Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: Ei3+iFO0DNzBGBltsitBLaI2OE+raF8FnefR8C/SNKM=
Subject key identifier: 64:24:00:03:A1:72:02:86:89:12:BB:D5:57:FA:08:58:41:5A:30:1B
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019E886CA7A82D491362D601F3961BDB6E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1923
Signing time: Tue 02 Jun 2026 13:01:22 +0000
Manifest this update: Tue 02 Jun 2026 13:01:22 +0000
Manifest next update: Wed 03 Jun 2026 13:01:22 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: FoAxPgyV+1pWTDkBHhH6f826Rs+M0JakyEwKcsQfLqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:6c:a7:a8:2d:49:13:62:d6:01:f3:96:1b:db:6e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jun 2 13:01:22 2026 GMT
Not After : Jun 3 13:01:22 2026 GMT
Subject: CN=64240003a17202868912bbd557fa0858415a301b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:9c:fc:a0:7d:ad:73:54:10:34:d9:b3:fe:
86:50:a6:ce:45:59:a2:0b:5d:61:59:db:a8:b6:e7:
4e:76:5c:0f:ae:7e:21:7d:49:9d:6e:1a:a6:4b:be:
b3:31:c9:d3:e7:a9:a3:b3:24:73:16:92:61:0c:47:
66:57:6e:19:91:5d:47:dc:c9:76:73:42:8c:b3:d6:
b9:6f:8c:56:56:26:cb:74:71:19:9a:3f:22:9d:48:
9f:19:5a:8b:90:43:6f:53:1e:a1:19:f2:76:84:08:
75:1e:06:86:02:8b:6f:16:3c:83:b8:6b:af:f9:f9:
c9:53:59:c1:3c:76:08:14:13:79:2d:2a:51:54:7c:
02:8a:1c:9f:9d:d2:02:35:eb:ae:7d:b7:e2:0e:a5:
b8:7f:a3:21:3a:d7:77:3e:65:50:c6:fc:fe:a8:b1:
c1:83:d8:57:b7:f5:77:e4:6f:31:71:c4:f5:90:d0:
5f:1c:a6:94:61:24:3f:81:e1:f9:0f:58:3a:8b:b9:
8b:87:8a:3e:fe:61:36:99:4d:52:33:70:ab:01:2a:
ad:3b:d1:a4:f6:29:f8:da:3f:e6:53:f1:37:12:20:
23:ba:e3:4b:5e:89:f2:16:fb:46:cf:95:78:ba:02:
3b:c5:58:db:95:fc:3d:29:f8:48:39:e3:8f:09:c8:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:00:03:A1:72:02:86:89:12:BB:D5:57:FA:08:58:41:5A:30:1B
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:09:cb:4a:35:ee:8c:23:59:59:9a:b8:23:80:28:82:e0:
ab:05:a6:63:d2:25:b5:22:32:94:df:cc:9e:de:f4:5a:ee:4d:
31:38:c1:c3:ac:ee:28:a9:b2:ce:54:38:9b:75:f4:85:25:61:
1e:56:94:46:5c:41:a6:c1:85:41:ed:71:e8:ec:de:1b:cc:fe:
86:ac:c6:71:d9:1a:7e:5b:c1:1a:38:f7:70:9b:b3:d5:31:90:
9f:17:4f:41:c2:56:26:ab:d7:95:c7:f9:2b:09:6a:1f:7f:46:
f9:54:e3:f0:04:ef:78:44:ca:ae:50:07:5e:9e:11:0b:f6:fe:
cf:80:bd:21:42:97:8d:58:66:70:be:6d:3e:e7:af:90:ea:3f:
e9:9c:e5:48:ae:0a:2d:4c:5e:af:d9:f2:d5:b5:e4:71:2f:09:
02:ef:1e:4a:93:44:62:0f:71:d7:00:71:2a:39:9a:1b:a6:96:
49:b1:85:06:f7:5d:af:3b:6a:74:ac:f7:11:b8:16:eb:1a:74:
86:8d:f1:42:2b:b6:f8:c4:e9:ea:b8:da:03:c1:e4:2b:77:78:
48:8a:1d:08:c0:67:da:85:77:59:c3:a7:b1:e7:fb:97:19:53:
df:0a:4f:b0:b4:83:94:20:15:0f:dd:23:0e:f1:ed:ec:bf:a1:
75:2e:20:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6IbKeoLUkTYtYB85Yb2252MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy
ZTFlZjIwHhcNMjYwNjAyMTMwMTIyWhcNMjYwNjAzMTMwMTIyWjAzMTEwLwYDVQQD
Eyg2NDI0MDAwM2ExNzIwMjg2ODkxMmJiZDU1N2ZhMDg1ODQxNWEzMDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGac/KB9rXNUEDTZs/6GUKbORVmi
C11hWduotudOdlwPrn4hfUmdbhqmS76zMcnT56mjsyRzFpJhDEdmV24ZkV1H3Ml2
c0KMs9a5b4xWVibLdHEZmj8inUifGVqLkENvUx6hGfJ2hAh1HgaGAotvFjyDuGuv
+fnJU1nBPHYIFBN5LSpRVHwCihyfndICNeuufbfiDqW4f6MhOtd3PmVQxvz+qLHB
g9hXt/V35G8xccT1kNBfHKaUYSQ/geH5D1g6i7mLh4o+/mE2mU1SM3CrASqtO9Gk
9in42j/mU/E3EiAjuuNLXonyFvtGz5V4ugI7xVjblfw9KfhIOeOPCcgpuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQkAAOhcgKGiRK71Vf6CFhBWjAbMB8GA1UdIwQY
MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt
ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0
LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6cJy0o1
7owjWVmauCOAKILgqwWmY9IltSIylN/Mnt70Wu5NMTjBw6zuKKmyzlQ4m3X0hSVh
HlaURlxBpsGFQe1x6OzeG8z+hqzGcdkaflvBGjj3cJuz1TGQnxdPQcJWJqvXlcf5
KwlqH39G+VTj8ATveETKrlAHXp4RC/b+z4C9IUKXjVhmcL5tPuevkOo/6ZzlSK4K
LUxer9ny1bXkcS8JAu8eSpNEYg9x1wBxKjmaG6aWSbGFBvddrztqdKz3EbgW6xp0
ho3xQiu2+MTp6rjaA8HkK3d4SIodCMBn2oV3WcOnsef7lxlT3wpPsLSDlCAVD90j
DvHt7L+hdS4gOw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:53 2026 by rpki-client