Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: 2fkbf/rUHjflmoK7yn9asXNSw3ntO2NP7tTo8aV0Yk0=
Subject key identifier: B8:96:A3:15:DA:44:A7:4F:B1:EC:E8:FD:06:A3:CA:24:62:7E:80:87
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019D992B2B16D55A175878FADADA4E26AE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0B26
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: 4VaBul5bBoRD+Kq3iynvyx3bY5RkX0E4+jl9T3yszYo=)
2: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (hash: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2b:16:d5:5a:17:58:78:fa:da:da:4e:26:ae:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=b896a315da44a74fb1ece8fd06a3ca24627e8087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:30:9c:14:0d:26:6b:39:1d:49:df:6c:eb:
0a:b0:1c:a5:24:3d:e2:61:0b:14:e3:32:30:55:6c:
91:18:15:82:dd:91:b6:02:04:21:69:bb:83:40:ce:
f0:e0:a7:c2:4d:57:06:a7:10:44:1c:50:06:97:08:
5e:82:4a:90:a3:d4:88:6d:c9:82:43:8d:ba:9b:95:
8e:90:f0:d9:cb:c1:38:4c:55:6c:12:a3:aa:e0:e1:
88:7a:62:7f:94:f1:8e:a5:34:c8:85:4b:27:f6:d4:
c8:c0:16:63:3d:eb:12:bd:0a:f5:2a:29:ca:db:da:
23:8f:c5:2a:f4:d2:bb:ed:14:78:1b:04:9a:74:8e:
3f:ee:8a:b9:01:de:8d:81:d5:47:ac:71:b7:6b:26:
3b:71:aa:87:44:1e:11:02:f2:86:53:a9:e1:25:09:
24:28:9b:f1:16:bf:ef:f7:f1:b4:0c:b2:64:8b:f2:
97:06:39:7a:c1:5a:27:9e:79:1d:88:f5:63:8a:55:
65:fb:f7:c7:6d:da:eb:d5:3e:96:39:e1:1a:12:34:
87:c4:16:fd:33:73:8e:f9:08:a0:8d:ba:af:d1:d5:
92:ca:11:8c:20:0b:5f:17:0c:bd:c2:75:48:c6:f8:
7f:60:83:60:5a:b9:54:b7:b8:81:1f:6a:70:a5:60:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:96:A3:15:DA:44:A7:4F:B1:EC:E8:FD:06:A3:CA:24:62:7E:80:87
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e0:96:bc:dd:51:84:b7:6e:79:e6:4b:3f:88:0a:f9:bf:a2:
e7:02:e1:91:52:36:92:7b:5a:77:79:79:e0:1a:81:29:2b:31:
b2:cf:2a:d7:cb:33:4b:9a:d8:76:4f:46:e0:09:53:6a:fc:76:
13:b8:c3:96:11:0c:a3:29:4d:c2:c5:4f:2e:98:98:ac:ce:7d:
92:19:75:f9:b0:7f:21:94:63:a5:e1:6a:78:2b:ff:5f:1b:02:
ee:6f:58:ca:6a:bb:b6:d1:f2:e6:52:97:5a:ce:71:80:51:09:
a6:63:d0:08:93:fe:28:3c:f1:2f:92:5f:67:e2:9b:73:3f:ed:
bd:51:e5:2a:a9:06:d7:f1:c8:bd:65:12:93:ea:c4:6d:0c:3a:
5c:4c:1e:cc:3d:79:fc:18:11:ed:bb:b0:20:10:a3:5d:e4:f8:
6a:e6:8c:b5:97:16:91:4c:95:0a:2d:4e:a9:b0:d8:94:8f:2b:
ad:b6:27:fb:73:3c:39:02:32:bd:cd:46:77:cf:bb:e1:0d:2d:
44:1f:c7:7f:ba:23:33:71:f3:61:31:10:be:92:68:70:54:54:
e9:62:70:2c:53:de:11:08:4f:69:8e:29:3d:b5:a4:ec:5c:2f:
f7:09:a0:c1:b5:e4:5b:05:7e:94:2d:80:72:df:34:c7:cb:0d:
2d:f4:0e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKysW1VoXWHj62tpOJq5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl
NDU4MGEwHhcNMjYwNDE3MDIwMDM2WhcNMjYwNDE4MDIwMDM2WjAzMTEwLwYDVQQD
EyhiODk2YTMxNWRhNDRhNzRmYjFlY2U4ZmQwNmEzY2EyNDYyN2U4MDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdEwnBQNJms5HUnfbOsKsBylJD3i
YQsU4zIwVWyRGBWC3ZG2AgQhabuDQM7w4KfCTVcGpxBEHFAGlwhegkqQo9SIbcmC
Q426m5WOkPDZy8E4TFVsEqOq4OGIemJ/lPGOpTTIhUsn9tTIwBZjPesSvQr1KinK
29ojj8Uq9NK77RR4GwSadI4/7oq5Ad6NgdVHrHG3ayY7caqHRB4RAvKGU6nhJQkk
KJvxFr/v9/G0DLJki/KXBjl6wVonnnkdiPVjilVl+/fHbdrr1T6WOeEaEjSHxBb9
M3OO+Qigjbqv0dWSyhGMIAtfFwy9wnVIxvh/YINgWrlUt7iBH2pwpWCdkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiWoxXaRKdPsezo/QajyiRifoCHMB8GA1UdIwQY
MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt
YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4
LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOCWvN1R
hLdueeZLP4gK+b+i5wLhkVI2kntad3l54BqBKSsxss8q18szS5rYdk9G4AlTavx2
E7jDlhEMoylNwsVPLpiYrM59khl1+bB/IZRjpeFqeCv/XxsC7m9Yymq7ttHy5lKX
Ws5xgFEJpmPQCJP+KDzxL5JfZ+Kbcz/tvVHlKqkG1/HIvWUSk+rEbQw6XEwezD15
/BgR7buwIBCjXeT4auaMtZcWkUyVCi1OqbDYlI8rrbYn+3M8OQIyvc1Gd8+74Q0t
RB/Hf7ojM3HzYTEQvpJocFRU6WJwLFPeEQhPaY4pPbWk7Fwv9wmgwbXkWwV+lC2A
ct80x8sNLfQOQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client