Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: oYMI1I6fVgMewU434cVlOhaiiYpRfNBhVoaPNCcEfy0=
Subject key identifier: 90:41:35:BF:F4:49:86:40:B7:5F:F1:41:20:22:33:8F:AD:7C:29:61
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 019D9A0712B509A31DEDCEFFAAA51F51DF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 1599
Signing time: Fri 17 Apr 2026 06:00:47 +0000
Manifest this update: Fri 17 Apr 2026 06:00:47 +0000
Manifest next update: Sat 18 Apr 2026 06:00:47 +0000
Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: EAnGLAzU6o51Gpm1ddm8JfC7vkqQ6Xd3PIDcmVTUDTg=)
2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:12:b5:09:a3:1d:ed:ce:ff:aa:a5:1f:51:df:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Apr 17 06:00:47 2026 GMT
Not After : Apr 18 06:00:47 2026 GMT
Subject: CN=904135bff4498640b75ff1412022338fad7c2961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:fc:75:a7:e0:e4:2e:0c:0a:2a:63:6e:23:
2a:9f:ad:5d:a8:46:f4:57:71:77:2e:02:2c:1a:b5:
77:a1:97:8c:86:c2:be:3c:4b:46:1e:9e:eb:e5:0a:
b6:da:1e:a6:32:e0:ff:08:ac:be:0d:b5:cd:b8:9a:
1a:f1:a3:b4:8d:6b:94:ff:03:73:eb:b7:88:5f:c0:
ae:b6:c0:e3:6a:87:b4:5b:2a:c9:01:67:e5:76:c9:
02:6c:32:15:1d:2b:b7:4a:06:e0:08:e1:a6:b0:19:
81:3c:48:cf:39:78:91:8f:cc:3e:63:85:63:0a:26:
af:8b:a0:5f:90:47:01:e7:62:9e:04:d9:f8:67:31:
79:87:10:0d:96:9c:37:2a:63:e7:c4:c3:38:35:2b:
7a:ed:55:69:ad:db:12:d4:d0:23:81:a4:92:a1:36:
e9:8f:92:e2:b9:40:a2:d6:86:0c:73:c5:ec:c6:75:
41:cd:e2:cf:c0:84:6b:a7:09:73:55:6e:0f:15:b8:
89:fb:c2:03:46:a0:bd:13:b8:3c:7e:10:ce:07:7b:
03:4c:f5:3e:69:70:80:2a:6f:18:70:68:86:22:d0:
a4:3f:3d:05:42:c5:74:6a:ca:75:ad:81:fa:03:7b:
bd:e6:95:9b:9f:4a:3c:cc:8e:c8:01:a8:46:4c:8a:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:41:35:BF:F4:49:86:40:B7:5F:F1:41:20:22:33:8F:AD:7C:29:61
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:bd:69:3d:41:6b:62:52:7d:a3:f4:97:3c:8f:96:ba:92:
ab:de:fd:d4:70:a7:2a:0d:6f:e4:28:cd:f0:37:4e:bc:d5:04:
d4:0e:a2:79:06:6d:a7:4a:a1:b4:a3:25:89:83:9e:66:ab:90:
6d:32:15:67:32:4b:c2:aa:e3:bd:21:9f:42:37:df:9c:70:87:
ff:3f:9c:fe:09:8f:29:64:32:e0:f6:14:f8:90:90:e9:f3:fb:
d7:fa:86:87:ea:4f:64:c2:d6:6a:e9:8e:3a:da:9e:88:f8:7d:
7d:7b:84:9b:c2:3f:87:ad:04:62:46:09:a9:51:f1:44:1e:66:
5e:a6:18:78:d6:47:2a:92:d5:cf:3e:d0:f2:e5:42:ae:08:08:
80:6d:6c:33:71:24:2e:6a:43:12:0e:7e:f7:8e:78:f9:31:1f:
63:c4:6c:53:d8:df:6b:04:0c:dc:94:63:93:f0:24:65:87:99:
de:e7:95:2c:b9:3e:f4:bb:43:e8:c0:d9:1d:6e:d8:52:62:35:
ec:2a:b9:92:51:e1:da:a5:8b:3c:ab:ff:89:a2:be:b0:19:3d:
39:39:4a:18:e7:a1:bf:34:ec:13:1f:07:81:a1:d6:5a:0a:49:
9d:dd:6b:c7:38:07:5b:28:4f:ba:18:2f:01:92:51:12:5c:c2:
fb:9f:f5:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBxK1CaMd7c7/qqUfUd8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDVlZjBjZjJlMjk3NDg5ZDE5NzM3MGY4ODVkNTlmODll
OTVhYWIwHhcNMjYwNDE3MDYwMDQ3WhcNMjYwNDE4MDYwMDQ3WjAzMTEwLwYDVQQD
Eyg5MDQxMzViZmY0NDk4NjQwYjc1ZmYxNDEyMDIyMzM4ZmFkN2MyOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5/8dafg5C4MCipjbiMqn61dqEb0
V3F3LgIsGrV3oZeMhsK+PEtGHp7r5Qq22h6mMuD/CKy+DbXNuJoa8aO0jWuU/wNz
67eIX8CutsDjaoe0WyrJAWfldskCbDIVHSu3SgbgCOGmsBmBPEjPOXiRj8w+Y4Vj
Ciavi6BfkEcB52KeBNn4ZzF5hxANlpw3KmPnxMM4NSt67VVprdsS1NAjgaSSoTbp
j5LiuUCi1oYMc8XsxnVBzeLPwIRrpwlzVW4PFbiJ+8IDRqC9E7g8fhDOB3sDTPU+
aXCAKm8YcGiGItCkPz0FQsV0asp1rYH6A3u95pWbn0o8zI7IAahGTIpjvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBBNb/0SYZAt1/xQSAiM4+tfClhMB8GA1UdIwQY
MBaAFCRF7wzy4pdInRlzcPiF1Z+J6VqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTct
MDk5YmY3MzQzZTJjLzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jMjczMDAtZmI5NS00OWQ0LTg2NTctMDk5YmY3MzQzZTJj
LzEvSkVYdkRQTGlsMGlkR1hOdy1JWFZuNG5wV3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGO9aT1B
a2JSfaP0lzyPlrqSq9791HCnKg1v5CjN8DdOvNUE1A6ieQZtp0qhtKMliYOeZquQ
bTIVZzJLwqrjvSGfQjffnHCH/z+c/gmPKWQy4PYU+JCQ6fP71/qGh+pPZMLWaumO
OtqeiPh9fXuEm8I/h60EYkYJqVHxRB5mXqYYeNZHKpLVzz7Q8uVCrggIgG1sM3Ek
LmpDEg5+9454+TEfY8RsU9jfawQM3JRjk/AkZYeZ3ueVLLk+9LtD6MDZHW7YUmI1
7Cq5klHh2qWLPKv/iaK+sBk9OTlKGOehvzTsEx8HgaHWWgpJnd1rxzgHWyhPuhgv
AZJRElzC+5/1vA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:33 2026 by rpki-client