Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
File: JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft (raw, json)
Hash identifier: IgGQetT8OZcVk8x7yqzjlsqSwh49frx/jqyI/EwHMl4=
Subject key identifier: 17:7E:47:CE:DF:9A:B0:5C:3F:E6:0A:60:6F:9C:D8:9A:EE:E4:54:9C
Authority key identifier: 24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
Certificate issuer: /CN=24bc98ddeefdb561aa69eca7349060d84059e192
Certificate serial: 019D371B4A0C16177CD1E303DD11708CC896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
Manifest number: 071D
Signing time: Sun 29 Mar 2026 01:00:28 +0000
Manifest this update: Sun 29 Mar 2026 01:00:28 +0000
Manifest next update: Mon 30 Mar 2026 01:00:28 +0000
Files and hashes: 1: JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl (hash: uUJ7FALhzrQ3jXRma+KDf7hkfxtOo24/9Oi3SLP3qzY=)
2: pCSMBqmn-2xkRzGOrRbDhgjt1ZQ.roa (hash: qEIf3vrVO3maTFTQZWMGFxBk+5hFDaz1/E5BMr9cl+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4a:0c:16:17:7c:d1:e3:03:dd:11:70:8c:c8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24bc98ddeefdb561aa69eca7349060d84059e192
Validity
Not Before: Mar 29 01:00:28 2026 GMT
Not After : Mar 30 01:00:28 2026 GMT
Subject: CN=177e47cedf9ab05c3fe60a606f9cd89aeee4549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:da:e8:d5:29:cb:ad:c9:60:cb:41:75:d9:
6b:47:69:ac:f8:d6:1e:69:9c:71:a4:2e:1c:88:a9:
84:55:21:25:ed:d9:64:a7:0e:8c:07:79:8a:16:63:
a9:be:25:8d:9e:da:5f:28:50:a5:ee:55:5e:fe:f4:
fc:54:c2:61:1b:64:2c:7a:3c:66:3f:11:9f:84:f4:
6b:22:c7:09:5e:03:6d:c5:73:c4:30:73:c8:21:f6:
c5:47:69:5d:e4:b8:ea:11:38:2a:1b:1b:e7:e7:a5:
da:28:41:94:8d:7d:29:99:0c:97:45:46:2c:5c:9e:
73:6b:78:7c:bc:f6:8f:24:ba:41:a9:b4:11:1f:60:
fb:4a:9a:a4:84:68:11:0c:e0:14:5e:0d:9d:ce:4f:
46:3e:a2:63:78:8e:6b:5c:09:82:28:5e:af:20:15:
0e:0d:6d:f6:ab:b9:e1:61:50:04:12:f9:bc:86:c3:
da:03:c1:ce:2a:5f:6e:b6:91:0c:7b:12:35:d1:ec:
a6:22:9b:8d:99:63:3e:85:57:10:f9:16:ca:6f:21:
a8:86:20:f4:7b:ae:7e:dd:eb:d2:02:ff:78:c5:15:
b8:e2:fb:b1:7f:24:eb:0a:dc:cb:cb:40:b3:1f:8d:
a8:cb:c9:ea:1c:e8:03:a4:89:64:87:c7:48:e8:93:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7E:47:CE:DF:9A:B0:5C:3F:E6:0A:60:6F:9C:D8:9A:EE:E4:54:9C
X509v3 Authority Key Identifier:
keyid:24:BC:98:DD:EE:FD:B5:61:AA:69:EC:A7:34:90:60:D8:40:59:E1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLyY3e79tWGqaeynNJBg2EBZ4ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/89fe5b-4fda-4d04-99b4-f49764ff48ea/1/JLyY3e79tWGqaeynNJBg2EBZ4ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:08:3c:a6:5c:13:27:90:93:8c:fb:06:9c:5f:59:4f:a2:
