Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: 5yyLWps3IFaYpp5bLXl3RxFGRl4mOjaPGITEKrpwMK4=
Subject key identifier: B3:29:6A:E5:9E:8B:56:8F:81:E1:ED:E5:60:63:A5:F9:E4:39:03:84
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019F115279AD14AAB377D308A4F274A407E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 03:00:45 +0000
Manifest this update: Mon 29 Jun 2026 03:00:45 +0000
Manifest next update: Tue 30 Jun 2026 03:00:45 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: sbvlL4NK4vASAqWgo2O17eAI96KeqsFzG5Zh+/rtHjg=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:79:ad:14:aa:b3:77:d3:08:a4:f2:74:a4:07:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jun 29 03:00:45 2026 GMT
Not After : Jun 30 03:00:45 2026 GMT
Subject: CN=b3296ae59e8b568f81e1ede56063a5f9e4390384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:b2:7d:1c:3a:46:f5:1c:3b:ba:90:bb:8e:
bf:8a:76:72:d0:53:9b:e3:c4:f8:48:39:fe:8f:34:
2c:d4:3f:c7:f7:0c:d8:73:d0:9b:b5:44:74:c4:30:
72:65:b3:19:3b:72:b8:11:c9:ea:37:87:fc:50:8a:
01:5f:9e:a4:76:16:56:7d:06:87:62:d7:ae:e9:cf:
ce:39:7c:28:83:03:17:7b:b6:11:51:97:79:10:7c:
1e:be:60:47:0e:82:ba:6d:f7:66:4f:98:50:f0:9f:
ae:12:80:79:be:11:49:c9:09:4d:6a:d9:12:69:c0:
cd:a3:84:a8:f7:bc:3b:35:89:4c:9d:94:18:8b:6a:
dc:47:0f:24:fd:a4:67:c3:90:c3:bc:fd:5b:3f:fd:
4f:e9:e8:18:cc:42:16:40:fc:a2:4b:3e:eb:50:72:
7c:62:94:f3:ff:0d:33:68:de:89:fe:a0:34:48:c4:
d8:54:ec:1c:65:2d:d8:96:c6:7b:5f:f7:aa:78:43:
85:15:6e:e3:3f:91:1c:20:33:86:96:cb:7b:83:71:
05:bc:53:40:3a:69:f1:de:55:7f:cf:64:31:ef:14:
5d:47:31:25:0f:53:60:d6:20:4d:7f:63:89:87:c0:
10:a0:25:e6:d4:6d:40:6c:c5:ad:bb:0b:27:51:4f:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:6A:E5:9E:8B:56:8F:81:E1:ED:E5:60:63:A5:F9:E4:39:03:84
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:34:ff:66:da:9d:8d:23:7a:e0:fb:0d:9f:63:9e:5f:22:27:
ea:67:ec:f1:73:b4:d4:ad:6a:43:4c:81:8f:bd:87:04:47:55:
3f:86:9d:8d:99:f3:ec:85:05:d2:c9:a5:b6:5d:25:8e:81:bb:
38:45:9e:73:44:d8:9a:0a:a5:78:22:44:7d:54:ac:25:1d:08:
a6:c4:ee:c3:e6:c7:92:0d:25:98:37:3d:20:18:3f:a5:e1:21:
09:91:df:22:16:af:07:51:84:cf:cb:f9:19:d0:90:af:46:1c:
15:56:b8:f0:fc:32:8c:f1:7f:f9:fd:5e:b3:f4:be:1f:a2:51:
d2:84:97:18:9b:0b:35:8c:db:18:36:d8:1b:11:8f:3f:56:87:
2a:2d:10:8b:ec:50:82:b3:19:6b:77:80:39:29:37:ec:1e:4f:
40:d0:30:15:3d:8f:06:14:e5:66:39:a2:94:eb:37:80:7e:aa:
b0:92:9d:fd:d6:19:ec:b5:5b:58:c1:de:20:63:31:e0:56:51:
f1:a1:6c:cd:42:31:9b:9b:c3:ed:32:37:f3:0f:f5:9f:2e:bd:
54:01:20:74:2e:9d:61:4f:5c:6e:19:cd:66:fa:ca:04:39:cc:
7d:18:b8:e3:53:7a:60:b9:8e:22:6c:6a:d0:73:ea:76:88:39:
ba:c3:d5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RUnmtFKqzd9MIpPJ0pAfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTQ1MWUyNDVlMDFiYTliMmZiMjMxNGMyNjA5ZTdiMTUx
ZTc0YTIwHhcNMjYwNjI5MDMwMDQ1WhcNMjYwNjMwMDMwMDQ1WjAzMTEwLwYDVQQD
EyhiMzI5NmFlNTllOGI1NjhmODFlMWVkZTU2MDYzYTVmOWU0MzkwMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhyyfRw6RvUcO7qQu46/inZy0FOb
48T4SDn+jzQs1D/H9wzYc9CbtUR0xDByZbMZO3K4EcnqN4f8UIoBX56kdhZWfQaH
Yteu6c/OOXwogwMXe7YRUZd5EHwevmBHDoK6bfdmT5hQ8J+uEoB5vhFJyQlNatkS
acDNo4So97w7NYlMnZQYi2rcRw8k/aRnw5DDvP1bP/1P6egYzEIWQPyiSz7rUHJ8
YpTz/w0zaN6J/qA0SMTYVOwcZS3YlsZ7X/eqeEOFFW7jP5EcIDOGlst7g3EFvFNA
Omnx3lV/z2Qx7xRdRzElD1Ng1iBNf2OJh8AQoCXm1G1AbMWtuwsnUU+nJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMpauWei1aPgeHt5WBjpfnkOQOEMB8GA1UdIwQY
MBaAFCakUeJF4BupsvsjFMJgnnsVHnSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUt
YjU2YzUzNjYyMDI4LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUtYjU2YzUzNjYyMDI4
LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDT/Ztqd
jSN64PsNn2OeXyIn6mfs8XO01K1qQ0yBj72HBEdVP4adjZnz7IUF0smltl0ljoG7
OEWec0TYmgqleCJEfVSsJR0IpsTuw+bHkg0lmDc9IBg/peEhCZHfIhavB1GEz8v5
GdCQr0YcFVa48PwyjPF/+f1es/S+H6JR0oSXGJsLNYzbGDbYGxGPP1aHKi0Qi+xQ
grMZa3eAOSk37B5PQNAwFT2PBhTlZjmilOs3gH6qsJKd/dYZ7LVbWMHeIGMx4FZR
8aFszUIxm5vD7TI38w/1ny69VAEgdC6dYU9cbhnNZvrKBDnMfRi441N6YLmOImxq
0HPqdog5usPVEg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:29 2026 by rpki-client