Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: G3yZfZaJNV//otbdUkInl9UAYfKRrbsYX2/0jzmESCk=
Subject key identifier: CB:D8:A6:76:4B:6A:37:CA:63:BF:B8:C5:31:4A:55:8F:A9:63:DB:02
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019DA45372E08857C79CDA66F48D409EC05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 14AC
Signing time: Sun 19 Apr 2026 06:00:25 +0000
Manifest this update: Sun 19 Apr 2026 06:00:25 +0000
Manifest next update: Mon 20 Apr 2026 06:00:25 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: 8MFTGqAVC4yheEnWs5D+wwXAEwOgPGfUzeFHoHrHS8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:72:e0:88:57:c7:9c:da:66:f4:8d:40:9e:c0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Apr 19 06:00:25 2026 GMT
Not After : Apr 20 06:00:25 2026 GMT
Subject: CN=cbd8a6764b6a37ca63bfb8c5314a558fa963db02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:67:75:ea:40:9d:97:2f:de:34:39:91:47:
30:90:5c:f4:e9:82:8f:79:10:12:76:84:31:69:59:
e6:e0:7f:24:bf:06:42:dc:75:a4:86:3f:47:94:d6:
f5:7a:20:53:be:6d:cc:43:d8:31:1a:ea:6f:81:90:
08:3d:00:f7:4a:f5:c7:d6:ac:ba:86:84:cb:36:76:
22:d4:04:e8:6e:9a:34:1c:ec:9d:c9:c4:65:9e:09:
ef:60:c9:f2:3b:76:65:de:97:61:91:52:30:d8:5a:
ba:cc:be:f0:6a:9c:15:80:e9:3f:e1:cd:c2:10:74:
62:7f:c3:04:03:a3:8b:ee:55:aa:cb:84:2d:05:84:
2a:c1:65:4a:a5:d3:81:dd:43:d9:bd:0a:a9:38:7e:
d1:3e:ca:c0:5a:41:df:8c:15:ea:cc:8c:76:9f:72:
d2:f0:a8:7b:45:16:96:11:13:2b:b7:8c:26:fa:34:
44:fb:f1:b6:32:b6:38:13:f6:bc:4f:fa:bb:3e:ef:
3a:48:77:c3:06:09:28:e9:87:5b:1e:ce:56:4f:29:
d2:bf:7a:de:50:fd:1f:3a:2c:21:93:48:eb:6f:6e:
95:23:f6:b7:d4:53:d1:07:a6:6a:9a:f7:28:b4:1f:
8c:cb:cf:54:f7:b0:6c:0c:ea:ef:5c:91:ce:d0:b4:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:A6:76:4B:6A:37:CA:63:BF:B8:C5:31:4A:55:8F:A9:63:DB:02
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:aa:ba:9f:fd:cc:ff:23:5a:a0:11:79:17:4f:b2:ee:95:92:
1b:cf:b8:33:1c:03:f0:25:4e:01:10:a7:77:44:70:45:a7:1a:
5d:1a:d7:dc:9e:e5:8e:88:f8:49:4d:36:f7:d1:f1:52:86:e2:
84:a9:61:70:35:6a:c2:04:06:2a:6c:8a:c5:c5:d5:8e:9f:5c:
ba:bf:33:be:c6:e0:48:8c:02:88:1e:75:d5:6b:ce:5e:dd:b2:
ea:b2:07:cb:11:b8:c4:9a:ce:cc:7e:f7:c2:e6:d7:55:a3:cd:
43:fb:05:48:28:4c:43:2d:6b:12:19:57:24:ea:64:16:3e:5b:
89:d4:01:01:9d:d3:bc:08:17:8f:0c:ad:90:71:1d:b0:50:a3:
66:4a:a4:50:0f:40:dd:83:8e:72:26:e6:fa:4d:7f:26:3f:91:
a8:23:7b:58:b4:6f:f5:f6:c0:74:fc:34:f9:e7:40:17:b7:48:
e5:e5:c7:b3:ac:47:98:11:f5:98:b6:b7:54:62:2a:9a:38:ec:
88:ca:8f:48:dc:06:ad:81:fa:be:f3:49:12:af:6d:a8:12:36:
77:c1:e8:52:18:23:18:82:b6:90:2c:ba:53:66:b9:aa:b7:3e:
42:89:97:52:51:65:af:1f:4d:88:d0:44:09:9b:ef:65:22:2c:
7d:21:83:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU3LgiFfHnNpm9I1AnsBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWQ0NWUzMTcyNTdlMTcwYTIwMzBlNzliMGY1Zjc0NDA2
YTc4NDIwHhcNMjYwNDE5MDYwMDI1WhcNMjYwNDIwMDYwMDI1WjAzMTEwLwYDVQQD
EyhjYmQ4YTY3NjRiNmEzN2NhNjNiZmI4YzUzMTRhNTU4ZmE5NjNkYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod5ndepAnZcv3jQ5kUcwkFz06YKP
eRASdoQxaVnm4H8kvwZC3HWkhj9HlNb1eiBTvm3MQ9gxGupvgZAIPQD3SvXH1qy6
hoTLNnYi1ATobpo0HOydycRlngnvYMnyO3Zl3pdhkVIw2Fq6zL7wapwVgOk/4c3C
EHRif8MEA6OL7lWqy4QtBYQqwWVKpdOB3UPZvQqpOH7RPsrAWkHfjBXqzIx2n3LS
8Kh7RRaWERMrt4wm+jRE+/G2MrY4E/a8T/q7Pu86SHfDBgko6YdbHs5WTynSv3re
UP0fOiwhk0jrb26VI/a31FPRB6ZqmvcotB+My89U97BsDOrvXJHO0LRXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvYpnZLajfKY7+4xTFKVY+pY9sCMB8GA1UdIwQY
MBaAFI6tReMXJX4XCiAw55sPX3RAanhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmIt
MDhiZGNkNTMzYjYxLzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS84MWVhZjYtNjZjZi00YjIxLThmZmItMDhiZGNkNTMzYjYx
LzEvanExRjR4Y2xmaGNLSUREbm13OWZkRUJxZUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaq6n/3M
/yNaoBF5F0+y7pWSG8+4MxwD8CVOARCnd0RwRacaXRrX3J7ljoj4SU0299HxUobi
hKlhcDVqwgQGKmyKxcXVjp9cur8zvsbgSIwCiB511WvOXt2y6rIHyxG4xJrOzH73
wubXVaPNQ/sFSChMQy1rEhlXJOpkFj5bidQBAZ3TvAgXjwytkHEdsFCjZkqkUA9A
3YOOcibm+k1/Jj+RqCN7WLRv9fbAdPw0+edAF7dI5eXHs6xHmBH1mLa3VGIqmjjs
iMqPSNwGrYH6vvNJEq9tqBI2d8HoUhgjGIK2kCy6U2a5qrc+QomXUlFlrx9NiNBE
CZvvZSIsfSGDWQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:44 2026 by rpki-client