Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: fpPVcP26JwlbBTnK8kPuCGqAXet11SwSH2IYBsTAdWU=
Subject key identifier: 75:B2:E8:32:9E:28:88:F4:BC:CC:D3:44:D3:EF:76:05:B0:7A:BF:4D
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019DA1F8480B9F3E2B02FC2B6704F38EC104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 04AE
Signing time: Sat 18 Apr 2026 19:01:36 +0000
Manifest this update: Sat 18 Apr 2026 19:01:36 +0000
Manifest next update: Sun 19 Apr 2026 19:01:36 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: WOTYMfEca4/L30G9YCbq1iiuaUYMgntIQ8FYMHYlSYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:f8:48:0b:9f:3e:2b:02:fc:2b:67:04:f3:8e:c1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Apr 18 19:01:36 2026 GMT
Not After : Apr 19 19:01:36 2026 GMT
Subject: CN=75b2e8329e2888f4bcccd344d3ef7605b07abf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3f:7b:6e:f8:e4:fb:cf:be:da:d8:c8:4c:65:
ae:9f:c2:66:2d:ab:ad:67:43:22:92:a4:fb:bd:38:
32:61:59:b5:69:de:d3:9e:46:88:cd:df:cd:42:0f:
56:29:ee:8f:b8:eb:e2:af:17:92:3e:01:5d:df:12:
10:df:49:79:22:2e:34:da:5c:f5:a7:df:2b:f6:41:
63:3f:02:26:be:32:9a:1d:16:58:0e:6c:bf:b1:48:
9d:35:92:36:dc:c0:04:d4:c6:22:03:3b:00:47:16:
02:d6:1d:41:a6:92:a7:ed:ce:4a:d7:02:d5:91:b2:
4f:ec:c8:b6:5b:f1:60:49:6f:39:fb:f3:e6:00:b8:
0a:5d:5f:53:2f:8c:f8:b7:a4:85:0c:72:48:30:84:
32:ca:0e:b3:c7:57:15:b1:db:8a:98:e9:85:e1:65:
3e:18:1e:3f:13:a8:23:16:38:e4:a5:a0:57:89:79:
51:80:c6:db:de:8e:8b:7c:90:20:3d:c2:fa:e5:e6:
99:da:5f:df:46:72:74:41:2a:48:01:18:2f:ec:52:
2f:5d:aa:70:a8:8a:ec:81:15:f0:f5:94:33:66:8d:
a4:39:e5:07:31:be:a3:df:67:22:95:0c:fc:a1:a5:
c0:33:0d:18:24:c5:89:20:6c:fc:b4:c6:75:23:42:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B2:E8:32:9E:28:88:F4:BC:CC:D3:44:D3:EF:76:05:B0:7A:BF:4D
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:aa:14:a8:5a:91:93:30:05:b2:35:38:ba:4e:4a:71:71:
9d:21:95:3e:85:f7:7a:9d:a4:8e:24:da:d0:ff:5f:76:22:3e:
04:f9:ad:d1:9a:6e:ba:f9:e1:38:e4:f7:6e:b3:41:1d:09:01:
e9:0e:1b:92:c1:14:ca:57:39:51:1b:1e:2f:9a:a2:35:a3:5c:
bc:a3:cc:f0:85:81:3a:06:fd:a6:2b:ab:35:15:b5:16:90:be:
a1:fc:28:3a:ed:af:c5:a8:40:60:ab:07:37:b9:74:f8:19:c1:
a6:fe:2e:81:5a:e7:9c:3f:b2:ab:0a:fa:3e:ab:31:cb:bb:f1:
f3:55:c9:64:72:47:7d:3f:54:6c:d8:f4:80:f6:cf:4f:3c:e6:
6b:61:ed:c5:81:b1:3d:9c:e3:c6:77:d1:a4:a5:5f:90:62:1c:
94:45:3f:c6:3b:da:2e:ea:2c:a0:0e:25:b0:17:98:77:79:36:
e7:23:14:03:28:8b:be:e3:e3:eb:f1:64:4d:54:2f:fb:d9:23:
fd:43:65:c7:7f:6b:20:a1:58:d1:46:b2:66:34:50:ae:09:de:
69:83:44:b3:b7:bd:2f:b1:26:0b:c7:4d:90:36:20:0d:1a:87:
39:37:94:80:42:88:9b:b4:f1:2f:88:90:b6:dd:91:f5:65:a2:
38:e7:29:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2h+EgLnz4rAvwrZwTzjsEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj
Zjc2M2YwHhcNMjYwNDE4MTkwMTM2WhcNMjYwNDE5MTkwMTM2WjAzMTEwLwYDVQQD
Eyg3NWIyZTgzMjllMjg4OGY0YmNjY2QzNDRkM2VmNzYwNWIwN2FiZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z97bvjk+8++2tjITGWun8JmLaut
Z0MikqT7vTgyYVm1ad7TnkaIzd/NQg9WKe6PuOvirxeSPgFd3xIQ30l5Ii402lz1
p98r9kFjPwImvjKaHRZYDmy/sUidNZI23MAE1MYiAzsARxYC1h1BppKn7c5K1wLV
kbJP7Mi2W/FgSW85+/PmALgKXV9TL4z4t6SFDHJIMIQyyg6zx1cVsduKmOmF4WU+
GB4/E6gjFjjkpaBXiXlRgMbb3o6LfJAgPcL65eaZ2l/fRnJ0QSpIARgv7FIvXapw
qIrsgRXw9ZQzZo2kOeUHMb6j32cilQz8oaXAMw0YJMWJIGz8tMZ1I0J03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWy6DKeKIj0vMzTRNPvdgWwer9NMB8GA1UdIwQY
MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt
YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi
LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtqqFKha
kZMwBbI1OLpOSnFxnSGVPoX3ep2kjiTa0P9fdiI+BPmt0ZpuuvnhOOT3brNBHQkB
6Q4bksEUylc5URseL5qiNaNcvKPM8IWBOgb9piurNRW1FpC+ofwoOu2vxahAYKsH
N7l0+BnBpv4ugVrnnD+yqwr6Pqsxy7vx81XJZHJHfT9UbNj0gPbPTzzma2HtxYGx
PZzjxnfRpKVfkGIclEU/xjvaLuosoA4lsBeYd3k25yMUAyiLvuPj6/FkTVQv+9kj
/UNlx39rIKFY0UayZjRQrgneaYNEs7e9L7EmC8dNkDYgDRqHOTeUgEKIm7TxL4iQ
tt2R9WWiOOcpfA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 23:51:58 2026 by rpki-client