Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: m8VWW8QnTtB1N8/MBlESfoHaV5es/h/+T8N0dmUDKec=
Subject key identifier: 74:97:32:24:DB:3B:41:6F:56:17:25:B2:AC:06:C5:80:2A:07:F2:07
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019D984F94FB93EE63636F55E18803F70726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 160D
Signing time: Thu 16 Apr 2026 22:00:45 +0000
Manifest this update: Thu 16 Apr 2026 22:00:45 +0000
Manifest next update: Fri 17 Apr 2026 22:00:45 +0000
Files and hashes: 1: jOlvTqoRsdAulg6Y3XpZsAr0oMk.roa (hash: cs60eVRzgZLIh6eTxfnRAFFGp7Qvb56odPMGxJ4uAvU=)
2: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: eCq2dhyMPoU4xZwzBHGCckkYUz5BIgCRMRsSu0YjXnk=)
3: sAH-vh-27sRa8XMB1zXDPSKTTFE.roa (hash: Vvwat5s3NJzZ4utG1tsbAtKbf8nI+e0SigwDHdU+hO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:94:fb:93:ee:63:63:6f:55:e1:88:03:f7:07:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Apr 16 22:00:45 2026 GMT
Not After : Apr 17 22:00:45 2026 GMT
Subject: CN=74973224db3b416f561725b2ac06c5802a07f207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:d5:d8:10:cb:ad:d7:a5:19:8c:ce:3b:a0:
c3:bf:85:bf:2b:79:d6:1b:8e:d9:48:4d:de:48:27:
6b:35:74:54:48:0f:24:c0:03:b6:93:dc:52:b3:94:
39:52:ca:61:7e:49:4e:d5:aa:de:0b:1a:ec:88:42:
f7:de:86:84:da:16:1d:c9:a3:ff:13:2a:f3:cc:52:
a3:04:ce:35:8d:52:bf:f6:d4:9f:9f:01:4f:99:81:
94:6e:45:6b:d4:b7:59:fd:d4:ed:72:bd:ef:00:f5:
fa:75:33:ec:a7:b6:90:bc:14:2a:b3:79:33:ab:5f:
60:65:db:14:87:b4:1f:06:bd:35:2b:26:49:06:4f:
6a:18:ef:00:c8:89:b5:1d:59:70:8c:f6:50:75:96:
bc:29:6a:3a:f0:35:75:f4:89:d0:09:a5:74:02:98:
2d:5f:33:cf:d9:55:0c:7d:28:88:2f:e0:6e:0e:93:
cb:8a:f6:3c:96:7a:19:5d:2e:4f:e7:50:d0:d1:d2:
db:6b:62:09:8a:b0:d5:e3:bc:c7:65:f4:e5:35:06:
73:56:07:d7:9a:91:b1:5b:4d:78:50:f7:40:76:dd:
49:d5:ac:34:d3:77:49:e2:e0:90:ca:00:2b:d7:47:
0d:54:25:90:c1:c6:93:5b:0c:9c:18:9b:2a:28:3e:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:32:24:DB:3B:41:6F:56:17:25:B2:AC:06:C5:80:2A:07:F2:07
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:d8:45:8a:d3:9b:45:d6:60:95:ae:1b:d2:15:cf:53:08:
45:b0:3b:5f:26:a0:32:42:3e:00:51:d4:d5:66:73:79:ba:b7:
55:a4:5c:61:0c:35:c6:e6:dd:e7:f4:56:cd:97:de:1b:75:fc:
9b:f8:6f:b8:74:da:d0:67:63:49:53:4c:27:bf:ed:0c:d1:cf:
dd:6c:7e:c7:b8:93:85:a7:0f:be:b0:47:fd:a2:00:27:e3:e5:
4d:bf:ea:0a:fe:50:58:59:01:00:b4:60:89:11:1a:47:29:54:
f7:42:92:90:6e:a7:06:4d:07:11:2f:e9:a8:23:b4:4c:0e:47:
51:39:13:ca:ee:1a:01:8d:58:c4:f0:26:ab:6f:36:f4:b2:1c:
8d:05:f6:53:88:ca:6b:e3:4e:ac:03:06:6d:d0:76:67:4d:79:
93:57:79:37:ed:1e:f5:e9:a0:93:07:59:d0:8c:3b:52:97:cd:
82:f0:7d:1c:c6:82:c3:9d:88:b4:ad:11:d7:d2:7e:36:09:87:
33:53:8c:c2:9a:49:8d:13:5b:dc:f5:c9:15:0b:b8:a2:5e:01:
9c:3e:e8:0e:25:26:90:5a:41:53:ed:48:b2:b2:33:4f:d1:f6:
57:db:b7:78:7f:e5:d9:99:ca:78:1d:8e:e9:64:45:d7:80:96:
44:b0:47:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT5T7k+5jY29V4YgD9wcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjYwNDE2MjIwMDQ1WhcNMjYwNDE3MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg3NDk3MzIyNGRiM2I0MTZmNTYxNzI1YjJhYzA2YzU4MDJhMDdmMjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTDV2BDLrdelGYzOO6DDv4W/K3nW
G47ZSE3eSCdrNXRUSA8kwAO2k9xSs5Q5UsphfklO1areCxrsiEL33oaE2hYdyaP/
EyrzzFKjBM41jVK/9tSfnwFPmYGUbkVr1LdZ/dTtcr3vAPX6dTPsp7aQvBQqs3kz
q19gZdsUh7QfBr01KyZJBk9qGO8AyIm1HVlwjPZQdZa8KWo68DV19InQCaV0Apgt
XzPP2VUMfSiIL+BuDpPLivY8lnoZXS5P51DQ0dLba2IJirDV47zHZfTlNQZzVgfX
mpGxW014UPdAdt1J1aw003dJ4uCQygAr10cNVCWQwcaTWwycGJsqKD7Y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSXMiTbO0FvVhclsqwGxYAqB/IHMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzPYRYrT
m0XWYJWuG9IVz1MIRbA7XyagMkI+AFHU1WZzebq3VaRcYQw1xubd5/RWzZfeG3X8
m/hvuHTa0GdjSVNMJ7/tDNHP3Wx+x7iThacPvrBH/aIAJ+PlTb/qCv5QWFkBALRg
iREaRylU90KSkG6nBk0HES/pqCO0TA5HUTkTyu4aAY1YxPAmq2829LIcjQX2U4jK
a+NOrAMGbdB2Z015k1d5N+0e9emgkwdZ0Iw7UpfNgvB9HMaCw52ItK0R19J+NgmH
M1OMwppJjRNb3PXJFQu4ol4BnD7oDiUmkFpBU+1IsrIzT9H2V9u3eH/l2ZnKeB2O
6WRF14CWRLBHpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:21 2026 by rpki-client