Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: Ubdubccz7TSi49zVHGAAiInwSKCg7JCR8zSUrqjOXYc=
Subject key identifier: 7E:41:86:DA:3F:39:CB:54:9E:70:6A:9C:A9:50:0D:95:63:CF:41:16
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019EBF2392182E6C6E9483959AD5B75EFF7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1288
Signing time: Sat 13 Jun 2026 04:00:39 +0000
Manifest this update: Sat 13 Jun 2026 04:00:39 +0000
Manifest next update: Sun 14 Jun 2026 04:00:39 +0000
Files and hashes: 1: NXxqC7ZgztzVzcexbun7_Lf1ORI.asa (hash: hDWGAaxWxsEMgjQ3LkLeP6k+P9+38fD0qphy6cwfTe4=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: zimbSlOg7jGYtMh2uF5q3Dp+0meT+wPHTxEYYZKg7yE=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:92:18:2e:6c:6e:94:83:95:9a:d5:b7:5e:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jun 13 04:00:39 2026 GMT
Not After : Jun 14 04:00:39 2026 GMT
Subject: CN=7e4186da3f39cb549e706a9ca9500d9563cf4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:c0:f0:a8:9d:00:86:f9:de:66:b8:28:e3:
79:7e:4f:7a:31:ec:c5:ad:e6:6e:38:0a:0c:66:9b:
7f:9d:8e:63:f0:95:ec:fc:ef:8a:e7:cd:14:01:6c:
a0:eb:75:12:17:fb:8e:9b:64:7b:fc:8c:d1:90:03:
14:1c:5c:0a:37:93:80:12:31:2f:75:d3:38:62:b3:
42:66:b2:be:ad:28:59:fc:f0:c8:2b:25:46:d6:21:
9e:0f:c2:cb:be:d1:31:3b:cc:28:8f:e0:4f:cb:77:
82:89:8c:cd:c1:85:f4:94:de:d8:a3:e3:88:25:ab:
c6:ba:0b:2f:ad:2d:59:c2:f3:c3:9a:24:a5:6a:16:
e6:62:a4:8e:2a:36:1d:ba:ab:56:f3:52:b5:db:bd:
bf:0b:c5:ed:95:69:5e:de:89:7a:c2:a5:94:5b:fa:
96:a5:9f:18:ae:43:38:1b:77:bd:ff:cf:ca:e2:2d:
b8:82:c4:80:d6:61:4a:27:a0:cf:b4:93:5d:bb:56:
e9:c9:2c:95:66:8d:bf:cd:77:c4:05:8c:ea:21:b4:
db:3b:c8:fe:6b:c1:d2:75:ae:1b:5d:27:f8:bf:ca:
e6:77:f4:cf:c3:67:08:87:15:42:6a:14:82:1f:f8:
95:7d:e8:8d:ff:a9:55:d6:35:7a:0f:a8:60:73:f4:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:41:86:DA:3F:39:CB:54:9E:70:6A:9C:A9:50:0D:95:63:CF:41:16
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:65:b9:6e:34:11:37:9f:5d:21:f1:bd:df:0d:34:f4:30:
57:e1:6d:28:ae:ca:32:20:28:df:55:48:ff:73:91:71:7b:47:
74:c0:f7:4f:4f:c8:a5:c1:7a:d4:fe:03:59:c9:28:d1:72:0a:
8a:7b:20:8e:0e:06:17:2f:59:52:a7:bd:6c:d3:67:0f:25:b4:
35:e7:22:01:52:78:c3:d3:72:98:b4:53:3b:a5:d5:5a:7f:ff:
3a:ee:67:89:40:63:b0:c0:71:9e:2a:c5:fb:4d:86:27:85:bd:
a2:86:4b:60:59:ef:e0:a5:04:3d:6e:0f:94:97:9f:80:ec:58:
6a:32:05:7a:58:38:19:3a:0c:3a:d8:b9:58:ad:be:86:00:1d:
e2:24:4b:c8:59:70:4b:01:5e:f3:d1:40:8d:39:d7:d7:f7:52:
97:ef:79:4f:21:33:70:3d:e0:5d:86:d2:eb:a8:3b:67:03:8e:
d4:37:d4:23:b3:03:b1:2f:5f:11:a2:c1:2f:64:08:2e:c1:f8:
33:18:d3:b7:8f:4e:8d:98:86:40:ab:f7:6f:33:b0:42:fc:1a:
45:48:86:a3:b0:7b:2f:27:23:c6:09:10:e9:02:99:53:8c:82:
bc:f7:eb:29:04:81:fa:b5:3b:fd:24:bc:8c:37:a4:65:78:a6:
eb:ab:73:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I5IYLmxulIOVmtW3Xv9+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh
ZWQwYjEwHhcNMjYwNjEzMDQwMDM5WhcNMjYwNjE0MDQwMDM5WjAzMTEwLwYDVQQD
Eyg3ZTQxODZkYTNmMzljYjU0OWU3MDZhOWNhOTUwMGQ5NTYzY2Y0MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO/A8KidAIb53ma4KON5fk96MezF
reZuOAoMZpt/nY5j8JXs/O+K580UAWyg63USF/uOm2R7/IzRkAMUHFwKN5OAEjEv
ddM4YrNCZrK+rShZ/PDIKyVG1iGeD8LLvtExO8woj+BPy3eCiYzNwYX0lN7Yo+OI
JavGugsvrS1ZwvPDmiSlahbmYqSOKjYduqtW81K1272/C8XtlWle3ol6wqWUW/qW
pZ8YrkM4G3e9/8/K4i24gsSA1mFKJ6DPtJNdu1bpySyVZo2/zXfEBYzqIbTbO8j+
a8HSda4bXSf4v8rmd/TPw2cIhxVCahSCH/iVfeiN/6lV1jV6D6hgc/SWEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5Bhto/OctUnnBqnKlQDZVjz0EWMB8GA1UdIwQY
MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt
Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi
LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVpluW40
ETefXSHxvd8NNPQwV+FtKK7KMiAo31VI/3ORcXtHdMD3T0/IpcF61P4DWcko0XIK
insgjg4GFy9ZUqe9bNNnDyW0NeciAVJ4w9NymLRTO6XVWn//Ou5niUBjsMBxnirF
+02GJ4W9ooZLYFnv4KUEPW4PlJefgOxYajIFelg4GToMOti5WK2+hgAd4iRLyFlw
SwFe89FAjTnX1/dSl+95TyEzcD3gXYbS66g7ZwOO1DfUI7MDsS9fEaLBL2QILsH4
MxjTt49OjZiGQKv3bzOwQvwaRUiGo7B7LycjxgkQ6QKZU4yCvPfrKQSB+rU7/SS8
jDekZXim66tzwg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:10 2026 by rpki-client