66:8e:59:bc:a8:84:b3:77:ec:1f:fe:f9:66:92:ff:dc:06:0c:
f0:85:62:b2:97:bf:05:9d:24:f6:e6:43:d0:eb:cc:bc:29:39:
12:f3:0e:cd:fc:0a:74:8f:8b:e8:4b:b0:a9:93:da:34:92:04:
cb:6b:71:a4:fd:3a:4b:22:ac:c2:82:a8:f6:1d:82:16:b1:6e:
cc:7a:ea:c0:55:a3:75:c6:e5:6c:dc:f9:94:68:d4:02:45:16:
9a:98:25:69:f7:67:69:86:d5:05:64:18:cb:bf:9f:71:47:28:
3e:d9:aa:17:08:46:ac:c4:cf:41:c1:73:e9:c6:ed:c6:35:32:
68:f4:a7:fc:c7:04:e7:fb:51:2e:82:54:0c:6b:8e:b3:92:25:
ed:d4:a5:9c:8e:37:38:aa:28:7e:91:2c:ea:06:94:3e:85:61:
d8:78:1c:36:43:87:da:96:d9:4b:4b:80:35:cb:b2:fe:6a:a2:
02:d4:ee:6a:2b:52:62:55:b7:05:b3:25:9d:13:66:49:3c:14:
ba:30:95:eb:b3:12:87:a8:2e:b1:bc:1e:f3:fe:87:26:5f:91:
39:49:7e:67:be:e2:c3:6b:02:a9:0f:65:71:b7:a8:d4:c8:37:
0c:71:fd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G0oMFhd80eMD3RFwjMiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YmM5OGRkZWVmZGI1NjFhYTY5ZWNhNzM0OTA2MGQ4NDA1
OWUxOTIwHhcNMjYwMzI5MDEwMDI4WhcNMjYwMzMwMDEwMDI4WjAzMTEwLwYDVQQD
EygxNzdlNDdjZWRmOWFiMDVjM2ZlNjBhNjA2ZjljZDg5YWVlZTQ1NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuena6NUpy63JYMtBddlrR2ms+NYe
aZxxpC4ciKmEVSEl7dlkpw6MB3mKFmOpviWNntpfKFCl7lVe/vT8VMJhG2Qsejxm
PxGfhPRrIscJXgNtxXPEMHPIIfbFR2ld5LjqETgqGxvn56XaKEGUjX0pmQyXRUYs
XJ5za3h8vPaPJLpBqbQRH2D7SpqkhGgRDOAUXg2dzk9GPqJjeI5rXAmCKF6vIBUO
DW32q7nhYVAEEvm8hsPaA8HOKl9utpEMexI10eymIpuNmWM+hVcQ+RbKbyGohiD0
e65+3evSAv94xRW44vuxfyTrCtzLy0CzH42oy8nqHOgDpIlkh8dI6JMe6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd+R87fmrBcP+YKYG+c2Jru5FScMB8GA1UdIwQY
MBaAFCS8mN3u/bVhqmnspzSQYNhAWeGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkx5WTNlNzl0V0dxYWV5bk5KQmcyRUJaNFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84OWZlNWItNGZkYS00ZDA0LTk5YjQt
ZjQ5NzY0ZmY0OGVhLzEvSkx5WTNlNzl0V0dxYWV5bk5KQmcyRUJaNFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84OWZlNWItNGZkYS00ZDA0LTk5YjQtZjQ5NzY0ZmY0OGVh
LzEvSkx5WTNlNzl0V0dxYWV5bk5KQmcyRUJaNFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4UIPKZc
EyeQk4z7BpxfWU+iZo5ZvKiEs3fsH/75ZpL/3AYM8IVispe/BZ0k9uZD0OvMvCk5
EvMOzfwKdI+L6EuwqZPaNJIEy2txpP06SyKswoKo9h2CFrFuzHrqwFWjdcblbNz5
lGjUAkUWmpglafdnaYbVBWQYy7+fcUcoPtmqFwhGrMTPQcFz6cbtxjUyaPSn/McE
5/tRLoJUDGuOs5Il7dSlnI43OKoofpEs6gaUPoVh2HgcNkOH2pbZS0uANcuy/mqi
AtTuaitSYlW3BbMlnRNmSTwUujCV67MSh6gusbwe8/6HJl+ROUl+Z77iw2sCqQ9l
cbeo1Mg3DHH9JA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:35 2026 by rpki-client