Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: fQgU/Sdp8M2eRb6QgdgUWqJu9WQnM+UJBvVV3deMsSQ=
Subject key identifier: DB:E2:C5:4A:57:EE:C2:04:D4:D6:FA:56:7F:52:5F:84:91:86:D4:66
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019ED4D0187DF6163D472A08DFE896A838B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1967
Signing time: Wed 17 Jun 2026 09:01:07 +0000
Manifest this update: Wed 17 Jun 2026 09:01:07 +0000
Manifest next update: Thu 18 Jun 2026 09:01:07 +0000
Files and hashes: 1: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
2: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: Eprfmf9C15yTlcP5iSsMMaKz3vvzK3WKxqES/XQ3raU=)
3: _Sg-Ok67OaoyeP-hghZrij9Q1F8.roa (hash: lBGTEGK+kOeRMB1Hj50S1sF2hEOSmV/Hxb+g9yqzKMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:18:7d:f6:16:3d:47:2a:08:df:e8:96:a8:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jun 17 09:01:07 2026 GMT
Not After : Jun 18 09:01:07 2026 GMT
Subject: CN=dbe2c54a57eec204d4d6fa567f525f849186d466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:70:84:70:c7:a7:8f:de:78:65:c0:48:70:
1f:79:a3:47:16:b4:be:3a:38:90:91:ee:6a:3b:52:
2e:c4:ac:e1:1c:3c:bb:b6:33:f9:c3:93:25:66:c1:
5a:54:84:62:90:d7:6e:fd:13:ef:3c:2f:23:8c:77:
16:56:12:f6:19:48:23:79:7f:ca:eb:fc:39:4f:5e:
7d:ee:3e:c5:6d:c9:54:22:fa:19:ff:d2:10:a1:97:
fd:2c:c4:21:bd:fb:ab:92:0b:b3:f3:9b:5e:af:e2:
83:7c:48:15:29:13:c6:9d:74:d5:b1:1b:98:dc:1f:
81:ae:51:08:5a:fa:ed:d5:0b:e1:0f:66:41:0d:1c:
6b:a4:cc:a1:f7:33:f4:ce:27:0a:e6:85:d1:0c:ad:
5d:3a:20:ef:95:87:56:06:de:42:89:ad:b9:04:74:
12:df:97:1d:8d:ce:40:4f:65:48:5e:36:dc:00:de:
c7:8a:e0:ff:e6:4e:23:08:54:55:70:cb:2a:80:61:
9c:32:73:08:07:18:5d:75:03:0e:7d:a6:97:a1:6f:
9b:44:19:e9:3f:e6:8c:25:9e:90:08:81:a5:23:c6:
ea:e1:dd:4f:d2:d7:61:92:42:bf:df:8d:f6:fc:12:
04:ec:4d:de:ec:17:52:39:dd:da:da:8f:d5:be:66:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E2:C5:4A:57:EE:C2:04:D4:D6:FA:56:7F:52:5F:84:91:86:D4:66
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:bd:5d:86:7a:59:a5:bc:98:be:96:f4:4a:cb:9a:5a:1b:
a6:75:b4:9a:ae:e3:8a:69:1a:7a:66:ab:48:19:9b:f0:20:63:
c6:b4:7d:cb:f6:2b:8a:d1:98:af:9a:20:7a:f6:09:ee:2b:07:
ce:c2:a4:08:54:3b:48:41:74:e5:ea:5b:79:ae:69:ab:e6:99:
73:c9:1d:00:73:bb:8b:5f:f1:66:38:32:67:c5:95:ba:f5:8c:
8a:e8:74:45:02:3e:6c:ef:1a:c4:97:1c:34:f7:20:d1:7f:a9:
b5:09:46:a0:ee:c2:41:e3:69:dc:3d:39:a8:3b:6d:86:98:52:
31:d7:e8:21:19:db:b2:5d:1d:ae:81:11:3d:1a:00:b6:1e:b2:
38:43:85:9f:49:87:87:58:54:f5:af:7a:a5:50:66:c6:3e:55:
24:dd:1c:5a:59:a0:ab:46:c0:17:e3:69:c1:90:85:a2:37:e1:
12:27:06:db:3a:0a:91:6d:2f:b0:fc:39:84:15:88:7a:8f:25:
04:10:97:40:7e:88:7e:ba:68:7e:36:3d:bc:16:dd:88:0b:54:
33:73:09:f8:6d:e3:00:b2:ad:07:2b:ac:82:08:cf:18:6c:76:
f7:c7:b2:e2:fd:7f:2c:be:25:2c:db:69:9e:b5:6b:31:41:33:
5b:dd:b0:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7U0Bh99hY9RyoI3+iWqDi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3
YmYyMzIwHhcNMjYwNjE3MDkwMTA3WhcNMjYwNjE4MDkwMTA3WjAzMTEwLwYDVQQD
EyhkYmUyYzU0YTU3ZWVjMjA0ZDRkNmZhNTY3ZjUyNWY4NDkxODZkNDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUdwhHDHp4/eeGXASHAfeaNHFrS+
OjiQke5qO1IuxKzhHDy7tjP5w5MlZsFaVIRikNdu/RPvPC8jjHcWVhL2GUgjeX/K
6/w5T1597j7FbclUIvoZ/9IQoZf9LMQhvfurkguz85ter+KDfEgVKRPGnXTVsRuY
3B+BrlEIWvrt1QvhD2ZBDRxrpMyh9zP0zicK5oXRDK1dOiDvlYdWBt5Cia25BHQS
35cdjc5AT2VIXjbcAN7HiuD/5k4jCFRVcMsqgGGcMnMIBxhddQMOfaaXoW+bRBnp
P+aMJZ6QCIGlI8bq4d1P0tdhkkK/3432/BIE7E3e7BdSOd3a2o/VvmaPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvixUpX7sIE1Nb6Vn9SX4SRhtRmMB8GA1UdIwQY
MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct
N2YyMDEyMTJkODgzLzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz
LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAW9XYZ6
WaW8mL6W9ErLmlobpnW0mq7jimkaemarSBmb8CBjxrR9y/YritGYr5ogevYJ7isH
zsKkCFQ7SEF05epbea5pq+aZc8kdAHO7i1/xZjgyZ8WVuvWMiuh0RQI+bO8axJcc
NPcg0X+ptQlGoO7CQeNp3D05qDtthphSMdfoIRnbsl0droERPRoAth6yOEOFn0mH
h1hU9a96pVBmxj5VJN0cWlmgq0bAF+NpwZCFojfhEicG2zoKkW0vsPw5hBWIeo8l
BBCXQH6IfrpofjY9vBbdiAtUM3MJ+G3jALKtByusggjPGGx298ey4v1/LL4lLNtp
nrVrMUEzW92wvQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:04:38 2026 by rpki-client