Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: mNIzRL1Ips4Pj8uZhq5VHbNw9naTOOMRkAjn3mV9Woo=
Subject key identifier: 77:10:3B:DA:86:36:41:74:BE:BE:83:D3:B5:38:A3:43:5B:13:04:0C
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019DB0FD17628DC04B9C755FC5EF7E5CF870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 172E
Signing time: Tue 21 Apr 2026 17:01:09 +0000
Manifest this update: Tue 21 Apr 2026 17:01:09 +0000
Manifest next update: Wed 22 Apr 2026 17:01:09 +0000
Files and hashes: 1: 8pRpGLC7ufdVgfYDDUF6Zet2ESs.roa (hash: N6b81cttyVRNjS1aPTuek9kLwNALHCKPqaI95N5VpXM=)
2: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: HkKbzK4kPEXLVi+K30f2j7SosyG4gX13ML0Gn/XAk84=)
3: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (hash: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fd:17:62:8d:c0:4b:9c:75:5f:c5:ef:7e:5c:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Apr 21 17:01:09 2026 GMT
Not After : Apr 22 17:01:09 2026 GMT
Subject: CN=77103bda86364174bebe83d3b538a3435b13040c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:fc:aa:12:72:85:74:42:28:06:a8:63:06:
cf:47:9e:62:74:a5:c8:3a:b0:e6:17:65:20:68:a2:
9a:39:f1:23:01:f8:97:bb:03:ba:92:b2:48:c8:05:
b1:c2:a6:de:3c:3a:5e:28:5f:3d:a7:49:18:e5:f6:
d9:c8:9e:44:10:27:72:62:bc:82:0f:bb:83:cb:6c:
5c:30:23:25:07:77:2f:f7:ab:9a:c3:c3:fe:f1:50:
4d:96:f5:a6:3d:35:95:58:4d:a9:25:73:ea:d7:44:
53:e1:59:dd:6f:64:dc:47:53:63:ce:70:65:33:28:
62:8d:6f:69:14:71:41:c2:59:f5:6e:94:11:8b:fc:
45:48:27:4c:8c:a7:17:d2:4e:5b:09:96:0b:61:2f:
00:c3:38:75:45:4c:6b:c4:6b:48:ce:ef:66:f4:91:
dd:a6:76:82:f3:db:de:2d:74:a6:c3:19:b9:df:f2:
87:f6:9a:12:a7:0c:0f:72:88:a0:fb:d2:8b:d8:67:
4b:46:ff:37:0e:08:5a:bf:dd:8f:3d:fe:c9:52:c7:
ab:74:24:d1:bf:23:13:f4:06:7e:7b:57:3c:4a:3d:
b7:13:cf:0c:b0:ab:80:9f:35:fc:3b:d3:26:1f:49:
8d:80:f9:b4:d2:5d:a3:a4:57:e1:81:07:18:26:6a:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:10:3B:DA:86:36:41:74:BE:BE:83:D3:B5:38:A3:43:5B:13:04:0C
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9b:9f:4d:dc:8d:77:a7:45:88:d5:f6:2e:a5:0f:1e:c9:a7:
5d:9b:a4:df:86:15:3d:1c:4c:91:6d:84:38:d0:2e:5a:98:65:
7d:7d:45:59:29:ff:dc:b5:f3:c2:d5:ff:cc:b2:37:84:af:c4:
37:2d:6b:09:41:13:39:5c:ba:31:a2:13:2e:00:c2:f1:74:a6:
66:61:7c:ae:fc:a7:51:af:44:5f:8a:ec:8e:43:ee:3d:69:7c:
fa:a1:15:84:1e:22:48:7d:12:91:cb:ae:c8:ae:08:18:12:73:
dd:d6:cc:ce:76:e7:f4:3e:88:1f:0b:2f:a5:2c:ec:b2:bd:ee:
59:1e:45:12:22:10:71:0d:2d:cb:87:e9:f3:02:7c:a6:c2:cc:
81:2f:53:93:75:f3:eb:24:79:d7:d5:e9:10:6b:0c:23:3e:35:
f4:60:16:ff:7d:33:ca:e3:1f:a1:7f:d6:0d:5f:73:69:51:95:
c2:34:cc:3c:ae:cd:2c:02:97:e5:d3:0b:81:dd:71:7f:2e:43:
5d:5c:c7:04:b2:ef:47:d4:fa:37:e5:04:8b:a6:7a:1a:b8:a0:
aa:8a:8f:6f:8a:13:05:ca:d0:20:59:64:3c:8e:f2:b4:a5:63:
4c:28:ec:aa:8c:dc:56:e1:ef:e1:3f:4d:0d:74:6f:c2:bf:6c:
6e:92:ec:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2w/RdijcBLnHVfxe9+XPhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4
YmRiZDYwHhcNMjYwNDIxMTcwMTA5WhcNMjYwNDIyMTcwMTA5WjAzMTEwLwYDVQQD
Eyg3NzEwM2JkYTg2MzY0MTc0YmViZTgzZDNiNTM4YTM0MzViMTMwNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2/8qhJyhXRCKAaoYwbPR55idKXI
OrDmF2UgaKKaOfEjAfiXuwO6krJIyAWxwqbePDpeKF89p0kY5fbZyJ5EECdyYryC
D7uDy2xcMCMlB3cv96uaw8P+8VBNlvWmPTWVWE2pJXPq10RT4Vndb2TcR1NjznBl
MyhijW9pFHFBwln1bpQRi/xFSCdMjKcX0k5bCZYLYS8Awzh1RUxrxGtIzu9m9JHd
pnaC89veLXSmwxm53/KH9poSpwwPcoig+9KL2GdLRv83Dghav92PPf7JUserdCTR
vyMT9AZ+e1c8Sj23E88MsKuAnzX8O9MmH0mNgPm00l2jpFfhgQcYJmpiFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcQO9qGNkF0vr6D07U4o0NbEwQMMB8GA1UdIwQY
MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt
OTc4MjM0YzNiYjcwLzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw
LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJufTdyN
d6dFiNX2LqUPHsmnXZuk34YVPRxMkW2EONAuWphlfX1FWSn/3LXzwtX/zLI3hK/E
Ny1rCUETOVy6MaITLgDC8XSmZmF8rvynUa9EX4rsjkPuPWl8+qEVhB4iSH0Skcuu
yK4IGBJz3dbMznbn9D6IHwsvpSzssr3uWR5FEiIQcQ0ty4fp8wJ8psLMgS9Tk3Xz
6yR519XpEGsMIz419GAW/30zyuMfoX/WDV9zaVGVwjTMPK7NLAKX5dMLgd1xfy5D
XVzHBLLvR9T6N+UEi6Z6GrigqoqPb4oTBcrQIFlkPI7ytKVjTCjsqozcVuHv4T9N
DXRvwr9sbpLsUw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:30 2026 by rpki-client