Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: UL8zqznR0N0ZM/LaSLitBLSVpGkUIXlv4SHnfRkscEk=
Subject key identifier: B3:A3:13:DE:FB:AD:96:40:AB:0D:97:E5:64:9C:98:FA:A7:2B:C3:03
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019D99D0AE42DC5C76287F5C6DE8B8B3F5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0FB8
Signing time: Fri 17 Apr 2026 05:01:23 +0000
Manifest this update: Fri 17 Apr 2026 05:01:23 +0000
Manifest next update: Sat 18 Apr 2026 05:01:23 +0000
Files and hashes: 1: E-g-v2Rn7ovW7XAIev5scQP8c8A.roa (hash: q74zdfQNlbmYnT3S1OTFeC3AloIjMONMGPowWsbDW2Y=)
2: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: jVV8GtPAD6UwzkOW6y0526T6C+z0pTFcYrGBLJldOqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ae:42:dc:5c:76:28:7f:5c:6d:e8:b8:b3:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Apr 17 05:01:23 2026 GMT
Not After : Apr 18 05:01:23 2026 GMT
Subject: CN=b3a313defbad9640ab0d97e5649c98faa72bc303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:c5:09:29:6f:c6:97:80:c4:25:11:01:13:
bd:5a:e4:8b:e2:1d:ab:70:b4:ba:4c:bb:f2:b1:6d:
a0:db:be:c7:47:b7:ea:f2:d0:ce:c4:2c:0d:90:02:
75:53:9f:7d:28:d4:9c:24:89:47:92:f9:72:9b:8d:
aa:50:a6:a0:23:e6:35:c5:29:64:46:c3:09:22:52:
c4:8c:b1:75:b6:c8:22:7c:22:91:af:d1:89:a0:90:
75:5f:07:86:3e:6b:53:4b:1b:5b:27:89:89:67:72:
c3:e2:28:d1:13:58:76:c3:ce:68:47:c9:49:1c:de:
8e:cc:d0:43:d8:e1:29:37:88:16:ea:20:6f:ff:12:
3e:4d:cb:fe:87:43:f1:52:fc:97:7f:f7:13:5b:5c:
c8:65:1e:cc:65:b4:84:22:01:05:a3:af:10:9a:5b:
d4:70:a8:f9:3c:3e:9f:3c:c1:29:44:4c:d9:83:1c:
01:6c:09:57:2d:bd:c0:58:b3:e2:53:fb:ba:4c:95:
b7:2d:cf:5c:08:1d:b3:70:f8:1d:9b:d8:da:ac:6e:
29:eb:48:5c:81:3e:ad:f2:4d:13:a1:5e:a9:6b:c6:
ab:16:ae:e0:5a:f0:9e:ca:ed:67:5b:90:e0:70:bc:
ee:d2:2d:3f:eb:be:97:d8:23:d4:af:08:8b:32:0e:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A3:13:DE:FB:AD:96:40:AB:0D:97:E5:64:9C:98:FA:A7:2B:C3:03
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:ee:d9:75:82:33:08:76:fb:dd:09:de:3a:73:63:c6:c2:
66:ed:ab:3f:89:67:24:70:b7:9c:42:5e:05:38:bb:1b:f7:69:
60:61:cc:83:5d:61:46:34:52:11:e0:48:83:13:fc:35:cd:fe:
f0:8f:ee:a6:05:40:65:71:ea:97:de:b4:80:e9:fe:dc:b0:78:
96:73:8a:d8:e8:9a:7a:80:e9:e3:cc:69:86:13:60:5f:ce:30:
59:70:c7:f7:01:d7:0b:9e:4c:83:49:5d:56:c6:c8:07:d1:a1:
1d:ce:2e:d4:93:d2:92:9f:c3:ad:2c:23:7e:b7:a8:87:8f:c2:
e2:b1:12:ba:26:f5:fe:97:7e:43:7f:7c:64:d2:d9:37:54:df:
3d:99:8e:7f:70:09:1a:91:30:7e:b9:42:d5:20:3a:dd:4f:4a:
16:d4:83:49:48:1c:96:16:be:5a:5c:ac:64:a3:2f:a2:65:9c:
6a:c8:1a:66:cc:57:ae:b6:f0:90:1d:90:28:5c:49:f4:f1:f0:
28:2d:3a:e2:f4:68:2e:9b:59:dd:8e:70:a5:90:3f:8c:cf:34:
e7:6f:93:26:17:cf:76:3e:f8:49:ef:eb:97:78:85:b7:d5:b1:
fe:3f:e6:d0:30:8f:84:6e:bf:9c:56:2e:77:66:47:4c:0d:6f:
8a:ff:33:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0K5C3Fx2KH9cbei4s/WmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2NhNjJhMzU4ODFjYWU4ZDJjNTgxMmFjNThjYTA3MTA4
ZDcwYWUwHhcNMjYwNDE3MDUwMTIzWhcNMjYwNDE4MDUwMTIzWjAzMTEwLwYDVQQD
EyhiM2EzMTNkZWZiYWQ5NjQwYWIwZDk3ZTU2NDljOThmYWE3MmJjMzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiXFCSlvxpeAxCURARO9WuSL4h2r
cLS6TLvysW2g277HR7fq8tDOxCwNkAJ1U599KNScJIlHkvlym42qUKagI+Y1xSlk
RsMJIlLEjLF1tsgifCKRr9GJoJB1XweGPmtTSxtbJ4mJZ3LD4ijRE1h2w85oR8lJ
HN6OzNBD2OEpN4gW6iBv/xI+Tcv+h0PxUvyXf/cTW1zIZR7MZbSEIgEFo68QmlvU
cKj5PD6fPMEpREzZgxwBbAlXLb3AWLPiU/u6TJW3Lc9cCB2zcPgdm9jarG4p60hc
gT6t8k0ToV6pa8arFq7gWvCeyu1nW5DgcLzu0i0/676X2CPUrwiLMg4LswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOjE977rZZAqw2X5WScmPqnK8MDMB8GA1UdIwQY
MBaAFCbMpio1iByujSxYEqxYygcQjXCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEt
YmI3YmI1YmYwMGIxLzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEtYmI3YmI1YmYwMGIx
LzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp3u2XWC
Mwh2+90J3jpzY8bCZu2rP4lnJHC3nEJeBTi7G/dpYGHMg11hRjRSEeBIgxP8Nc3+
8I/upgVAZXHql960gOn+3LB4lnOK2OiaeoDp48xphhNgX84wWXDH9wHXC55Mg0ld
VsbIB9GhHc4u1JPSkp/DrSwjfreoh4/C4rESuib1/pd+Q398ZNLZN1TfPZmOf3AJ
GpEwfrlC1SA63U9KFtSDSUgclha+WlysZKMvomWcasgaZsxXrrbwkB2QKFxJ9PHw
KC064vRoLptZ3Y5wpZA/jM8052+TJhfPdj74Se/rl3iFt9Wx/j/m0DCPhG6/nFYu
d2ZHTA1viv8zDg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:15 2026 by rpki-client