Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: 6d2Bl5sRSvb32WqPfSPASAKAT7DTI7ay5+hPd3RJT0w=
Subject key identifier: 23:FA:CF:42:48:A5:70:B2:19:F0:14:92:AF:33:96:76:6B:5F:F3:5C
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019D3753148138C103C3612697B72950374F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 1371
Signing time: Sun 29 Mar 2026 02:01:24 +0000
Manifest this update: Sun 29 Mar 2026 02:01:24 +0000
Manifest next update: Mon 30 Mar 2026 02:01:24 +0000
Files and hashes: 1: 2nPIRP72Jf5YjvsBZiLCnmbp-p8.roa (hash: Yz/8CGjOJYnOasszn6ZNY2vs5w5ux3r0g0CLHgZyjdU=)
2: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: g/xBc6ZjM0C8L7vIh+vI1x42NsBcs/my7PQrD9VMmyk=)
3: LOJidQiFIuwqnumT6oMuEmIp5LE.roa (hash: sVHheWyLptBtdCb64wvygyXOjpNHZkJcRj9kxNMP3GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:14:81:38:c1:03:c3:61:26:97:b7:29:50:37:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Mar 29 02:01:24 2026 GMT
Not After : Mar 30 02:01:24 2026 GMT
Subject: CN=23facf4248a570b219f01492af3396766b5ff35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:6c:03:43:3a:c8:94:9a:b8:05:56:61:7f:
de:18:be:d6:e5:a8:50:42:84:c3:4c:87:4a:e8:07:
c8:c8:94:43:15:4a:8c:45:77:f3:55:e2:f6:a9:d1:
b5:5e:94:a5:0f:60:d2:e2:66:15:b9:17:a6:ea:24:
f5:a3:54:47:2e:68:be:42:47:f2:cb:8b:c7:ba:e9:
3c:5f:22:04:d1:0f:60:44:e7:35:c7:4c:8a:94:d5:
d4:19:05:b4:f4:1c:87:0f:49:92:be:a1:f4:f6:42:
f0:b0:68:6c:12:07:f9:61:b4:d9:4d:d0:13:02:c9:
93:a9:1e:d9:fa:ff:d7:98:bc:49:6e:6f:07:0f:9a:
ab:15:cf:99:79:0e:f8:96:5d:7d:44:4f:1c:0b:09:
b7:5f:9e:05:d6:2e:e1:d9:14:c8:f1:c1:7f:40:5e:
06:b8:dd:72:9d:bf:79:09:8f:af:03:a9:4a:f2:7d:
9b:91:81:c9:a3:fe:bc:01:2a:08:df:2d:cc:7e:53:
76:24:d5:97:90:ad:25:d7:45:98:8a:0c:84:44:9c:
fc:fd:47:e2:eb:e4:06:05:17:4f:23:3a:ef:71:a8:
af:1f:30:57:26:ec:68:db:10:01:df:0c:9d:64:69:
8a:71:ea:d7:86:0f:c8:08:a3:37:7f:0d:48:80:20:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:CF:42:48:A5:70:B2:19:F0:14:92:AF:33:96:76:6B:5F:F3:5C
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b3:73:4d:5c:cc:d2:76:42:2f:ce:91:8b:28:ce:73:2f:05:
7f:20:8d:5d:71:42:af:98:91:ad:f0:05:6c:ba:db:03:7f:4a:
81:18:70:21:42:ae:e0:ed:33:da:d8:f8:b3:93:7b:d7:2c:77:
c1:2d:69:98:ed:7b:39:3b:c6:b1:81:3f:48:2c:24:13:52:86:
15:0d:32:b5:17:fa:e8:fc:0b:c2:5e:8f:27:2f:91:2e:6a:ba:
52:09:16:ac:74:49:a5:df:29:86:0f:97:15:c2:81:94:b2:61:
9c:9c:15:0e:48:a6:fb:b6:a1:27:4b:35:8f:43:aa:cd:07:34:
bb:35:97:43:44:6c:0c:d4:6b:e4:73:80:94:d1:ad:a5:1f:2d:
3f:eb:17:24:4e:a3:c7:e6:b0:a0:b4:5e:32:0e:b8:38:3a:86:
6c:08:bc:e3:fc:9d:36:d2:1e:95:86:f4:55:b7:d3:e0:89:4e:
62:a0:86:ba:2d:ca:5d:b4:c0:92:3b:6a:4d:2b:f6:dd:3f:37:
39:ab:01:3a:45:0a:71:07:46:d9:27:10:49:88:e3:97:1d:d8:
7b:93:f9:0f:74:f2:6e:27:76:d5:88:95:3b:31:f8:4b:57:36:
51:e5:3d:ed:72:6d:e4:33:22:81:4b:26:06:fd:26:b9:ef:a8:
3e:b6:c1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UxSBOMEDw2Eml7cpUDdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm
MDJkNWIwHhcNMjYwMzI5MDIwMTI0WhcNMjYwMzMwMDIwMTI0WjAzMTEwLwYDVQQD
EygyM2ZhY2Y0MjQ4YTU3MGIyMTlmMDE0OTJhZjMzOTY3NjZiNWZmMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOVsA0M6yJSauAVWYX/eGL7W5ahQ
QoTDTIdK6AfIyJRDFUqMRXfzVeL2qdG1XpSlD2DS4mYVuRem6iT1o1RHLmi+Qkfy
y4vHuuk8XyIE0Q9gROc1x0yKlNXUGQW09ByHD0mSvqH09kLwsGhsEgf5YbTZTdAT
AsmTqR7Z+v/XmLxJbm8HD5qrFc+ZeQ74ll19RE8cCwm3X54F1i7h2RTI8cF/QF4G
uN1ynb95CY+vA6lK8n2bkYHJo/68ASoI3y3MflN2JNWXkK0l10WYigyERJz8/Ufi
6+QGBRdPIzrvcaivHzBXJuxo2xAB3wydZGmKcerXhg/ICKM3fw1IgCClBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCP6z0JIpXCyGfAUkq8zlnZrX/NcMB8GA1UdIwQY
MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt
MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl
LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerNzTVzM
0nZCL86RiyjOcy8FfyCNXXFCr5iRrfAFbLrbA39KgRhwIUKu4O0z2tj4s5N71yx3
wS1pmO17OTvGsYE/SCwkE1KGFQ0ytRf66PwLwl6PJy+RLmq6UgkWrHRJpd8phg+X
FcKBlLJhnJwVDkim+7ahJ0s1j0OqzQc0uzWXQ0RsDNRr5HOAlNGtpR8tP+sXJE6j
x+awoLReMg64ODqGbAi84/ydNtIelYb0VbfT4IlOYqCGui3KXbTAkjtqTSv23T83
OasBOkUKcQdG2ScQSYjjlx3Ye5P5D3Tybid21YiVOzH4S1c2UeU97XJt5DMigUsm
Bv0mue+oPrbBCA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:12 2026 by rpki-client