Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: /QGgxfaVGN94cKWuAhv5/2WGF8W5+1x8+6bFeEG87cs=
Subject key identifier: 0B:90:C2:50:35:C6:B9:EE:0E:13:5D:3B:CA:AE:09:8C:DD:7E:14:DC
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019D99997B59A9349DE201386A674FA4E56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 1795
Signing time: Fri 17 Apr 2026 04:01:05 +0000
Manifest this update: Fri 17 Apr 2026 04:01:05 +0000
Manifest next update: Sat 18 Apr 2026 04:01:05 +0000
Files and hashes: 1: 0E4TBSV9rvtb2nA9OuzwxCClhkM.roa (hash: UESqw2tC3trMOqM+bN2TWQ56qhklzPd74NTv4soGU2c=)
2: Fb1-dZNCLLAcnEB2Ti_7na8L3DI.roa (hash: drGKyU8ZStuTt2RE0qNyuAHVNHKysS8wlS5+BTY+Lpw=)
3: Fr-pYjA0DMeKObSDUxj7XCUGD5E.roa (hash: NLBLl8XhEwUwmOEQuE68fLj2rtmpnyK8kpfDaShHB6o=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: 40ps5tr/BUEy/iZGuldCuuf6R55PvexpBRmSnX1+Jpk=)
5: Q419CMj39itEx5d1rZmvp11tEJo.roa (hash: aVTyR4miZff0FyNpx215JRudcRdWaUXQlchw+P/x8P0=)
6: bLrhejxGzYlplxbqpieFMxs8DTo.roa (hash: CHc0tXNDgBxUAvjvHgZDJcY5ybMe0rKmbUth2iY5KUY=)
7: caT7i0Ho-ce70M9ACVatVgOV6EE.roa (hash: OVGWsWiY+37CUfHQZ+flCcNGvE7DfMZs+E/YKFAYsXI=)
8: h4EWMG2Dd54unrlyJO11e05TJek.roa (hash: bmr5lQGgTSTyLvAWa1p7TSXtQmQWDBHJeY7C8CEpo9w=)
9: x2carAIaVgKjSsDGLEB8OLFM8NE.roa (hash: rttqg5eKj+V5DoEj4lQNOSz4ZdWbLM3E0GMVNzsZGEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7b:59:a9:34:9d:e2:01:38:6a:67:4f:a4:e5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Apr 17 04:01:05 2026 GMT
Not After : Apr 18 04:01:05 2026 GMT
Subject: CN=0b90c25035c6b9ee0e135d3bcaae098cdd7e14dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:36:07:a7:40:1e:fd:f6:2e:bc:29:1e:ee:
77:72:6d:6a:8d:7d:4c:ed:73:d4:75:c8:af:1d:2d:
8d:00:33:82:40:06:c9:7b:4d:30:ae:c7:ad:b1:ba:
e3:fd:17:20:cf:69:0c:fa:f3:47:b7:38:2b:11:50:
57:ce:16:6e:da:c1:95:6b:de:f8:5b:09:11:8a:61:
0e:78:5a:76:e1:95:d6:43:9a:6a:de:31:1a:8e:59:
b8:1b:5d:30:e2:37:6a:a4:0c:a4:fa:b4:19:75:54:
e7:da:54:57:b0:40:6c:bf:13:15:48:ed:ab:b0:73:
e1:3e:cc:3d:73:ae:ca:89:ae:39:0d:5c:42:3a:d4:
f1:f6:55:e7:c9:91:a8:28:25:4a:26:c2:b3:36:15:
2c:fb:5e:05:cd:2e:b9:52:4b:c1:56:d7:5f:6d:3b:
1a:38:51:99:3c:59:9a:a7:65:07:12:bf:fb:87:29:
51:46:af:eb:3e:e4:10:27:ce:83:33:71:39:35:61:
85:0d:86:71:4d:9e:2d:80:a8:33:da:63:e6:d7:8b:
f2:5d:05:f1:1a:ce:1d:d1:4f:a0:15:a3:e1:c9:82:
2f:9b:16:e1:a5:2f:d1:9f:93:26:fb:a3:1a:a1:f6:
67:d8:62:32:05:0d:01:ce:fe:d3:d5:c8:ff:91:74:
