Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: 4jIh6ibanDDX6nw5OKQf7mLNhiGXY3M79YFs0jloO8A=
Subject key identifier: C1:58:2D:E1:AC:55:DF:EE:A2:76:FE:BC:45:8D:CD:A5:5E:19:AF:1C
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01A03C71C29FD028B3217FA767F62FCB39DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1A21
Signing time: Wed 26 Aug 2026 05:01:23 +0000
Manifest this update: Wed 26 Aug 2026 05:01:23 +0000
Manifest next update: Thu 27 Aug 2026 05:01:23 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: nkmRGy7MLIKA0776ycmcwCPBsQZLeIRQ7nM/tIKnZfQ=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:c2:9f:d0:28:b3:21:7f:a7:67:f6:2f:cb:39:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Aug 26 05:01:23 2026 GMT
Not After : Aug 27 05:01:23 2026 GMT
Subject: CN=c1582de1ac55dfeea276febc458dcda55e19af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0f:a8:86:62:42:98:22:8f:24:b4:47:50:b3:
ad:0f:88:a7:e9:55:9b:b7:7a:3e:2d:a8:fe:93:e0:
76:1b:17:55:67:12:6c:4f:f2:1d:c8:6b:53:9e:80:
26:a2:5e:9f:7c:98:85:bd:bc:7e:82:d2:a0:41:9a:
02:5e:dc:53:a5:b6:96:6a:4e:81:e1:8f:5f:9e:f6:
f8:72:b1:bb:36:68:8f:c8:3b:a9:36:92:02:ad:d3:
99:8b:4b:2c:9f:cd:b0:e7:7f:9b:6c:42:ad:c7:c7:
3a:79:ce:7e:5e:53:c0:43:eb:5a:7c:3a:3e:9f:7f:
df:3f:fb:47:69:69:e0:57:0e:1b:ab:21:7e:6c:c1:
a1:ad:46:cc:e3:8c:a6:ca:5f:28:c8:61:a0:f6:b2:
27:d9:17:74:95:94:6f:66:91:82:cb:46:d9:0d:b2:
bf:42:31:fc:59:98:ea:2a:d0:f1:aa:fd:ec:04:a9:
54:04:27:05:b9:e0:62:80:1e:9f:27:d6:fb:0e:b0:
ff:93:3f:60:11:77:cd:2a:cd:e7:11:ad:bf:c7:ea:
23:67:e2:ae:5a:c0:98:81:a5:bd:c2:56:fc:b0:1d:
c1:a0:6e:74:d8:1b:ab:c4:59:e7:a6:a4:4b:f4:01:
71:aa:a3:6d:36:af:eb:a3:54:7f:16:ce:ae:eb:2e:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:2D:E1:AC:55:DF:EE:A2:76:FE:BC:45:8D:CD:A5:5E:19:AF:1C
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:bf:79:1e:b4:d6:22:e8:15:6c:d5:d9:b3:c5:c5:24:0c:
45:a7:34:89:10:14:08:2d:0e:f7:a0:1d:ba:ff:0b:d7:91:38:
3c:d3:31:96:1c:6d:4c:cd:9c:c3:29:4e:51:e8:fa:bf:a2:b4:
d9:ba:03:3e:5f:e4:8c:b8:44:1d:5f:52:4f:54:67:46:1a:a2:
f0:17:36:29:e9:1d:33:5b:8b:fe:47:d5:15:c4:2e:3b:5d:1d:
7b:25:62:f3:ec:7d:dd:06:47:5e:3b:27:29:e3:16:d4:37:51:
5e:1a:78:8c:f2:c9:25:96:b4:88:3c:34:12:01:ad:b6:c3:35:
d6:df:7a:68:1c:38:b2:34:ec:d8:af:ce:ac:8f:91:1f:50:ce:
a8:04:41:9b:92:ef:0d:c6:44:78:13:08:7d:29:c2:86:00:dc:
92:05:74:ee:39:67:0d:fe:2d:53:9c:a0:fc:67:f9:30:5b:55:
95:3f:ae:29:5f:46:12:be:7c:ea:dc:1b:b7:9a:fb:d7:96:31:
64:8e:ff:24:00:aa:73:46:96:88:96:43:91:c3:4b:11:ce:f4:
e0:39:8c:68:df:a6:69:4d:65:70:5e:f8:1e:4a:ce:cc:c2:92:
19:76:7d:42:cf:5a:f2:6d:e4:cf:68:87:43:ab:2e:2c:2f:8b:
12:c2:c0:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8ccKf0CizIX+nZ/YvyznaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTQ1MWUyNDVlMDFiYTliMmZiMjMxNGMyNjA5ZTdiMTUx
ZTc0YTIwHhcNMjYwODI2MDUwMTIzWhcNMjYwODI3MDUwMTIzWjAzMTEwLwYDVQQD
EyhjMTU4MmRlMWFjNTVkZmVlYTI3NmZlYmM0NThkY2RhNTVlMTlhZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg+ohmJCmCKPJLRHULOtD4in6VWb
t3o+Laj+k+B2GxdVZxJsT/IdyGtTnoAmol6ffJiFvbx+gtKgQZoCXtxTpbaWak6B
4Y9fnvb4crG7NmiPyDupNpICrdOZi0ssn82w53+bbEKtx8c6ec5+XlPAQ+tafDo+
n3/fP/tHaWngVw4bqyF+bMGhrUbM44ymyl8oyGGg9rIn2Rd0lZRvZpGCy0bZDbK/
QjH8WZjqKtDxqv3sBKlUBCcFueBigB6fJ9b7DrD/kz9gEXfNKs3nEa2/x+ojZ+Ku
WsCYgaW9wlb8sB3BoG502BurxFnnpqRL9AFxqqNtNq/ro1R/Fs6u6y4DawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFYLeGsVd/uonb+vEWNzaVeGa8cMB8GA1UdIwQY
MBaAFCakUeJF4BupsvsjFMJgnnsVHnSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUt
YjU2YzUzNjYyMDI4LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9hMDc3MzktNjBiYS00ZTE5LWJjNTUtYjU2YzUzNjYyMDI4
LzEvSnFSUjRrWGdHNm15LXlNVXdtQ2VleFVlZEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaq/eR60
1iLoFWzV2bPFxSQMRac0iRAUCC0O96Aduv8L15E4PNMxlhxtTM2cwylOUej6v6K0
2boDPl/kjLhEHV9ST1RnRhqi8Bc2KekdM1uL/kfVFcQuO10deyVi8+x93QZHXjsn
KeMW1DdRXhp4jPLJJZa0iDw0EgGttsM11t96aBw4sjTs2K/OrI+RH1DOqARBm5Lv
DcZEeBMIfSnChgDckgV07jlnDf4tU5yg/Gf5MFtVlT+uKV9GEr586twbt5r715Yx
ZI7/JACqc0aWiJZDkcNLEc704DmMaN+maU1lcF74HkrOzMKSGXZ9Qs9a8m3kz2iH
Q6suLC+LEsLAIA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:31 2026 by rpki-client