Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: 7Z3achwh///xOkNPfVZrPp2PPYvdgmw4PRzkt2uv/fk=
Subject key identifier: 10:F1:15:CB:F4:57:E2:87:BF:04:F0:A9:8C:F1:C0:1C:F5:43:56:78
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019D9BF557F78E1E9360C902529A04F2F0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 02F7
Signing time: Fri 17 Apr 2026 15:00:40 +0000
Manifest this update: Fri 17 Apr 2026 15:00:40 +0000
Manifest next update: Sat 18 Apr 2026 15:00:40 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: XJjBDWIuAaqVCb+w96N0IDQEEZsPs8PAOu3CQ2j5eQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:57:f7:8e:1e:93:60:c9:02:52:9a:04:f2:f0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Apr 17 15:00:40 2026 GMT
Not After : Apr 18 15:00:40 2026 GMT
Subject: CN=10f115cbf457e287bf04f0a98cf1c01cf5435678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:8c:28:7d:3b:e0:93:ba:ba:fe:c0:dc:80:
4d:30:a9:ce:33:fa:cb:71:f7:6b:61:bc:87:68:99:
3d:1d:57:0a:be:9d:23:ef:01:82:3e:a8:51:06:a1:
d3:a1:a2:21:27:c7:0e:6e:98:6a:6a:e5:10:c8:b4:
89:37:05:d0:37:bb:3e:07:7b:bf:f9:7a:60:b7:85:
13:3c:fa:af:02:b4:9e:da:4a:10:0c:bc:77:1b:a1:
23:7b:23:17:7b:83:a0:08:19:4f:3b:be:5f:b8:b0:
ad:e9:1c:b1:8c:09:c9:9e:77:f5:bd:9b:3d:14:e5:
4d:aa:b3:86:68:06:b4:10:37:4d:72:f9:73:d3:8f:
6c:a2:a4:1e:9d:dc:9e:11:a2:4a:75:51:fa:e2:91:
d8:a7:15:9c:77:88:ea:81:5a:30:21:a3:c8:6b:57:
fa:b7:23:97:6e:9e:8e:07:da:20:cd:6a:81:e6:b9:
ff:20:7c:ce:8d:33:d2:d6:7f:75:a9:3c:f5:db:1f:
4a:16:e6:98:17:97:9b:b0:84:b3:84:47:4a:cc:d3:
58:53:6a:2f:1f:1d:67:06:46:43:bf:a7:2b:b7:51:
21:44:0e:0a:dc:96:36:01:16:7e:06:a6:e6:dd:59:
ad:2a:51:66:6c:4f:b9:e8:f0:5b:4b:64:56:81:6f:
4e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:15:CB:F4:57:E2:87:BF:04:F0:A9:8C:F1:C0:1C:F5:43:56:78
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:7d:e3:84:d8:fc:26:f6:95:0c:bb:70:2a:93:ba:2d:af:
fa:2c:72:e4:86:ff:60:0c:86:46:96:ba:3e:c5:0a:fc:b0:6e:
64:11:b2:7c:73:6c:b0:2c:99:11:af:18:50:25:b8:26:ce:91:
57:39:08:9a:ae:3c:5e:d3:cd:71:94:1e:ab:2d:37:c9:5b:63:
03:51:cc:34:64:af:14:d8:ec:48:8f:65:6e:ca:34:25:ad:7c:
52:97:df:15:99:de:d9:76:51:0e:00:5f:9d:ee:7f:19:31:af:
d2:4e:b5:b2:aa:4f:c5:53:5f:41:6b:0c:98:d5:42:cf:9a:7c:
55:0c:52:fe:17:4a:ca:9a:06:59:c0:bc:36:5f:31:99:00:c2:
3c:4d:f2:03:ba:58:ff:15:18:8c:d3:e6:03:a5:5d:79:66:78:
2b:b5:3c:e7:f9:67:72:5c:10:71:9c:00:60:83:a3:01:f7:21:
c6:f3:20:bf:28:85:3b:11:4c:f0:b9:e1:81:47:cc:72:30:6c:
f0:43:e2:32:4f:fb:9e:40:03:0e:3c:13:93:c5:01:ca:57:8e:
95:49:5c:d0:fc:6b:fb:a1:df:00:75:e5:15:80:4c:1f:e6:65:
56:12:83:a0:7a:e5:0e:fc:a4:2c:e4:66:b2:02:c8:ac:7f:e6:
bc:34:a6:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9Vf3jh6TYMkCUpoE8vCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NWRlNjVmMzc1MTVkZjhjYzI0MmYzNmRiYmVmMzIwYzZk
OTBiNGYwHhcNMjYwNDE3MTUwMDQwWhcNMjYwNDE4MTUwMDQwWjAzMTEwLwYDVQQD
EygxMGYxMTVjYmY0NTdlMjg3YmYwNGYwYTk4Y2YxYzAxY2Y1NDM1Njc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeuMKH074JO6uv7A3IBNMKnOM/rL
cfdrYbyHaJk9HVcKvp0j7wGCPqhRBqHToaIhJ8cObphqauUQyLSJNwXQN7s+B3u/
+Xpgt4UTPPqvArSe2koQDLx3G6EjeyMXe4OgCBlPO75fuLCt6RyxjAnJnnf1vZs9
FOVNqrOGaAa0EDdNcvlz049soqQendyeEaJKdVH64pHYpxWcd4jqgVowIaPIa1f6
tyOXbp6OB9ogzWqB5rn/IHzOjTPS1n91qTz12x9KFuaYF5ebsISzhEdKzNNYU2ov
Hx1nBkZDv6crt1EhRA4K3JY2ARZ+Bqbm3VmtKlFmbE+56PBbS2RWgW9OywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDxFcv0V+KHvwTwqYzxwBz1Q1Z4MB8GA1UdIwQY
MBaAFCRd5l83UV34zCQvNtu+8yDG2QtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTkt
MzE3Mjc5ODE4YWNjLzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9mNmUwOTktOWI2NC00MDQxLTlkMTktMzE3Mjc5ODE4YWNj
LzEvSkYzbVh6ZFJYZmpNSkM4MjI3N3pJTWJaQzA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcF944TY
/Cb2lQy7cCqTui2v+ixy5Ib/YAyGRpa6PsUK/LBuZBGyfHNssCyZEa8YUCW4Js6R
VzkImq48XtPNcZQeqy03yVtjA1HMNGSvFNjsSI9lbso0Ja18UpffFZne2XZRDgBf
ne5/GTGv0k61sqpPxVNfQWsMmNVCz5p8VQxS/hdKypoGWcC8Nl8xmQDCPE3yA7pY
/xUYjNPmA6VdeWZ4K7U85/lnclwQcZwAYIOjAfchxvMgvyiFOxFM8LnhgUfMcjBs
8EPiMk/7nkADDjwTk8UByleOlUlc0Pxr+6HfAHXlFYBMH+ZlVhKDoHrlDvykLORm
sgLIrH/mvDSmQw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:55 2026 by rpki-client