Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: 5AIxxJt6mnmHevo3fbn0LSVDVN+9fb2RqP34SqwrYtE=
Subject key identifier: 12:C5:EE:7C:A7:ED:79:F9:A1:24:9B:D9:F6:30:CB:EB:11:72:C2:17
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019D39407716D986D212B7F2AF12C0723E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 15DD
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: 1MewjKs7oZbPQCWXkDdeqf-hRUI.roa (hash: ZIOY5qx7Rihwq5CYw6fFGk6ypYaqCmJubtJXiapIpl8=)
2: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: 8HWdkRW8j8AfUeCiTby9yMMflputdy1xYVCTuUm2xBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:77:16:d9:86:d2:12:b7:f2:af:12:c0:72:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=12c5ee7ca7ed79f9a1249bd9f630cbeb1172c217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:e5:fa:94:7f:a6:7c:0b:c7:9e:dd:f5:3c:
d2:c3:cf:97:be:2e:ce:0f:66:ba:e0:0a:2c:e5:9a:
c4:ab:34:28:0d:48:2b:45:65:63:98:92:dc:45:45:
e4:9d:5d:91:4a:53:ca:01:0b:86:f1:85:b8:22:ab:
7e:4e:05:bf:b9:74:c0:b5:ce:42:7f:01:c7:27:ab:
21:84:d2:c4:59:6b:46:8e:7b:be:f1:8c:59:dd:b7:
9f:42:e9:56:2c:46:57:c6:91:62:ee:49:80:84:53:
20:02:9e:a1:e0:55:51:32:d0:6f:f4:78:9d:f8:29:
de:13:88:35:28:e2:74:53:7d:03:4a:e3:5c:ac:82:
68:1c:f0:fd:e9:e4:d2:1a:ab:e7:d4:bf:d5:7d:d4:
9b:4f:fb:2e:2e:9a:9d:9b:ac:65:e7:e4:12:8b:f2:
17:ea:17:27:35:57:54:65:08:af:e5:60:48:2c:c7:
5d:a9:91:ea:e8:f7:f2:a7:6f:70:be:75:ca:ab:95:
20:14:85:cc:88:4e:59:96:a4:40:8c:29:f1:71:33:
93:ae:af:6f:36:01:61:23:2e:c2:a1:5b:19:07:07:
c3:8f:19:36:da:15:bb:f4:64:87:6d:68:f2:2b:f7:
14:46:25:e5:6c:2a:3f:25:21:12:2a:9c:8d:ca:87:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:EE:7C:A7:ED:79:F9:A1:24:9B:D9:F6:30:CB:EB:11:72:C2:17
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d0:86:6a:6e:32:6f:c3:24:6e:4f:52:03:09:26:e9:d0:e2:
29:f9:c7:c5:56:d9:15:57:49:d7:ab:f9:0f:82:68:4d:05:94:
71:57:5a:4c:1b:43:a2:b5:94:f2:86:f3:3d:b1:aa:79:c0:a9:
89:7b:69:c7:e4:31:bc:5e:6a:29:27:b2:a8:b3:fb:1d:b9:ad:
f1:a1:72:2d:47:c1:a4:a8:03:f4:84:aa:aa:88:6c:82:e3:e0:
2c:32:1f:c7:bf:e1:0d:07:f3:47:2c:5f:99:a2:9a:bf:36:44:
95:f2:b1:1f:11:ec:94:aa:4c:83:66:cb:70:39:9e:a3:1b:ca:
bb:64:f4:af:74:0c:b8:91:18:4c:7b:ba:01:4f:f4:45:ce:d1:
99:a5:18:e7:d5:91:8f:05:c2:47:1a:28:d6:0d:c3:81:99:2e:
eb:26:29:80:38:fd:30:8d:6d:54:2a:3b:ce:58:7e:40:a4:4a:
41:3a:3b:e6:ac:0d:fc:09:f4:cd:a5:a5:3d:4c:fe:b1:06:0f:
2f:57:45:50:93:31:20:56:cf:8e:75:9f:a0:cb:9d:36:bb:7e:
6a:ee:d1:c6:fb:37:ad:0c:8d:4c:ea:22:a7:3b:67:38:7e:be:
78:94:0b:b5:4a:e2:2c:cd:46:00:2c:14:a6:4a:c4:87:f0:44:
ed:2b:e5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QHcW2YbSErfyrxLAcj5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0
OGI2ZTcwHhcNMjYwMzI5MTEwMDE5WhcNMjYwMzMwMTEwMDE5WjAzMTEwLwYDVQQD
EygxMmM1ZWU3Y2E3ZWQ3OWY5YTEyNDliZDlmNjMwY2JlYjExNzJjMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypTl+pR/pnwLx57d9TzSw8+Xvi7O
D2a64Aos5ZrEqzQoDUgrRWVjmJLcRUXknV2RSlPKAQuG8YW4Iqt+TgW/uXTAtc5C
fwHHJ6shhNLEWWtGjnu+8YxZ3befQulWLEZXxpFi7kmAhFMgAp6h4FVRMtBv9Hid
+CneE4g1KOJ0U30DSuNcrIJoHPD96eTSGqvn1L/VfdSbT/suLpqdm6xl5+QSi/IX
6hcnNVdUZQiv5WBILMddqZHq6Pfyp29wvnXKq5UgFIXMiE5ZlqRAjCnxcTOTrq9v
NgFhIy7CoVsZBwfDjxk22hW79GSHbWjyK/cURiXlbCo/JSESKpyNyofJYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLF7nyn7Xn5oSSb2fYwy+sRcsIXMB8GA1UdIwQY
MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt
YjJhMTNhM2E5YjhhLzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh
LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdCGam4y
b8Mkbk9SAwkm6dDiKfnHxVbZFVdJ16v5D4JoTQWUcVdaTBtDorWU8obzPbGqecCp
iXtpx+QxvF5qKSeyqLP7Hbmt8aFyLUfBpKgD9ISqqohsguPgLDIfx7/hDQfzRyxf
maKavzZElfKxHxHslKpMg2bLcDmeoxvKu2T0r3QMuJEYTHu6AU/0Rc7RmaUY59WR
jwXCRxoo1g3DgZku6yYpgDj9MI1tVCo7zlh+QKRKQTo75qwN/An0zaWlPUz+sQYP
L1dFUJMxIFbPjnWfoMudNrt+au7Rxvs3rQyNTOoipztnOH6+eJQLtUriLM1GACwU
pkrEh/BE7SvlsA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:18 2026 by rpki-client