Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
File: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft (raw, json)
Hash identifier: ANk3XkpOLJok0Qo4X3yrmBlGMRy9uf5oppoP9AmkT6o=
Subject key identifier: BF:1E:70:1E:00:63:5C:8E:5B:3D:57:CB:15:C4:48:67:BD:81:CB:46
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 019D9AE365E8134EBE37614695A8E2243FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
Manifest number: 1455
Signing time: Fri 17 Apr 2026 10:01:27 +0000
Manifest this update: Fri 17 Apr 2026 10:01:27 +0000
Manifest next update: Sat 18 Apr 2026 10:01:27 +0000
Files and hashes: 1: Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl (hash: XPtq+bzPK1SQ8U78qJkEdIJwiN6bKvMLss4d37HtddI=)
2: o82as8Pp65IOMGZ2l9--UN04jxE.roa (hash: 1ACvBsYWfHGc1kJQlC6LwuaFRNU2JMZS6o4Vp3pXj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:65:e8:13:4e:be:37:61:46:95:a8:e2:24:3f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Apr 17 10:01:27 2026 GMT
Not After : Apr 18 10:01:27 2026 GMT
Subject: CN=bf1e701e00635c8e5b3d57cb15c44867bd81cb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:72:0b:de:08:e4:d8:5d:32:0e:21:48:24:
26:f0:47:36:1e:eb:89:bf:8b:4c:13:eb:83:74:fe:
37:43:0b:44:f5:b9:55:eb:89:37:16:5f:13:4f:bc:
b9:15:6f:9c:6d:a6:25:b4:75:d2:a3:72:a5:98:27:
c4:47:c5:82:88:e4:19:d7:bb:1e:0b:44:51:4a:0f:
e9:ae:1d:26:62:56:6e:91:c4:f1:7b:84:ab:d0:e0:
f6:52:5a:f9:a7:55:64:60:04:c5:ad:e0:5f:87:01:
1c:ef:2c:df:16:79:1d:a5:ff:69:27:2a:4f:22:49:
2f:95:48:cf:cf:90:55:c3:16:b4:9a:c9:83:91:9b:
e9:31:e0:6d:ec:db:a3:fa:f8:68:cd:2a:c7:dc:48:
07:93:f3:44:73:33:ce:b3:0c:80:1d:d3:c8:3f:b4:
35:d6:10:51:bc:03:a6:e4:92:47:0a:60:79:9c:aa:
9b:65:a2:22:7d:9c:23:5c:42:f7:74:20:c3:ff:8d:
b9:64:53:f8:ad:a6:e8:c6:75:16:84:14:ff:48:d3:
71:2b:49:f5:5e:00:ab:09:e5:f7:0c:f3:ef:09:b5:
31:55:b9:c7:be:c7:ba:ed:b6:df:ba:dc:25:40:9e:
2e:94:12:6f:9c:c9:32:f6:93:f0:d0:a3:20:3f:93:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:70:1E:00:63:5C:8E:5B:3D:57:CB:15:C4:48:67:BD:81:CB:46
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:3b:7e:f2:d6:53:9d:d3:2a:2f:45:fa:12:e1:e1:cd:be:
76:f1:69:cc:b0:5c:2c:2c:d6:b1:e2:1a:7a:a1:e8:41:b0:d8:
10:f8:57:2a:74:5a:29:31:9f:60:bd:ba:18:60:cf:6e:81:b9:
e0:67:be:aa:8d:dd:b3:dd:46:a9:5f:ba:ef:be:d3:a2:7a:d9:
66:72:6d:09:a6:cf:79:8c:cc:8b:85:33:22:71:80:72:96:69:
48:e7:a4:29:a3:ed:96:c5:41:d0:46:e6:08:95:d1:81:f6:aa:
ba:bc:43:4a:4a:52:76:c9:f8:6a:82:6e:bf:af:7a:05:93:55:
ba:6f:8b:e5:f7:98:e1:fc:eb:b8:55:74:d5:13:5b:4c:5f:a7:
0e:20:65:96:07:7d:82:c4:04:ed:44:4b:2a:8a:5f:14:cf:ad:
87:61:ae:80:4c:35:b3:d6:02:60:49:47:5d:7c:98:96:7a:dc:
b3:99:cc:20:f2:9d:9f:c4:7f:2b:59:af:e3:61:f3:db:be:48:
d6:1b:59:2b:e1:c1:df:02:ff:f5:2c:ce:d7:03:01:14:16:79:
87:64:2d:80:d0:9b:ae:1e:8d:1e:29:fd:10:51:db:62:7a:21:
9a:3f:76:97:d8:14:f2:0a:7b:6f:3d:e6:57:61:6a:85:b4:7c:
87:d4:e8:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a42XoE06+N2FGlajiJD/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzkxYWUyOGE5MWQ1OTkxMzQ2YWVkYWYxN2JmODYwNWM4
Y2YyMmUwHhcNMjYwNDE3MTAwMTI3WhcNMjYwNDE4MTAwMTI3WjAzMTEwLwYDVQQD
EyhiZjFlNzAxZTAwNjM1YzhlNWIzZDU3Y2IxNWM0NDg2N2JkODFjYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T9yC94I5NhdMg4hSCQm8Ec2HuuJ
v4tME+uDdP43QwtE9blV64k3Fl8TT7y5FW+cbaYltHXSo3KlmCfER8WCiOQZ17se
C0RRSg/prh0mYlZukcTxe4Sr0OD2Ulr5p1VkYATFreBfhwEc7yzfFnkdpf9pJypP
IkkvlUjPz5BVwxa0msmDkZvpMeBt7Nuj+vhozSrH3EgHk/NEczPOswyAHdPIP7Q1
1hBRvAOm5JJHCmB5nKqbZaIifZwjXEL3dCDD/425ZFP4raboxnUWhBT/SNNxK0n1
XgCrCeX3DPPvCbUxVbnHvse67bbfutwlQJ4ulBJvnMky9pPw0KMgP5PMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ecB4AY1yOWz1XyxXESGe9gctGMB8GA1UdIwQY
MBaAFCc5GuKKkdWZE0au2vF7+GBcjPIuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAt
YTRjMTI4MDc1ODYyLzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82NjU3OGYtZThiZi00MGUwLWFiMzAtYTRjMTI4MDc1ODYy
LzEvSnprYTRvcVIxWmtUUnE3YThYdjRZRnlNOGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX47fvLW
U53TKi9F+hLh4c2+dvFpzLBcLCzWseIaeqHoQbDYEPhXKnRaKTGfYL26GGDPboG5
4Ge+qo3ds91GqV+6777TonrZZnJtCabPeYzMi4UzInGAcpZpSOekKaPtlsVB0Ebm
CJXRgfaqurxDSkpSdsn4aoJuv696BZNVum+L5feY4fzruFV01RNbTF+nDiBllgd9
gsQE7URLKopfFM+th2GugEw1s9YCYElHXXyYlnrcs5nMIPKdn8R/K1mv42Hz275I
1htZK+HB3wL/9SzO1wMBFBZ5h2QtgNCbrh6NHin9EFHbYnohmj92l9gU8gp7bz3m
V2FqhbR8h9To5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:14 2026 by rpki-client