Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File: JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier: 7EIbvPXXaH9MLJF5CulS6xNGsJTpXJA6D7ixlB90naQ=
Subject key identifier: 44:25:50:08:E4:43:B5:A2:F0:39:F9:E7:4D:F5:12:8B:5B:1C:33:2E
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 019DD08769F418D7434B2BE52536D21CD692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number: 0ECC
Signing time: Mon 27 Apr 2026 20:00:28 +0000
Manifest this update: Mon 27 Apr 2026 20:00:28 +0000
Manifest next update: Tue 28 Apr 2026 20:00:28 +0000
Files and hashes: 1: CBT9EvNLviREuaFnuwBtsjNjvqQ.roa (hash: L5VKNlWuWtfLWO7jL8F9Y4m0nbimopTGF6Y2mOItvHc=)
2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: kx2AwcrVpBCbM3sfjT194AAmrmfNlqYj1J0LJd9B60k=)
3: T2MyCYDe8ZVj6MHLOpPsRFQaLyc.roa (hash: 2HMXQDaERD47LVw7adtPSZsCeqM+FdyN2voYgfm3nq4=)
4: TrZbLVY0iXqlw78jA1uMduH-vUQ.roa (hash: KRDdhAasvGi+XoVP5w8RcZgsqXheZXBgHtl6x/DPy1c=)
5: WWUJ0b2mKsJU4aWCDcCYWe3B3Q8.roa (hash: OR5UXYV6xuApBIfkbkR4RJywXInN6wryK+o2woE8n2A=)
6: fKuK4GhJoW5W0MgtH6V8djfpAh4.roa (hash: oBGCf3nVEKmFy2gQfXUwhx5LHxw9ggGPk7GHfDrKscM=)
7: zxx_FfKkmmxvyeDvkRu2znFf5T8.roa (hash: MOimrkmJ3AqYEjrbALlR+YXtLYVrKH4fVxKgTuqxIeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:69:f4:18:d7:43:4b:2b:e5:25:36:d2:1c:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Apr 27 20:00:28 2026 GMT
Not After : Apr 28 20:00:28 2026 GMT
Subject: CN=44255008e443b5a2f039f9e74df5128b5b1c332e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:59:d6:8a:28:2e:d1:5b:2b:44:6d:5d:44:
80:20:35:ee:1b:df:93:51:f3:2b:c7:d6:1d:d1:d8:
54:54:6c:4f:f4:2d:27:8e:8c:c4:96:53:c0:1f:61:
38:82:04:27:a4:0b:60:ab:8f:ec:91:fd:e3:82:9f:
31:2d:3a:90:ee:cf:2f:b7:c2:71:f9:04:22:80:12:
d3:c8:e4:9a:1e:3d:7c:42:ab:35:4d:0c:30:c6:fa:
e4:cb:88:b0:f2:3b:37:23:d4:17:70:0b:53:b2:d4:
8a:f1:c9:c4:24:1a:c4:6f:15:2c:93:1a:80:84:00:
78:9d:25:9a:05:9c:5e:66:3b:9c:8b:9d:f2:1c:fe:
72:34:ca:d9:03:e7:8f:d2:65:fb:35:12:63:10:b5:
08:5c:fb:c4:bd:e9:4a:1d:b9:0f:b5:75:98:92:ee:
ea:ee:b5:39:a3:93:f6:29:cd:e2:19:b8:af:28:b6:
9c:3f:29:bb:7c:76:6e:3d:07:92:5d:c0:7c:05:de:
5d:bc:3a:46:88:84:8d:e0:ad:34:b1:93:95:82:3b:
88:c5:a4:6f:d9:cf:c4:5b:67:98:55:2d:47:89:8d:
65:8a:bd:5a:07:f1:29:aa:d1:ac:9b:98:15:a3:4c:
