Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier: Dn8WJrNwYan/QLNncKyzDnF6YDnMAQM9m3WqFPTIUww=
Subject key identifier: 96:37:09:4F:9F:FD:D3:EF:FE:CC:5B:72:09:8D:C3:A6:07:50:C3:D3
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial: 019DCE993DD70FCF9EB45E83BD79B4B41D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number: 0242
Signing time: Mon 27 Apr 2026 11:00:42 +0000
Manifest this update: Mon 27 Apr 2026 11:00:42 +0000
Manifest next update: Tue 28 Apr 2026 11:00:42 +0000
Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: +jW9lRX78FBoQ9fkZYpMYZgWUZaSw+WiZz02Y3dDFgQ=)
2: fX-rHvxMS7rGe-P0kdh6qBCV0kw.roa (hash: YxEpHCuxMU6/BR/ByERCcyICEyXZ5/Zrc7JTg1hXiro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:3d:d7:0f:cf:9e:b4:5e:83:bd:79:b4:b4:1d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Validity
Not Before: Apr 27 11:00:42 2026 GMT
Not After : Apr 28 11:00:42 2026 GMT
Subject: CN=9637094f9ffdd3effecc5b72098dc3a60750c3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:d9:d4:d5:fc:ec:93:3a:db:35:f7:6c:93:
48:94:6b:81:76:0f:23:46:d5:dd:e9:f5:55:5f:9b:
39:9c:bd:43:91:a3:e6:2d:8b:ec:80:86:b4:ae:1a:
d5:61:9e:29:f9:31:12:e4:fd:11:8d:8f:60:08:94:
34:9e:fe:6e:23:da:28:a9:e9:1c:16:66:83:de:e0:
c9:e1:ff:88:90:fa:26:de:90:22:21:e1:08:8e:c6:
40:d3:bc:de:69:a4:c7:b7:72:17:10:0a:b5:09:4c:
c6:b9:49:06:99:42:bf:3c:f8:0b:19:e1:1e:91:98:
b6:bc:fd:d1:9b:f0:07:87:44:34:9f:a5:ad:1d:a8:
cd:20:d6:f4:50:7e:f5:08:6c:1b:7e:39:7e:98:90:
53:83:a0:95:b7:8e:59:e9:8a:98:ee:f5:8e:ec:80:
9a:c7:8f:62:41:04:4f:72:a3:2f:8f:4c:24:76:6a:
84:51:a2:d8:f0:c1:39:7a:70:68:37:08:0a:84:c5:
28:24:10:3a:45:81:9e:26:e6:c9:fc:19:2a:f8:d4:
16:a4:60:38:c1:e2:18:2c:a7:b9:19:5c:b1:76:ea:
2b:82:0e:55:db:74:25:5c:7a:46:e5:8b:7b:d1:5e:
7c:de:70:ba:22:15:ec:85:22:d2:fc:de:dc:27:27:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:09:4F:9F:FD:D3:EF:FE:CC:5B:72:09:8D:C3:A6:07:50:C3:D3
X509v3 Authority Key Identifier:
keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5f:0d:84:f6:cd:cb:08:e4:45:a2:08:0a:62:ef:ed:d0:c9:
5d:6f:04:9b:e6:37:79:b9:97:29:fa:b5:41:52:2d:e2:25:c5:
9b:5f:81:7c:b9:46:94:18:39:74:d0:da:46:e6:d8:5d:0b:3a:
a1:b7:fc:1c:3e:a8:7d:69:2c:8e:07:8a:c4:f7:44:58:87:00:
4b:fd:b7:e0:f1:89:30:20:6c:e2:e1:c9:d7:04:e2:de:b8:23:
0e:c6:d2:e4:57:17:c7:a7:3a:df:c1:8b:5c:87:0e:6c:6d:29:
56:42:ec:a0:66:96:90:3f:46:3c:f8:92:dc:c7:ec:35:4e:ad:
e8:32:38:5a:a0:76:cd:62:0f:19:b8:53:12:81:40:9d:e5:db:
7f:f1:a1:7c:6b:e6:9d:9b:12:fd:70:f4:6e:33:c9:fb:6b:89:
6d:a8:eb:9a:d1:61:61:6e:90:4c:2a:fc:92:17:5f:71:ea:f2:
77:45:8a:4d:dd:05:c3:10:58:31:f7:eb:3c:12:ef:20:c2:a5:
49:83:67:36:4c:87:da:3a:1e:f9:c8:60:ff:bd:0b:5c:a4:b3:
6f:9d:60:2b:b9:3d:ab:f8:83:96:e3:4f:d6:00:ef:90:77:23:
37:e1:d2:84:89:c4:15:90:d2:54:7a:2a:4b:4c:73:bb:e9:ea:
1d:f6:23:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmT3XD8+etF6DvXm0tB0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjYwNDI3MTEwMDQyWhcNMjYwNDI4MTEwMDQyWjAzMTEwLwYDVQQD
Eyg5NjM3MDk0ZjlmZmRkM2VmZmVjYzViNzIwOThkYzNhNjA3NTBjM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAXZ1NX87JM62zX3bJNIlGuBdg8j
RtXd6fVVX5s5nL1DkaPmLYvsgIa0rhrVYZ4p+TES5P0RjY9gCJQ0nv5uI9ooqekc
FmaD3uDJ4f+IkPom3pAiIeEIjsZA07zeaaTHt3IXEAq1CUzGuUkGmUK/PPgLGeEe
kZi2vP3Rm/AHh0Q0n6WtHajNINb0UH71CGwbfjl+mJBTg6CVt45Z6YqY7vWO7ICa
x49iQQRPcqMvj0wkdmqEUaLY8ME5enBoNwgKhMUoJBA6RYGeJubJ/Bkq+NQWpGA4
weIYLKe5GVyxduorgg5V23QlXHpG5Yt70V583nC6IhXshSLS/N7cJye+RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3CU+f/dPv/sxbcgmNw6YHUMPTMB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeF8NhPbN
ywjkRaIICmLv7dDJXW8Em+Y3ebmXKfq1QVIt4iXFm1+BfLlGlBg5dNDaRubYXQs6
obf8HD6ofWksjgeKxPdEWIcAS/234PGJMCBs4uHJ1wTi3rgjDsbS5FcXx6c638GL
XIcObG0pVkLsoGaWkD9GPPiS3MfsNU6t6DI4WqB2zWIPGbhTEoFAneXbf/GhfGvm
nZsS/XD0bjPJ+2uJbajrmtFhYW6QTCr8khdfceryd0WKTd0FwxBYMffrPBLvIMKl
SYNnNkyH2joe+chg/70LXKSzb51gK7k9q/iDluNP1gDvkHcjN+HShInEFZDSVHoq
S0xzu+nqHfYjMA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:14 2026 by rpki-client