Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: 6YdEiSElnUmpvBkZ9cQArcRRxO2g4Zc1T13KFIYv0TE=
Subject key identifier: B2:63:1F:1C:0B:17:0F:67:4A:A2:8B:8F:8C:5C:07:21:21:37:34:09
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019D98BD74146F3AD783C5916957E8D2BD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 0554
Signing time: Fri 17 Apr 2026 00:00:45 +0000
Manifest this update: Fri 17 Apr 2026 00:00:45 +0000
Manifest next update: Sat 18 Apr 2026 00:00:45 +0000
Files and hashes: 1: 9SBS7gJbmM_H_U69hDRLz5tqENk.roa (hash: CohDToPDWHyGMje9oQIew781Ud8ugON8LORc7w4Ntug=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: Qm2QwMODWYaMWsC3yY+MoVDdXtxXvOEK3IlivlCy4Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:74:14:6f:3a:d7:83:c5:91:69:57:e8:d2:bd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Apr 17 00:00:45 2026 GMT
Not After : Apr 18 00:00:45 2026 GMT
Subject: CN=b2631f1c0b170f674aa28b8f8c5c072121373409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:59:f7:ad:31:b2:a8:a8:4c:db:b2:64:a6:
fa:84:6c:39:e9:72:5d:40:6b:a3:f4:da:75:5e:41:
47:1a:1e:dc:0c:60:1f:ca:95:d8:20:78:f7:44:4a:
eb:27:89:cb:73:15:d7:fc:35:e1:d6:e2:b0:99:78:
4e:79:f1:5a:49:c3:0f:ff:c1:fe:f6:d2:cf:ab:92:
68:78:9b:a3:29:aa:32:df:41:c2:57:3c:25:9c:d8:
35:4f:c6:d3:87:b5:43:5d:4e:57:07:52:69:6c:b9:
ce:14:34:44:50:3e:b4:ee:ef:bd:b3:cf:76:e1:cf:
44:8a:fb:5e:26:cc:9f:25:34:bb:3e:e4:6c:7f:52:
28:39:49:49:5b:d2:ab:15:a3:c5:25:fb:69:53:00:
59:c6:9b:17:6d:96:f5:fb:a8:ef:84:80:44:f2:ed:
4e:f1:ff:45:17:9b:fd:13:fd:b8:92:8e:54:fd:0d:
3f:f8:c8:70:a9:36:fb:73:ee:fd:f9:1d:1d:bf:af:
54:94:19:c8:0b:bb:8c:cf:c8:7d:d6:47:b3:8e:ec:
5f:a2:e7:95:f3:35:61:34:a1:d6:7c:fb:c3:65:a3:
b3:e8:cc:f3:23:79:4f:01:ec:95:f0:76:5b:ba:c6:
33:01:bb:91:e5:86:60:e5:af:b7:61:ea:c3:04:e4:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:1F:1C:0B:17:0F:67:4A:A2:8B:8F:8C:5C:07:21:21:37:34:09
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ec:02:c1:22:42:c8:07:03:23:55:f4:05:95:00:c3:09:1b:
2a:b7:31:8e:ec:78:d9:c4:c7:2d:5d:97:53:51:0e:4f:9f:70:
39:6a:64:fb:30:0d:af:39:69:ef:6e:61:67:80:7b:e5:f0:fb:
8a:62:17:70:f2:a4:f1:22:86:e5:99:b4:51:db:4f:28:ea:73:
27:69:48:6a:02:5f:75:55:a0:91:fd:af:8e:d7:65:50:84:34:
68:21:d3:d6:43:68:d2:6e:a6:d9:1b:ea:a2:72:d7:3a:7a:50:
a3:07:5c:4e:fd:f5:76:bf:7a:be:ba:4e:11:82:d5:5e:89:0c:
a1:17:31:3c:9c:ed:11:5a:e9:db:33:a9:f0:f8:cc:55:e1:0f:
3d:2c:d4:7f:9c:6e:62:48:e8:a3:6f:2b:a3:8d:93:b9:34:2b:
77:ef:da:23:92:6e:d8:ff:37:5a:91:ff:3f:c5:5e:92:d2:ff:
65:a6:a9:98:02:0a:68:b0:d0:72:9f:26:c1:d4:23:08:86:d8:
ba:c0:85:81:13:16:48:31:38:a2:58:ab:4f:1c:5f:57:e3:96:
c4:1a:62:0d:5c:d0:e2:7b:a8:5d:14:d1:3a:33:71:06:59:4a:
5f:86:f9:3d:bd:bb:f3:65:0d:c8:de:99:72:cf:cf:c8:8f:db:
67:1f:14:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvXQUbzrXg8WRaVfo0r01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk
NzQ0YjcwHhcNMjYwNDE3MDAwMDQ1WhcNMjYwNDE4MDAwMDQ1WjAzMTEwLwYDVQQD
EyhiMjYzMWYxYzBiMTcwZjY3NGFhMjhiOGY4YzVjMDcyMTIxMzczNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrtZ960xsqioTNuyZKb6hGw56XJd
QGuj9Np1XkFHGh7cDGAfypXYIHj3RErrJ4nLcxXX/DXh1uKwmXhOefFaScMP/8H+
9tLPq5JoeJujKaoy30HCVzwlnNg1T8bTh7VDXU5XB1JpbLnOFDREUD607u+9s892
4c9EivteJsyfJTS7PuRsf1IoOUlJW9KrFaPFJftpUwBZxpsXbZb1+6jvhIBE8u1O
8f9FF5v9E/24ko5U/Q0/+MhwqTb7c+79+R0dv69UlBnIC7uMz8h91kezjuxfoueV
8zVhNKHWfPvDZaOz6MzzI3lPAeyV8HZbusYzAbuR5YZg5a+3YerDBORxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJjHxwLFw9nSqKLj4xcByEhNzQJMB8GA1UdIwQY
MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt
YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2
LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkewCwSJC
yAcDI1X0BZUAwwkbKrcxjux42cTHLV2XU1EOT59wOWpk+zANrzlp725hZ4B75fD7
imIXcPKk8SKG5Zm0UdtPKOpzJ2lIagJfdVWgkf2vjtdlUIQ0aCHT1kNo0m6m2Rvq
onLXOnpQowdcTv31dr96vrpOEYLVXokMoRcxPJztEVrp2zOp8PjMVeEPPSzUf5xu
Ykjoo28ro42TuTQrd+/aI5Ju2P83WpH/P8VektL/ZaapmAIKaLDQcp8mwdQjCIbY
usCFgRMWSDE4olirTxxfV+OWxBpiDVzQ4nuoXRTROjNxBllKX4b5Pb2782UNyN6Z
cs/PyI/bZx8UMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:41 2026 by rpki-client