Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: m4b3sg3BWR3oL8b4jIkxUGxSNV63tykUBsyGL9paq50=
Subject key identifier: 09:2C:EC:68:F8:7E:CC:67:23:C4:7D:B0:2B:3A:90:18:72:8A:37:23
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019D9AE2D5CBE75DFD810FD3EC5B8BCF01FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 051C
Signing time: Fri 17 Apr 2026 10:00:50 +0000
Manifest this update: Fri 17 Apr 2026 10:00:50 +0000
Manifest next update: Sat 18 Apr 2026 10:00:50 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: XXH2HR3Yt3zatpd/+mxkmwNIJyGRw9PTo++0UThkRAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:d5:cb:e7:5d:fd:81:0f:d3:ec:5b:8b:cf:01:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: Apr 17 10:00:50 2026 GMT
Not After : Apr 18 10:00:50 2026 GMT
Subject: CN=092cec68f87ecc6723c47db02b3a9018728a3723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:02:ab:0b:1e:32:5f:b3:ab:7e:22:01:a4:
a6:64:09:2a:ae:3c:09:f0:f4:28:63:f9:c3:9c:10:
e6:32:31:90:41:c5:de:a9:19:bf:fd:d9:11:41:26:
11:0a:6d:f4:aa:1d:4a:86:bd:6d:79:ea:9d:d5:bd:
0c:f3:90:d3:80:fd:33:97:b6:c0:c2:1f:5f:19:b6:
fa:7d:dc:50:11:51:cf:a5:ce:d3:06:bd:95:6f:f8:
4b:57:81:f0:83:9c:a3:a3:97:28:8b:b2:8b:66:74:
e0:a4:24:7a:ca:b3:ee:77:4e:8b:7b:d7:a1:2e:29:
40:b6:76:06:48:65:75:e9:80:21:a7:78:e0:92:ea:
d0:1b:ed:87:2e:62:15:98:bb:6e:8e:0c:be:15:57:
9f:20:1d:c7:ca:ac:c5:82:6b:54:a7:3b:2c:54:87:
b6:a9:ec:a3:08:44:6d:08:04:2b:cd:70:03:e4:df:
2e:d1:67:47:31:b5:c4:a7:5c:a7:23:ea:0a:27:2a:
ac:32:13:62:2c:28:1c:6c:ca:a6:bd:7b:35:b7:c5:
9c:8f:a7:78:72:1a:83:4d:04:be:5e:3b:cd:11:8e:
41:bf:eb:cc:ab:cb:e9:03:9c:7a:10:7d:50:10:81:
b1:54:da:26:5b:92:83:6a:4e:08:4f:c1:0f:7e:72:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2C:EC:68:F8:7E:CC:67:23:C4:7D:B0:2B:3A:90:18:72:8A:37:23
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:82:66:98:d3:6f:7e:16:d2:3a:46:24:c3:de:d6:dc:12:9b:
00:06:7c:69:d1:47:37:7e:bc:e3:88:1b:ea:6c:a4:56:4b:18:
4d:69:d8:82:c9:4d:59:5a:3d:30:f3:f8:56:50:e5:67:54:67:
7d:48:f4:01:7b:c2:d8:03:45:1e:bd:9e:9f:42:aa:6d:f3:f7:
da:35:80:31:86:67:0b:3a:d8:c2:1f:cc:de:9e:6f:4f:ca:98:
43:6b:df:d6:ef:a4:c9:e6:f9:ae:28:6b:1b:69:04:a8:fa:07:
bc:30:da:99:90:aa:1c:ad:24:8c:8c:0a:ca:02:8b:3b:96:07:
fd:1a:c9:5c:f6:2f:ab:b0:ee:ea:15:67:03:02:97:a4:5b:6f:
63:f7:a8:ec:ce:e1:86:98:4e:fb:38:11:d7:7e:e3:92:f3:a8:
e5:50:f7:78:55:65:ed:68:98:4c:10:f1:46:c6:7e:d5:20:dd:
e0:50:01:58:73:2b:6d:ea:8b:0d:83:a6:d0:aa:92:6a:47:c3:
ae:2d:94:b6:68:20:00:d2:be:e1:ee:e5:64:3f:4e:16:84:f7:
3d:a2:17:5a:d9:23:7d:92:96:d9:1e:50:fe:6a:96:a7:b5:90:
09:4f:f3:a3:30:60:ad:4b:5f:61:74:2e:d9:8c:1e:cd:2d:7c:
23:1e:5b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4tXL5139gQ/T7FuLzwH+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjYwNDE3MTAwMDUwWhcNMjYwNDE4MTAwMDUwWjAzMTEwLwYDVQQD
EygwOTJjZWM2OGY4N2VjYzY3MjNjNDdkYjAyYjNhOTAxODcyOGEzNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJYCqwseMl+zq34iAaSmZAkqrjwJ
8PQoY/nDnBDmMjGQQcXeqRm//dkRQSYRCm30qh1Khr1teeqd1b0M85DTgP0zl7bA
wh9fGbb6fdxQEVHPpc7TBr2Vb/hLV4Hwg5yjo5coi7KLZnTgpCR6yrPud06Le9eh
LilAtnYGSGV16YAhp3jgkurQG+2HLmIVmLtujgy+FVefIB3HyqzFgmtUpzssVIe2
qeyjCERtCAQrzXAD5N8u0WdHMbXEp1ynI+oKJyqsMhNiLCgcbMqmvXs1t8Wcj6d4
chqDTQS+XjvNEY5Bv+vMq8vpA5x6EH1QEIGxVNomW5KDak4IT8EPfnInlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAks7Gj4fsxnI8R9sCs6kBhyijcjMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYJmmNNv
fhbSOkYkw97W3BKbAAZ8adFHN36844gb6mykVksYTWnYgslNWVo9MPP4VlDlZ1Rn
fUj0AXvC2ANFHr2en0KqbfP32jWAMYZnCzrYwh/M3p5vT8qYQ2vf1u+kyeb5rihr
G2kEqPoHvDDamZCqHK0kjIwKygKLO5YH/RrJXPYvq7Du6hVnAwKXpFtvY/eo7M7h
hphO+zgR137jkvOo5VD3eFVl7WiYTBDxRsZ+1SDd4FABWHMrbeqLDYOm0KqSakfD
ri2UtmggANK+4e7lZD9OFoT3PaIXWtkjfZKW2R5Q/mqWp7WQCU/zozBgrUtfYXQu
2YwezS18Ix5byg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:16 2026 by rpki-client