e4:60:92:4c:83:9d:bd:13:81:90:75:26:44:09:5f:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:50:08:E4:43:B5:A2:F0:39:F9:E7:4D:F5:12:8B:5B:1C:33:2E
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:fb:3c:3d:28:44:7d:e7:d1:74:e9:6c:f1:20:08:17:9c:
8f:b5:45:bb:d7:5d:12:f4:31:19:24:ba:3a:31:f2:7d:11:be:
81:2a:2f:ab:70:5f:c2:c8:75:b7:7d:c1:75:28:d4:2e:06:6b:
22:8f:89:cd:a2:60:6e:ae:1b:df:ad:23:40:e0:66:1b:91:3b:
e4:ba:0d:23:c4:28:88:9f:51:95:09:c0:a7:89:96:d0:c6:a8:
95:63:46:64:34:9f:ef:c1:a4:f4:aa:78:ae:b2:42:95:f8:1f:
c0:8e:08:c4:9a:e3:cc:99:95:f8:ae:2b:ea:17:c9:38:3f:a4:
54:4a:fa:7f:2c:d8:74:13:bd:d6:e2:6d:5b:ae:25:24:71:a6:
6b:83:7c:12:78:af:8e:09:cc:c1:19:ac:db:31:1b:12:29:82:
20:1e:9d:35:c9:2c:a7:d0:d0:01:0c:62:b1:44:42:9e:56:f2:
b5:b7:7f:cf:e5:b5:ed:f9:c2:e8:18:44:48:c8:88:6b:57:77:
5e:83:c0:9e:31:97:7b:cd:18:be:3d:41:0e:73:11:1e:62:27:
1a:1a:23:fb:86:14:bd:62:d6:04:b5:2b:3a:ca:b3:01:51:82:
9a:19:4b:6b:83:72:ac:a2:b2:ac:93:89:13:31:85:de:7e:58:
cd:4c:a4:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Qh2n0GNdDSyvlJTbSHNaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl
ZGI2MzUwHhcNMjYwNDI3MjAwMDI4WhcNMjYwNDI4MjAwMDI4WjAzMTEwLwYDVQQD
Eyg0NDI1NTAwOGU0NDNiNWEyZjAzOWY5ZTc0ZGY1MTI4YjViMWMzMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ9Z1oooLtFbK0RtXUSAIDXuG9+T
UfMrx9Yd0dhUVGxP9C0njozEllPAH2E4ggQnpAtgq4/skf3jgp8xLTqQ7s8vt8Jx
+QQigBLTyOSaHj18Qqs1TQwwxvrky4iw8js3I9QXcAtTstSK8cnEJBrEbxUskxqA
hAB4nSWaBZxeZjuci53yHP5yNMrZA+eP0mX7NRJjELUIXPvEvelKHbkPtXWYku7q
7rU5o5P2Kc3iGbivKLacPym7fHZuPQeSXcB8Bd5dvDpGiISN4K00sZOVgjuIxaRv
2c/EW2eYVS1HiY1lir1aB/EpqtGsm5gVo0zkYJJMg529E4GQdSZECV/KZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQlUAjkQ7Wi8Dn55031EotbHDMuMB8GA1UdIwQY
MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt
Yjk4ZGY1NDRiYzIwLzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw
LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+L7PD0o
RH3n0XTpbPEgCBecj7VFu9ddEvQxGSS6OjHyfRG+gSovq3Bfwsh1t33BdSjULgZr
Io+JzaJgbq4b360jQOBmG5E75LoNI8QoiJ9RlQnAp4mW0MaolWNGZDSf78Gk9Kp4
rrJClfgfwI4IxJrjzJmV+K4r6hfJOD+kVEr6fyzYdBO91uJtW64lJHGma4N8Eniv
jgnMwRms2zEbEimCIB6dNcksp9DQAQxisURCnlbytbd/z+W17fnC6BhESMiIa1d3
XoPAnjGXe80Yvj1BDnMRHmInGhoj+4YUvWLWBLUrOsqzAVGCmhlLa4NyrKKyrJOJ
EzGF3n5YzUyktA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:45:15 2026 by rpki-client