Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: s8R3SVk9dK80rWVzeYpHENJLCyv6ThNAYrbGsbpLp6A=
Subject key identifier: 15:86:56:74:5F:A5:E8:47:3C:C5:73:2C:AD:09:32:F8:ED:F6:CD:94
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019D382E6AC13B8D2D6DC287E104D77AAA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: DaJ1E3aI4YSjBKLHdbb0Y3QLORV9gzS3Y3mOc7ljX18=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6a:c1:3b:8d:2d:6d:c2:87:e1:04:d7:7a:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=158656745fa5e8473cc5732cad0932f8edf6cd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:b8:18:e4:0c:90:94:aa:b8:cc:b2:50:e6:
1d:f8:d4:79:18:c9:06:e8:08:ea:53:70:41:91:e3:
8b:31:2b:96:a0:ca:98:61:47:5f:68:34:68:ef:9c:
49:96:24:ab:53:71:5a:27:18:a7:56:6f:15:d0:26:
b0:03:98:e8:bb:d5:78:f9:81:16:18:21:a1:f6:eb:
20:37:65:61:c9:cf:de:a5:4b:2d:a1:40:e4:1a:e4:
77:9d:72:23:92:04:3f:c5:d8:0d:f2:49:c0:e1:38:
4d:fa:8d:37:69:93:75:aa:d5:cf:d5:42:d8:0f:85:
c2:f8:64:2e:60:bc:b0:d1:34:b3:d5:b6:10:a9:b9:
4c:17:e9:ad:69:cc:95:a5:9d:eb:69:9e:19:2e:a9:
cb:29:39:af:39:52:1b:58:dd:c9:f8:95:13:be:6a:
e0:e0:f2:e3:40:4f:a1:28:f6:b0:24:b2:89:1d:08:
30:c6:fa:64:68:79:78:e3:7c:53:75:c2:d4:b2:4f:
8f:5f:19:a5:73:9c:0b:d0:d0:81:3a:cd:7f:6d:72:
40:bb:8d:49:4c:87:82:00:ce:91:aa:f4:c6:30:a0:
4e:ea:1f:86:fd:2a:c7:3c:22:ac:57:22:1d:03:d2:
6e:95:ce:da:07:3c:7d:ba:e7:b6:73:d8:69:ef:37:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:86:56:74:5F:A5:E8:47:3C:C5:73:2C:AD:09:32:F8:ED:F6:CD:94
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:c5:68:a2:ed:25:ae:05:2d:5f:cf:39:1f:10:e4:20:11:
0f:e3:35:a7:83:7a:5b:9b:de:0f:1e:53:6b:3c:a0:0e:00:de:
d9:d0:5b:f4:0e:1f:af:7d:1d:da:c2:bb:e1:b6:e7:25:16:05:
d4:17:8a:10:d7:ee:7e:65:cd:89:78:4d:25:d8:06:b5:97:af:
54:07:7e:29:aa:ff:64:2b:79:a8:ed:36:14:fa:6b:cb:e9:39:
24:ab:c1:9f:0d:b6:37:b2:37:7e:60:a3:5e:97:e2:ae:23:95:
24:6f:2d:7d:31:ac:37:01:c5:41:02:69:92:21:63:5f:67:e9:
db:6d:75:f4:51:fd:1a:42:d3:4f:ad:a8:dc:c5:f8:b8:99:45:
48:07:b3:88:01:15:a2:08:35:1d:79:fa:88:4c:ad:89:b4:cc:
da:ee:ab:a4:f3:c6:36:b0:e9:19:dc:90:36:29:90:df:a8:be:
75:c8:c6:31:61:b3:dd:0f:39:c6:ed:55:77:8f:f9:59:79:13:
30:81:f8:0c:35:39:23:a8:12:3a:10:d1:5e:55:0b:6d:21:cd:
6f:2b:f9:a3:f1:10:61:ab:3f:ed:1e:f7:9e:f9:aa:ba:39:41:
34:68:47:29:23:81:92:a1:8f:2f:6a:76:1c:4a:54:02:21:59:
59:a5:b5:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LmrBO40tbcKH4QTXeqpXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz
NGI2OTgwHhcNMjYwMzI5MDYwMDU5WhcNMjYwMzMwMDYwMDU5WjAzMTEwLwYDVQQD
EygxNTg2NTY3NDVmYTVlODQ3M2NjNTczMmNhZDA5MzJmOGVkZjZjZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ve4GOQMkJSquMyyUOYd+NR5GMkG
6AjqU3BBkeOLMSuWoMqYYUdfaDRo75xJliSrU3FaJxinVm8V0CawA5jou9V4+YEW
GCGh9usgN2Vhyc/epUstoUDkGuR3nXIjkgQ/xdgN8knA4ThN+o03aZN1qtXP1ULY
D4XC+GQuYLyw0TSz1bYQqblMF+mtacyVpZ3raZ4ZLqnLKTmvOVIbWN3J+JUTvmrg
4PLjQE+hKPawJLKJHQgwxvpkaHl443xTdcLUsk+PXxmlc5wL0NCBOs1/bXJAu41J
TIeCAM6RqvTGMKBO6h+G/SrHPCKsVyIdA9Julc7aBzx9uue2c9hp7zeIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWGVnRfpehHPMVzLK0JMvjt9s2UMB8GA1UdIwQY
MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt
NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj
LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+bFaKLt
Ja4FLV/POR8Q5CARD+M1p4N6W5veDx5TazygDgDe2dBb9A4fr30d2sK74bbnJRYF
1BeKENfufmXNiXhNJdgGtZevVAd+Kar/ZCt5qO02FPpry+k5JKvBnw22N7I3fmCj
XpfiriOVJG8tfTGsNwHFQQJpkiFjX2fp22119FH9GkLTT62o3MX4uJlFSAeziAEV
ogg1HXn6iEytibTM2u6rpPPGNrDpGdyQNimQ36i+dcjGMWGz3Q85xu1Vd4/5WXkT
MIH4DDU5I6gSOhDRXlULbSHNbyv5o/EQYas/7R73nvmqujlBNGhHKSOBkqGPL2p2
HEpUAiFZWaW1fw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:33 2026 by rpki-client