Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: f66rFEmv+kzMKwbe6v761QahCk61scKejGdBazjM6l8=
Subject key identifier: 95:C4:E5:DD:D3:6F:4E:1E:B0:94:23:26:69:71:66:A2:3D:01:F7:A8
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019D389BE9CAC4CAE30F12542DB9C13A5AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 1346
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: Wx7RuqkIU7SEgVOcPKvpBgooBRqKZwpnw1s0s6W4AIY=)
2: hRHKFg_8XNSpz14bqguIKVw9u_g.roa (hash: IvcC+EHpFNhaRen15J+kANi4Vrf+W52puDOFvkl+2OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e9:ca:c4:ca:e3:0f:12:54:2d:b9:c1:3a:5a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=95c4e5ddd36f4e1eb0942326697166a23d01f7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:c4:3c:dc:94:87:f2:49:5a:13:02:f1:cb:
10:66:b0:6f:92:69:8b:1f:b3:56:bf:65:cf:06:fb:
97:a0:81:c4:05:28:14:13:f1:ba:b6:6a:1d:c5:10:
a7:9b:5d:1f:17:d7:ce:e3:6f:4c:2b:12:8e:fc:89:
05:53:cf:e5:da:a1:46:1b:bb:ce:41:f1:0a:eb:db:
fb:21:d8:e7:85:73:62:ab:35:2e:e7:39:c8:da:43:
42:72:d0:26:2f:8d:b7:83:3f:cf:eb:2e:2b:75:a2:
5f:76:fa:25:06:14:3d:63:06:c2:d7:de:2c:b4:f5:
53:a3:04:9a:e6:14:d8:bb:79:b2:08:e4:78:19:b6:
68:b1:3a:52:0d:47:f1:45:ff:f1:7e:49:ff:6d:d9:
ca:af:b4:68:4f:b0:df:64:ed:a2:b7:79:c0:d8:89:
57:ef:e8:da:99:a9:71:8e:f2:fe:94:f4:1f:cd:8b:
6d:2a:48:3f:1d:33:f3:5d:25:0e:91:a7:0a:3f:a2:
19:f2:89:aa:50:ef:6e:13:69:da:e8:fa:26:43:8a:
e4:c1:e9:18:bd:74:0c:53:95:20:35:89:e8:a7:9f:
aa:d6:e4:b5:c9:fb:8e:16:8b:9c:0b:7c:55:3c:de:
47:f1:b3:95:3f:0d:c8:9c:8c:b0:57:ca:4e:b9:82:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:E5:DD:D3:6F:4E:1E:B0:94:23:26:69:71:66:A2:3D:01:F7:A8
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:e9:50:73:a5:ae:5e:85:fb:d6:7c:13:2c:b7:db:e9:f5:7e:
e3:fa:a0:e6:a8:e7:d9:e1:40:66:c6:7c:62:97:33:81:96:4a:
cb:6e:59:63:b8:21:bd:5a:1c:22:77:0c:b5:a9:11:c4:d0:63:
53:99:bb:50:dc:3d:0d:a8:b1:b2:bb:6c:7d:4d:b5:6b:38:49:
d4:85:d6:77:f4:e5:7c:9a:24:04:5d:09:af:c9:e9:fb:d3:bf:
36:9f:3d:90:44:68:fd:d4:97:ce:7e:f1:b1:70:36:c2:1c:60:
42:20:dc:45:fb:9a:55:48:66:02:d1:27:26:78:3d:46:13:6c:
69:c1:d1:e1:a4:1e:75:bd:47:31:3e:b6:75:9f:de:c4:cf:17:
a2:73:9d:d1:98:b0:31:c8:5e:6f:6c:fb:dc:cb:db:9b:a7:d8:
aa:c1:cb:28:82:6c:84:04:00:90:30:df:84:5b:aa:0d:f3:66:
21:24:8c:f4:e9:da:cc:bc:ec:fb:b7:c8:a7:db:5c:c5:fb:b1:
88:ff:00:8a:d7:b5:9c:ca:da:65:37:07:7b:b5:89:ea:02:ce:
4b:9d:e5:68:11:06:5d:cb:f2:2b:77:43:91:0b:c7:02:6a:d3:
97:eb:2c:c9:cf:d7:6c:26:b3:c4:a8:62:50:ce:5d:54:84:1c:
f2:5b:b5:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m+nKxMrjDxJULbnBOlqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjYwMzI5MDgwMDM1WhcNMjYwMzMwMDgwMDM1WjAzMTEwLwYDVQQD
Eyg5NWM0ZTVkZGQzNmY0ZTFlYjA5NDIzMjY2OTcxNjZhMjNkMDFmN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPDEPNyUh/JJWhMC8csQZrBvkmmL
H7NWv2XPBvuXoIHEBSgUE/G6tmodxRCnm10fF9fO429MKxKO/IkFU8/l2qFGG7vO
QfEK69v7IdjnhXNiqzUu5znI2kNCctAmL423gz/P6y4rdaJfdvolBhQ9YwbC194s
tPVTowSa5hTYu3myCOR4GbZosTpSDUfxRf/xfkn/bdnKr7RoT7DfZO2it3nA2IlX
7+jamalxjvL+lPQfzYttKkg/HTPzXSUOkacKP6IZ8omqUO9uE2na6PomQ4rkwekY
vXQMU5UgNYnop5+q1uS1yfuOFoucC3xVPN5H8bOVPw3InIywV8pOuYIWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXE5d3Tb04esJQjJmlxZqI9AfeoMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6+lQc6Wu
XoX71nwTLLfb6fV+4/qg5qjn2eFAZsZ8YpczgZZKy25ZY7ghvVocIncMtakRxNBj
U5m7UNw9DaixsrtsfU21azhJ1IXWd/TlfJokBF0Jr8np+9O/Np89kERo/dSXzn7x
sXA2whxgQiDcRfuaVUhmAtEnJng9RhNsacHR4aQedb1HMT62dZ/exM8XonOd0Ziw
Mcheb2z73Mvbm6fYqsHLKIJshAQAkDDfhFuqDfNmISSM9OnazLzs+7fIp9tcxfux
iP8Aite1nMraZTcHe7WJ6gLOS53laBEGXcvyK3dDkQvHAmrTl+ssyc/XbCazxKhi
UM5dVIQc8lu1Ww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:14 2026 by rpki-client