Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: SPpxQnoh9IgiVjID+djF3KEsvRsuxeTFS3rapljl5Xg=
Subject key identifier: 7F:55:A0:E5:B8:4F:4D:82:FC:6C:1A:4F:12:54:45:E2:45:83:05:AF
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019CE47E9DCED4BD634A9EF8CA72F217B168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1868
Signing time: Fri 13 Mar 2026 00:00:28 +0000
Manifest this update: Fri 13 Mar 2026 00:00:28 +0000
Manifest next update: Sat 14 Mar 2026 00:00:28 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: bbPb5YuMXu4RKFd2sGw3FJheRDrr3blVMVOVQxZxgbA=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:9d:ce:d4:bd:63:4a:9e:f8:ca:72:f2:17:b1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Mar 13 00:00:28 2026 GMT
Not After : Mar 14 00:00:28 2026 GMT
Subject: CN=7f55a0e5b84f4d82fc6c1a4f125445e2458305af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:fb:d7:be:8f:be:46:d2:b1:b3:93:6f:cd:
0d:3b:83:d0:f9:a2:9e:06:83:5d:e8:e1:1c:f1:67:
c8:43:70:97:93:5b:de:c7:71:2b:0b:ff:c1:86:01:
5b:7e:78:24:c5:3c:d0:84:9e:77:c2:c3:bb:4c:0a:
83:03:11:d1:ee:3d:0b:aa:be:47:27:92:87:20:ea:
a9:db:3a:0f:1f:9d:27:61:8d:67:2b:63:1a:48:6d:
d4:81:3c:5f:b1:56:ff:37:48:9c:97:d5:6b:6c:13:
cb:c9:8f:50:6d:75:f4:c0:4c:35:5c:d1:7a:32:cf:
24:ee:12:da:48:86:6b:03:1b:70:36:46:be:0a:b7:
72:9a:2a:ed:32:5f:cd:bf:e5:a1:68:c8:79:b4:a7:
79:2d:25:7a:a5:5c:1a:61:70:a4:b5:67:fb:b2:23:
2c:f4:9c:db:fb:b4:3a:30:41:06:11:4a:22:56:55:
9e:6d:f6:00:68:f2:3d:fe:ea:d9:43:d8:c2:3b:87:
51:6a:cb:0d:1f:db:8c:9c:f7:b2:4b:a5:c8:12:e5:
b6:1a:da:83:7c:0b:14:13:87:90:89:de:c0:8d:23:
e0:32:8b:98:bf:bf:9c:45:a1:90:d5:d3:0e:da:3c:
ed:64:7b:a6:90:8c:51:56:82:d8:10:4c:0b:02:19:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:55:A0:E5:B8:4F:4D:82:FC:6C:1A:4F:12:54:45:E2:45:83:05:AF
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:15:98:3c:35:6a:20:cc:4b:27:bd:b6:30:d0:f5:74:8a:e4:
8c:89:cb:8e:9a:22:02:67:6c:49:5f:cd:45:74:cd:ac:0e:2d:
a5:c2:61:1f:97:78:0a:2a:a5:44:73:9f:8c:52:5c:e9:47:09:
59:4e:00:4f:0d:bc:41:13:6b:1b:f4:c4:8c:3f:8c:c2:3d:74:
c3:61:ce:a9:20:c0:f9:94:9c:7f:05:69:4b:8f:da:b0:a7:73:
cb:96:0b:43:b0:64:b2:1f:b3:e4:19:36:9e:be:65:48:c5:d1:
53:ea:87:bb:85:ca:ce:71:21:b4:08:7e:26:a8:3b:af:65:7f:
44:d7:7c:e7:2a:bd:bf:33:35:2d:0f:c6:46:f4:61:6b:5c:7a:
19:a2:83:25:2e:39:01:3f:da:23:6d:54:0f:8e:f4:40:a6:dd:
85:26:a8:62:48:14:53:cc:ae:42:55:e0:9a:5f:09:10:ba:a8:
fe:08:a1:4b:76:33:63:15:8f:ad:97:60:a2:ce:c8:10:e2:19:
d4:20:fd:04:bb:a3:b2:f4:c8:97:15:9f:d0:52:85:14:f2:33:
6e:cb:bc:3c:f2:75:7d:3e:a8:97:f0:3d:01:85:62:db:62:70:
57:30:54:ba:ad:d0:61:5e:86:77:74:16:18:51:08:79:1f:94:
38:55:f7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkfp3O1L1jSp74ynLyF7FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwMzEzMDAwMDI4WhcNMjYwMzE0MDAwMDI4WjAzMTEwLwYDVQQD
Eyg3ZjU1YTBlNWI4NGY0ZDgyZmM2YzFhNGYxMjU0NDVlMjQ1ODMwNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGH7176PvkbSsbOTb80NO4PQ+aKe
BoNd6OEc8WfIQ3CXk1vex3ErC//BhgFbfngkxTzQhJ53wsO7TAqDAxHR7j0Lqr5H
J5KHIOqp2zoPH50nYY1nK2MaSG3UgTxfsVb/N0icl9VrbBPLyY9QbXX0wEw1XNF6
Ms8k7hLaSIZrAxtwNka+CrdymirtMl/Nv+WhaMh5tKd5LSV6pVwaYXCktWf7siMs
9Jzb+7Q6MEEGEUoiVlWebfYAaPI9/urZQ9jCO4dRassNH9uMnPeyS6XIEuW2GtqD
fAsUE4eQid7AjSPgMouYv7+cRaGQ1dMO2jztZHumkIxRVoLYEEwLAhlXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9VoOW4T02C/GwaTxJUReJFgwWvMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxWYPDVq
IMxLJ722MND1dIrkjInLjpoiAmdsSV/NRXTNrA4tpcJhH5d4CiqlRHOfjFJc6UcJ
WU4ATw28QRNrG/TEjD+Mwj10w2HOqSDA+ZScfwVpS4/asKdzy5YLQ7Bksh+z5Bk2
nr5lSMXRU+qHu4XKznEhtAh+Jqg7r2V/RNd85yq9vzM1LQ/GRvRha1x6GaKDJS45
AT/aI21UD470QKbdhSaoYkgUU8yuQlXgml8JELqo/gihS3YzYxWPrZdgos7IEOIZ
1CD9BLujsvTIlxWf0FKFFPIzbsu8PPJ1fT6ol/A9AYVi22JwVzBUuq3QYV6Gd3QW
GFEIeR+UOFX3XQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:44 2026 by rpki-client