a9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:90:C2:50:35:C6:B9:EE:0E:13:5D:3B:CA:AE:09:8C:DD:7E:14:DC
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7b:82:7b:e3:67:f5:17:d2:8d:6c:75:4a:20:d1:bf:21:72:
ee:53:00:4d:4f:ce:d4:e5:81:82:58:d5:e5:ed:b8:4d:a0:7d:
7e:b6:2c:46:1a:91:bb:e7:4c:be:53:b5:7f:6a:74:62:f8:8f:
77:d3:b7:30:dc:a5:76:b8:66:54:80:da:67:4e:c5:01:d9:7f:
3f:72:84:84:5d:a5:f0:f7:99:52:bb:a6:a9:e7:d9:19:bb:37:
9f:67:c3:32:1f:2b:7a:c9:bd:a9:6e:13:cd:12:09:e4:1c:22:
94:4b:03:46:d1:06:2f:57:51:36:fc:47:0b:9e:20:0c:d6:d7:
cb:96:ca:25:4b:38:8c:bf:b4:fd:52:d1:93:a8:49:af:49:d4:
7f:c9:84:16:73:25:07:d7:db:93:4c:c2:a0:51:5f:79:44:84:
78:6a:72:8c:05:35:f1:64:02:f2:6e:0f:bd:0f:f7:de:18:aa:
77:91:34:8b:35:88:93:8a:9e:9f:d2:87:32:25:4c:72:c1:4c:
68:aa:69:17:fb:ad:89:d2:f8:c8:05:e8:7e:d1:62:3b:1a:ea:
d6:1b:f0:71:cf:cf:26:93:e8:64:57:7a:48:e0:b6:ba:a9:bb:
63:6f:f1:70:4f:30:d8:ab:27:a6:dc:df:fb:fb:f2:93:8c:c5:
d5:a2:f6:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmXtZqTSd4gE4amdPpOVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2M2YjljMzdmYWEwZGEzYjQxMjAwN2MwYjEwYjJjNWJm
MmNmNGUwHhcNMjYwNDE3MDQwMTA1WhcNMjYwNDE4MDQwMTA1WjAzMTEwLwYDVQQD
EygwYjkwYzI1MDM1YzZiOWVlMGUxMzVkM2JjYWFlMDk4Y2RkN2UxNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszM2B6dAHv32LrwpHu53cm1qjX1M
7XPUdcivHS2NADOCQAbJe00wrsetsbrj/Rcgz2kM+vNHtzgrEVBXzhZu2sGVa974
WwkRimEOeFp24ZXWQ5pq3jEajlm4G10w4jdqpAyk+rQZdVTn2lRXsEBsvxMVSO2r
sHPhPsw9c67Kia45DVxCOtTx9lXnyZGoKCVKJsKzNhUs+14FzS65UkvBVtdfbTsa
OFGZPFmap2UHEr/7hylRRq/rPuQQJ86DM3E5NWGFDYZxTZ4tgKgz2mPm14vyXQXx
Gs4d0U+gFaPhyYIvmxbhpS/Rn5Mm+6MaofZn2GIyBQ0Bzv7T1cj/kXSpzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuQwlA1xrnuDhNdO8quCYzdfhTcMB8GA1UdIwQY
MBaAFCTMa5w3+qDaO0EgB8CxCyxb8s9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUt
ODY0MjM4YmMwNDliLzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wZmY0NDktYWQ5OC00ODJkLWFjNzUtODY0MjM4YmMwNDli
LzEvSk14cm5EZjZvTm83UVNBSHdMRUxMRnZ5ejA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHuCe+Nn
9RfSjWx1SiDRvyFy7lMATU/O1OWBgljV5e24TaB9frYsRhqRu+dMvlO1f2p0YviP
d9O3MNyldrhmVIDaZ07FAdl/P3KEhF2l8PeZUrumqefZGbs3n2fDMh8resm9qW4T
zRIJ5BwilEsDRtEGL1dRNvxHC54gDNbXy5bKJUs4jL+0/VLRk6hJr0nUf8mEFnMl
B9fbk0zCoFFfeUSEeGpyjAU18WQC8m4PvQ/33hiqd5E0izWIk4qen9KHMiVMcsFM
aKppF/utidL4yAXoftFiOxrq1hvwcc/PJpPoZFd6SOC2uqm7Y2/xcE8w2Ksnptzf
+/vyk4zF1aL2mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:45 2026 by rpki-client