Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: +ghWJ1OgEgVG3sEmpezJZ8Qgk3sGHeb3jszkR2VMOQg=
Subject key identifier: 87:21:D7:F6:52:7F:00:E1:0B:39:55:77:B1:A6:99:F1:92:DF:D7:77
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019DA3785A5C36198420015D07DAA854884F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 10E4
Signing time: Sun 19 Apr 2026 02:01:06 +0000
Manifest this update: Sun 19 Apr 2026 02:01:06 +0000
Manifest next update: Mon 20 Apr 2026 02:01:06 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: FORCG5q8gLe6y2nhg6SFoUM/Z4/0qccaii5nvT6oYFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:5a:5c:36:19:84:20:01:5d:07:da:a8:54:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Apr 19 02:01:06 2026 GMT
Not After : Apr 20 02:01:06 2026 GMT
Subject: CN=8721d7f6527f00e10b395577b1a699f192dfd777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:3f:2d:ca:1f:94:f3:df:f9:e4:e2:c0:4d:
c1:e2:5e:d9:89:a8:fc:5d:28:70:96:46:42:09:d0:
06:69:53:df:e3:fd:35:20:ee:09:41:2a:95:da:65:
76:56:e3:54:a3:fb:48:42:8c:cc:74:62:c0:e7:67:
f4:14:9b:4c:f3:ae:ec:b4:a4:43:1c:37:c2:e1:95:
87:1e:52:f3:23:17:13:5f:09:65:43:72:2e:3b:8c:
16:55:b1:e8:bb:f3:7a:73:3a:ff:7b:ad:6d:c4:48:
43:80:32:07:d1:fa:f3:72:d3:ab:6a:23:8e:5f:1e:
31:dd:6c:d3:64:27:74:22:1f:4d:bb:66:8d:30:87:
9d:12:5d:72:f5:2b:74:13:13:5d:d3:1b:44:fc:97:
2f:de:b7:4b:05:82:bc:01:f6:6b:9f:04:97:b7:57:
11:53:dc:ce:f7:10:3e:49:b2:64:9d:5e:de:d3:62:
ca:31:de:ee:47:32:68:63:78:5b:28:44:d8:6c:2d:
e4:f7:50:5e:d3:98:bc:9a:40:ac:da:bf:56:5d:a7:
17:f0:54:4c:98:6f:15:54:6b:7b:af:d1:89:24:0a:
6e:d0:19:5c:26:11:00:ac:45:1a:08:7c:24:3d:ef:
59:d0:29:6d:bd:45:4b:8e:f2:ef:c1:e6:88:f4:02:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:D7:F6:52:7F:00:E1:0B:39:55:77:B1:A6:99:F1:92:DF:D7:77
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:15:f0:cb:6b:47:23:a8:94:f8:49:ab:c1:ae:90:38:d4:
ef:4a:47:48:23:b4:5c:93:8e:f9:85:9c:05:12:3f:18:62:08:
85:6b:37:6c:40:0f:ea:be:f8:e1:2f:3e:c5:ee:b6:92:7f:90:
33:fc:22:9b:d3:f1:41:4c:ec:45:5f:4a:59:fd:38:46:0a:6f:
39:41:e7:98:0f:89:35:57:81:40:5a:a6:10:48:8a:e3:52:69:
55:b7:8f:0a:c8:8f:3a:d1:ab:ea:2d:ca:b9:d5:88:3c:02:c6:
02:96:8a:de:4d:29:f3:85:1a:f9:67:17:0f:f6:0e:f1:7c:16:
33:2f:ac:26:76:c4:60:33:30:f0:a4:3a:1f:89:88:63:ac:45:
df:d6:61:b6:21:d2:54:95:1d:d8:64:0e:bc:f3:35:18:a1:88:
a8:48:6a:6c:b8:c2:04:90:6e:43:12:8e:ff:c0:1e:d2:37:19:
28:a3:92:da:e9:ed:d3:ed:3d:b0:e1:df:36:5e:25:8c:f4:e7:
1a:83:ce:58:5a:3f:92:2e:1e:e5:47:e6:9f:db:a3:87:a4:26:
ef:a6:5f:ea:bf:1e:dd:b3:a4:f0:38:30:0c:30:95:7f:cf:47:
17:5e:78:b3:73:06:d4:1b:7c:e6:57:df:e3:07:9a:29:33:9e:
98:1c:26:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeFpcNhmEIAFdB9qoVIhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTRhODQ2NjMyZTgzMzQwZTExNGQwZDM1NTkxYjNkNDIx
ODhiNzYwHhcNMjYwNDE5MDIwMTA2WhcNMjYwNDIwMDIwMTA2WjAzMTEwLwYDVQQD
Eyg4NzIxZDdmNjUyN2YwMGUxMGIzOTU1NzdiMWE2OTlmMTkyZGZkNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvo/LcoflPPf+eTiwE3B4l7Ziaj8
XShwlkZCCdAGaVPf4/01IO4JQSqV2mV2VuNUo/tIQozMdGLA52f0FJtM867stKRD
HDfC4ZWHHlLzIxcTXwllQ3IuO4wWVbHou/N6czr/e61txEhDgDIH0frzctOraiOO
Xx4x3WzTZCd0Ih9Nu2aNMIedEl1y9St0ExNd0xtE/Jcv3rdLBYK8AfZrnwSXt1cR
U9zO9xA+SbJknV7e02LKMd7uRzJoY3hbKETYbC3k91Be05i8mkCs2r9WXacX8FRM
mG8VVGt7r9GJJApu0BlcJhEArEUaCHwkPe9Z0CltvUVLjvLvweaI9AIhrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIch1/ZSfwDhCzlVd7GmmfGS39d3MB8GA1UdIwQY
MBaAFIxUqEZjLoM0DhFNDTVZGz1CGIt2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2Mt
MzQ1OWJlMjY2NzMxLzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84MmE2NjEtNTU4Ny00MDgzLTgxM2MtMzQ1OWJlMjY2NzMx
LzEvakZTb1JtTXVnelFPRVUwTk5Wa2JQVUlZaTNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/YV8Mtr
RyOolPhJq8GukDjU70pHSCO0XJOO+YWcBRI/GGIIhWs3bEAP6r744S8+xe62kn+Q
M/wim9PxQUzsRV9KWf04RgpvOUHnmA+JNVeBQFqmEEiK41JpVbePCsiPOtGr6i3K
udWIPALGApaK3k0p84Ua+WcXD/YO8XwWMy+sJnbEYDMw8KQ6H4mIY6xF39ZhtiHS
VJUd2GQOvPM1GKGIqEhqbLjCBJBuQxKO/8Ae0jcZKKOS2unt0+09sOHfNl4ljPTn
GoPOWFo/ki4e5Ufmn9ujh6Qm76Zf6r8e3bOk8DgwDDCVf89HF154s3MG1Bt85lff
4weaKTOemBwmJA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 07:00:26 2026 by rpki-client