Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier: m62HKZPA99Yop7WLxsyGVPHVjOGLCpLPGgF+saU8stU=
Subject key identifier: BA:26:87:2D:31:F1:F8:F9:4D:16:02:54:23:85:B9:A8:29:4D:53:45
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 019D3A1C86A502AE8C3413F8FCEBD834B41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number: 1765
Signing time: Sun 29 Mar 2026 15:00:41 +0000
Manifest this update: Sun 29 Mar 2026 15:00:41 +0000
Manifest next update: Mon 30 Mar 2026 15:00:41 +0000
Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: rcY0MQtPTjvEV1A6YhtyyzCdILiaOJVOdn85XF0UhUs=)
2: KsLpYaplYWekI62QRi3E0G61Ms4.roa (hash: PFuTGnOnXeAK/sML2FBSdaIxc5MVu6TA5GmDr9dlzjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:86:a5:02:ae:8c:34:13:f8:fc:eb:d8:34:b4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Mar 29 15:00:41 2026 GMT
Not After : Mar 30 15:00:41 2026 GMT
Subject: CN=ba26872d31f1f8f94d1602542385b9a8294d5345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:32:74:bf:b6:bb:1f:30:d3:4e:79:3b:82:
29:15:61:7b:bb:91:f9:64:d6:6f:d3:45:34:e9:20:
e2:b0:72:73:3e:bd:4b:95:d7:92:0e:63:e4:f1:76:
48:98:d5:73:51:8c:0c:c8:84:46:77:45:38:6e:52:
d2:58:4d:05:b8:8d:cb:2b:a7:cb:25:45:d6:87:52:
c2:a9:32:50:45:b0:d2:df:db:87:f2:d2:05:49:68:
2c:fc:f6:fa:ed:8b:4d:a1:1f:d0:67:19:5a:94:45:
4c:38:46:18:2f:8f:52:ae:04:b1:80:17:73:22:dd:
67:13:b1:82:f6:95:7a:98:02:10:8c:3f:7d:e3:fc:
07:c3:2f:dd:3c:9b:f3:e8:ed:74:c3:68:ec:c9:09:
23:fc:58:2d:cf:25:05:1c:dc:57:92:97:6d:4a:d5:
c1:d8:4e:28:88:80:df:d6:66:84:6c:ac:60:e0:f9:
c3:69:eb:fd:f6:8b:af:08:b6:23:7a:aa:ee:8b:a7:
cb:a7:2f:bf:ef:7f:57:c7:e4:1e:1a:b9:db:c1:c5:
e4:d3:4f:04:49:1f:ba:7d:80:71:31:b2:e5:64:b4:
23:b3:73:09:de:1b:97:70:cc:61:0a:c3:7a:3d:24:
fc:e7:94:0b:5c:20:2f:a4:ab:3f:df:2a:75:ce:55:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:26:87:2D:31:F1:F8:F9:4D:16:02:54:23:85:B9:A8:29:4D:53:45
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:a3:93:0f:e9:c7:00:f1:e9:13:bd:7b:96:f0:60:a2:ce:
b6:6c:bf:42:86:dc:b1:25:ba:5d:75:de:55:c3:ae:fa:9d:c5:
95:1a:a2:4b:f0:b7:35:7c:ed:f9:ab:36:c9:79:68:8a:4f:cd:
e6:80:46:61:bb:26:eb:62:23:59:65:bb:f2:f2:97:79:64:a4:
82:ea:1b:37:f8:d3:42:9c:56:ba:b4:fe:2d:47:f2:28:8d:66:
00:d6:ac:db:be:5f:a4:d6:04:ea:be:d4:25:1e:67:04:cb:fe:
b8:bb:a4:1b:6a:a2:b1:e0:7a:6b:55:c4:40:37:d3:14:f6:43:
71:23:cb:e2:3c:2c:6b:94:95:2d:99:d2:59:25:8b:dd:40:05:
25:74:9d:82:2c:58:1e:68:12:4f:5d:b0:95:98:99:cb:a0:99:
62:f4:b7:5e:6f:3a:40:eb:4b:57:9b:9c:60:61:34:16:6a:58:
28:bc:10:78:18:16:2b:54:27:9a:01:81:01:8e:a6:16:48:a4:
99:10:e3:c9:a7:ec:af:4a:7b:d2:6f:9f:35:a2:cb:b0:a3:8c:
45:6a:46:6b:d2:45:eb:86:36:96:20:63:d9:1a:d4:ca:01:6b:
ad:cd:29:e2:a6:19:2e:2c:2d:d9:4f:a9:a0:b4:e2:d9:16:9c:
ab:f3:f1:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HIalAq6MNBP4/OvYNLQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Njc2MDM2MjMxNDNiZDFiYzdhOGZjOWQ4ZTc5ZDk1NTk2
MTE4NjAwHhcNMjYwMzI5MTUwMDQxWhcNMjYwMzMwMTUwMDQxWjAzMTEwLwYDVQQD
EyhiYTI2ODcyZDMxZjFmOGY5NGQxNjAyNTQyMzg1YjlhODI5NGQ1MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi8ydL+2ux8w0055O4IpFWF7u5H5
ZNZv00U06SDisHJzPr1LldeSDmPk8XZImNVzUYwMyIRGd0U4blLSWE0FuI3LK6fL
JUXWh1LCqTJQRbDS39uH8tIFSWgs/Pb67YtNoR/QZxlalEVMOEYYL49SrgSxgBdz
It1nE7GC9pV6mAIQjD994/wHwy/dPJvz6O10w2jsyQkj/FgtzyUFHNxXkpdtStXB
2E4oiIDf1maEbKxg4PnDaev99ouvCLYjeqrui6fLpy+/739Xx+QeGrnbwcXk008E
SR+6fYBxMbLlZLQjs3MJ3huXcMxhCsN6PST855QLXCAvpKs/3yp1zlVwfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLomhy0x8fj5TRYCVCOFuagpTVNFMB8GA1UdIwQY
MBaAFCRnYDYjFDvRvHqPydjnnZVZYRhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEt
ZmI0NjQyZDJkOWE2LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZGU0NGItZjJjMC00MWU0LWIxNDEtZmI0NjQyZDJkOWE2
LzEvSkdkZ05pTVVPOUc4ZW9fSjJPZWRsVmxoR0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJKjkw/p
xwDx6RO9e5bwYKLOtmy/QobcsSW6XXXeVcOu+p3FlRqiS/C3NXzt+as2yXloik/N
5oBGYbsm62IjWWW78vKXeWSkguobN/jTQpxWurT+LUfyKI1mANas275fpNYE6r7U
JR5nBMv+uLukG2qiseB6a1XEQDfTFPZDcSPL4jwsa5SVLZnSWSWL3UAFJXSdgixY
HmgST12wlZiZy6CZYvS3Xm86QOtLV5ucYGE0FmpYKLwQeBgWK1QnmgGBAY6mFkik
mRDjyafsr0p70m+fNaLLsKOMRWpGa9JF64Y2liBj2RrUygFrrc0p4qYZLiwt2U+p
oLTi2Racq/Pxwg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:58 2026 by rpki-client