:EC:57:55:DF:12:5A:90:66:89:DC:3B:42:8C:BC:7C:D9:77
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019D9A3E12038FA3FE3392032EB60F6487D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 151B
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: qSi7KI1nFuJnQXG3+VxpABV4I+U9H5GhTFQpM0dmios=)
2: p5WK8SqdNKrQAJq8_gZrFH1Py64.roa (hash: Nm8rFW/KHjUYCTq0McUqQzXzdbDIF9y2fLjjuqM6uz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:12:03:8f:a3:fe:33:92:03:2e:b6:0f:64:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=442cb7ec5755df125a906689dc3b428cbc7cd977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:42:10:0c:f4:19:ed:ee:2e:fc:f2:71:e9:
38:32:94:58:22:e7:0e:0b:1e:ba:c3:cf:75:8c:ef:
6d:fa:00:aa:c9:24:5d:66:88:b5:4a:95:f8:48:58:
8a:1e:6e:b7:74:58:85:2e:a4:06:55:e8:83:15:14:
ab:64:ee:72:e6:26:7c:62:a3:bd:4f:be:91:cd:83:
b3:3c:eb:78:56:1f:7d:87:ab:a6:2b:ee:6f:2d:0f:
d0:d4:42:6f:d3:42:89:3b:d1:92:67:52:c6:4d:ba:
fc:70:1a:57:cb:7c:88:88:56:e7:3f:59:1c:de:d7:
41:7c:e6:59:60:d2:7b:d2:37:45:1d:89:f3:01:a8:
54:d0:5b:fa:7b:25:a1:bc:d3:72:97:b2:0d:8d:c8:
ae:08:5a:52:2c:a7:4d:24:4b:7c:bc:d9:ad:87:d8:
37:e0:b3:bc:96:ee:04:c6:2c:b0:06:5a:9d:b9:a7:
8b:03:94:ed:23:82:87:35:f8:61:b1:f1:38:8f:15:
21:03:47:78:70:ad:57:d2:12:a2:12:e0:c6:c9:fd:
9e:9f:32:e7:98:50:f1:4d:6e:4d:76:8c:0a:6f:59:
49:46:52:a5:0c:45:e7:4c:14:4a:3f:9b:4a:79:4e:
78:86:00:53:ef:20:d6:cd:ab:f0:e0:25:6d:44:55:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:B7:EC:57:55:DF:12:5A:90:66:89:DC:3B:42:8C:BC:7C:D9:77
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:11:47:8e:98:98:45:69:fd:96:9e:6a:0d:c4:64:ab:27:fd:
dd:26:06:c7:f7:8b:83:16:e7:a7:5f:19:c4:e2:3f:80:ee:08:
eb:ec:2d:01:89:45:dc:52:ad:21:f9:6c:6a:cd:01:c7:bc:91:
22:0f:6f:6d:3b:3d:1c:7a:4a:96:af:f5:35:4d:60:b3:bc:69:
e7:aa:62:23:cd:b3:e2:60:00:7a:ab:fc:05:86:c0:77:86:de:
c5:08:09:2f:13:09:8e:26:de:66:10:f0:c5:81:dd:5f:ff:45:
13:92:1d:27:a9:79:76:cb:bf:27:2c:a7:97:00:08:ad:74:a5:
93:b2:82:e6:66:cb:9d:5e:a0:72:f7:1f:75:70:3f:70:b4:74:
94:c2:43:d7:75:09:72:c9:24:be:c2:85:37:a6:73:89:4e:ea:
e0:84:9f:51:b8:c5:9c:d3:d9:c6:fb:30:c0:97:16:cf:ac:da:
39:5e:bb:c6:f9:4d:58:57:d9:29:9a:8d:47:99:09:56:95:eb:
e9:c5:84:9e:f8:60:8a:68:93:e2:72:2c:31:05:ac:87:b7:93:
66:69:33:43:77:4e:12:03:98:3d:ab:b5:16:8e:c3:e8:7e:a8:
8f:62:b3:ed:6f:a5:d8:df:d1:07:32:f2:eb:f9:17:d7:7d:e3:
b5:70:dd:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPhIDj6P+M5IDLrYPZIfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjYwNDE3MDcwMDUyWhcNMjYwNDE4MDcwMDUyWjAzMTEwLwYDVQQD
Eyg0NDJjYjdlYzU3NTVkZjEyNWE5MDY2ODlkYzNiNDI4Y2JjN2NkOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpBCEAz0Ge3uLvzycek4MpRYIucO
Cx66w891jO9t+gCqySRdZoi1SpX4SFiKHm63dFiFLqQGVeiDFRSrZO5y5iZ8YqO9
T76RzYOzPOt4Vh99h6umK+5vLQ/Q1EJv00KJO9GSZ1LGTbr8cBpXy3yIiFbnP1kc
3tdBfOZZYNJ70jdFHYnzAahU0Fv6eyWhvNNyl7INjciuCFpSLKdNJEt8vNmth9g3
4LO8lu4ExiywBlqduaeLA5TtI4KHNfhhsfE4jxUhA0d4cK1X0hKiEuDGyf2enzLn
mFDxTW5NdowKb1lJRlKlDEXnTBRKP5tKeU54hgBT7yDWzavw4CVtRFVaVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQst+xXVd8SWpBmidw7Qoy8fNl3MB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexFHjpiY
RWn9lp5qDcRkqyf93SYGx/eLgxbnp18ZxOI/gO4I6+wtAYlF3FKtIflsas0Bx7yR
Ig9vbTs9HHpKlq/1NU1gs7xp56piI82z4mAAeqv8BYbAd4bexQgJLxMJjibeZhDw
xYHdX/9FE5IdJ6l5dsu/JyynlwAIrXSlk7KC5mbLnV6gcvcfdXA/cLR0lMJD13UJ
cskkvsKFN6ZziU7q4ISfUbjFnNPZxvswwJcWz6zaOV67xvlNWFfZKZqNR5kJVpXr
6cWEnvhgimiT4nIsMQWsh7eTZmkzQ3dOEgOYPau1Fo7D6H6oj2Kz7W+l2N/RBzLy
6/kX133jtXDd3g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:39 2026 by rpki-client