Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: 9nQU2rDn0wk+zLhqBfPtBwH2nadwlUtkPsIYLQPywY8=
Subject key identifier: 87:6E:79:F7:81:D1:EE:BF:A7:69:A6:BE:FB:41:90:E6:5F:C0:0F:49
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019D98BDAE16F6BE2B14260E7911CB2A4C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 161D
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: JboOYoZglAM+ol3ntar9ZXHyS2AmeCyyLe6TCbFkm2o=)
2: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (hash: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk=)
3: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (hash: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ae:16:f6:be:2b:14:26:0e:79:11:cb:2a:4c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=876e79f781d1eebfa769a6befb4190e65fc00f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9c:d0:0a:27:21:10:c9:68:e6:8e:d1:55:6a:
a8:9a:04:65:e7:ea:32:a0:71:2b:86:15:41:46:d9:
ac:46:2c:7b:d6:b2:21:f6:5d:55:73:88:9a:40:08:
1c:1e:7a:6d:40:63:60:fe:9b:91:4c:b5:c5:71:c0:
b1:1a:24:07:58:3d:60:31:4b:80:cb:ca:f3:55:14:
20:9a:31:29:c5:83:f5:90:de:2c:7c:3e:b1:5d:20:
7d:46:65:be:4f:59:d0:54:38:d9:2b:4c:11:f5:61:
81:da:f0:46:a3:34:87:04:78:16:6e:41:e3:52:d6:
77:14:c1:97:12:de:72:88:81:a4:85:71:d3:57:98:
d9:58:ba:d3:54:7f:16:39:3b:dc:c1:16:31:d7:6b:
0c:24:49:2c:1d:d8:e3:c7:3c:bb:63:7e:83:f9:76:
81:66:c1:b0:fb:51:70:e8:8c:a0:22:af:e4:44:d6:
62:91:79:ed:7d:0d:79:b9:37:cf:a2:9f:78:1e:cf:
f0:84:67:b4:af:e6:eb:04:2f:be:d1:e3:26:2e:00:
03:15:7f:67:1e:b8:c5:27:7e:4f:e9:b9:ce:fc:00:
32:b9:8e:cf:60:a6:ff:b1:7e:3a:f2:0e:de:17:ba:
e1:d1:94:a8:76:7d:58:44:de:c2:96:68:c0:b7:c6:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:79:F7:81:D1:EE:BF:A7:69:A6:BE:FB:41:90:E6:5F:C0:0F:49
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f8:7f:b5:5e:ab:aa:d2:fc:d6:f9:42:13:16:b0:fa:38:87:
61:6e:3f:4c:a1:8e:e3:69:1c:5a:a2:47:ff:bb:b0:3d:15:ba:
01:92:e2:25:b6:6d:c3:6a:dc:bc:a8:1b:b0:4a:47:38:15:04:
50:24:b1:38:06:a5:0c:97:60:5d:ed:db:7e:c3:61:b6:14:7c:
c1:e7:c0:e1:6e:87:3b:22:64:6c:b7:8c:1f:96:ff:c4:46:39:
01:d5:e5:02:56:2a:51:0d:9e:81:08:70:d0:e7:0a:21:87:09:
23:fc:6c:ce:42:35:8b:96:64:0d:e1:db:d8:8c:00:72:fb:ab:
f3:57:f5:83:05:d4:b1:9b:8d:0c:51:6e:ac:c9:93:c0:97:62:
07:2f:74:41:80:0e:11:99:5d:b8:aa:70:51:6d:a3:a8:67:ab:
1e:f6:ac:a8:b9:8d:b5:e7:3a:f9:28:e8:ba:e7:3b:33:8f:fb:
b0:2c:32:33:19:fe:af:a3:78:9e:b3:85:2a:59:43:2a:85:11:
57:76:00:f6:ff:d4:ae:7b:c7:b4:ea:48:17:c9:bb:0c:08:3e:
10:53:4b:52:de:a6:f2:ad:0a:c6:be:49:62:1e:aa:3e:e6:a6:
87:8e:dd:6b:77:c2:7f:f7:d5:95:25:26:36:a1:0f:5e:5d:f9:
17:13:08:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yva4W9r4rFCYOeRHLKkx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj
NjcyNGYwHhcNMjYwNDE3MDAwMTAwWhcNMjYwNDE4MDAwMTAwWjAzMTEwLwYDVQQD
Eyg4NzZlNzlmNzgxZDFlZWJmYTc2OWE2YmVmYjQxOTBlNjVmYzAwZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pzQCichEMlo5o7RVWqomgRl5+oy
oHErhhVBRtmsRix71rIh9l1Vc4iaQAgcHnptQGNg/puRTLXFccCxGiQHWD1gMUuA
y8rzVRQgmjEpxYP1kN4sfD6xXSB9RmW+T1nQVDjZK0wR9WGB2vBGozSHBHgWbkHj
UtZ3FMGXEt5yiIGkhXHTV5jZWLrTVH8WOTvcwRYx12sMJEksHdjjxzy7Y36D+XaB
ZsGw+1Fw6IygIq/kRNZikXntfQ15uTfPop94Hs/whGe0r+brBC++0eMmLgADFX9n
HrjFJ35P6bnO/AAyuY7PYKb/sX468g7eF7rh0ZSodn1YRN7ClmjAt8bdcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIduefeB0e6/p2mmvvtBkOZfwA9JMB8GA1UdIwQY
MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt
OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1
LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/h/tV6r
qtL81vlCExaw+jiHYW4/TKGO42kcWqJH/7uwPRW6AZLiJbZtw2rcvKgbsEpHOBUE
UCSxOAalDJdgXe3bfsNhthR8wefA4W6HOyJkbLeMH5b/xEY5AdXlAlYqUQ2egQhw
0OcKIYcJI/xszkI1i5ZkDeHb2IwAcvur81f1gwXUsZuNDFFurMmTwJdiBy90QYAO
EZlduKpwUW2jqGerHvasqLmNtec6+Sjouuc7M4/7sCwyMxn+r6N4nrOFKllDKoUR
V3YA9v/UrnvHtOpIF8m7DAg+EFNLUt6m8q0Kxr5JYh6qPuamh47da3fCf/fVlSUm
NqEPXl35FxMI2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:15:33 2026 by rpki-client