Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: q8hoEN7ugUS2XIW+AgGfxAg0WaYB/Pq0HQCGKDc5NIE=
Subject key identifier: 10:A4:D3:58:B0:9B:BC:AD:44:8F:E9:5F:8F:A2:3E:92:06:F2:A5:93
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 019DCFABF095B4F5DE17051D68BEDC4B9DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 1042
Signing time: Mon 27 Apr 2026 16:00:45 +0000
Manifest this update: Mon 27 Apr 2026 16:00:45 +0000
Manifest next update: Tue 28 Apr 2026 16:00:45 +0000
Files and hashes: 1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: V7ZSTryxo5ka/jmCxB/UA+Ma9eFPWtZdKy24qLG6mWE=)
3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ab:f0:95:b4:f5:de:17:05:1d:68:be:dc:4b:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Apr 27 16:00:45 2026 GMT
Not After : Apr 28 16:00:45 2026 GMT
Subject: CN=10a4d358b09bbcad448fe95f8fa23e9206f2a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:0b:81:a9:40:20:15:a5:f5:7f:b4:f9:90:
52:68:0a:0c:70:f2:b9:25:32:f7:11:55:36:26:99:
5e:1d:18:1b:53:0e:3c:19:e1:31:df:bf:08:f4:7d:
39:4d:99:3b:b1:cd:51:be:25:d4:90:28:8c:73:03:
00:5f:07:54:f8:50:40:d6:7a:e3:54:97:ef:af:b7:
39:b4:d6:00:f2:8a:27:91:f8:a8:f4:6c:7f:73:cd:
a4:4b:1e:27:b5:17:c5:00:28:07:36:54:ae:96:04:
63:2d:1a:97:21:78:77:53:18:06:64:1f:0e:e5:5d:
b6:41:88:75:b1:fb:7b:ff:1b:06:e6:32:79:27:51:
b5:ea:cf:5e:8e:a1:fd:0c:3c:d8:4f:fb:70:bc:b9:
cd:ab:70:a8:e9:4d:52:76:a4:a2:30:ba:b3:c6:8c:
5a:90:15:83:3e:95:ae:3d:c5:17:dd:c2:dd:25:a1:
df:62:31:a8:32:9c:64:b7:44:b4:09:97:b2:0a:35:
a4:c8:05:a0:83:63:ff:fe:e2:33:e0:1f:21:c3:92:
3c:a5:75:0e:80:51:8c:ee:dc:82:97:91:48:c3:a8:
b7:dc:a1:64:b3:c8:8e:76:01:eb:f2:11:54:ea:6b:
6d:44:f4:d3:89:f4:bc:33:42:7e:23:85:b5:80:8a:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:D3:58:B0:9B:BC:AD:44:8F:E9:5F:8F:A2:3E:92:06:F2:A5:93
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:a9:48:45:d3:32:c9:72:0e:5c:36:5f:aa:e7:b2:e1:79:
e2:90:a6:14:8b:ee:82:a8:93:1b:4e:50:54:39:8b:00:6a:21:
67:4e:bf:15:4e:4b:1d:63:27:11:d6:7f:b8:10:fb:b5:78:cf:
18:9d:96:ee:c5:51:c5:14:a7:b5:84:09:97:e4:1c:59:6c:3a:
a4:29:ff:09:5c:cc:9b:7c:b7:25:dd:20:1a:46:df:5c:c6:8f:
f3:f5:96:08:fd:5f:89:dc:7d:ff:04:41:aa:68:4d:09:8e:41:
b2:6c:b0:39:8d:98:6c:f5:ed:ae:84:a2:0e:65:e2:95:fb:66:
2b:ed:cf:99:f3:ea:b9:8e:2a:eb:ec:03:f6:18:37:4f:60:a2:
98:41:13:62:f5:12:b2:a0:fa:3f:76:13:f1:fb:27:e3:96:9a:
d6:74:b8:e5:9d:61:00:d9:ef:80:b0:99:ab:24:4a:31:ae:4c:
a8:21:7d:5e:4a:79:1a:a2:33:0a:52:f8:0f:b3:5e:3e:22:df:
bb:fe:2a:25:1d:b3:2f:57:94:29:97:e6:9d:0c:e0:5e:b6:ed:
d9:0e:91:af:ee:50:f5:80:04:f8:27:94:b8:3f:6a:3f:70:47:
69:a4:6e:54:5b:17:9f:70:26:3b:f8:95:63:54:2c:d9:45:0d:
33:7c:6e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Pq/CVtPXeFwUdaL7cS52sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk
OWQ0ZTEwHhcNMjYwNDI3MTYwMDQ1WhcNMjYwNDI4MTYwMDQ1WjAzMTEwLwYDVQQD
EygxMGE0ZDM1OGIwOWJiY2FkNDQ4ZmU5NWY4ZmEyM2U5MjA2ZjJhNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUALgalAIBWl9X+0+ZBSaAoMcPK5
JTL3EVU2JpleHRgbUw48GeEx378I9H05TZk7sc1RviXUkCiMcwMAXwdU+FBA1nrj
VJfvr7c5tNYA8oonkfio9Gx/c82kSx4ntRfFACgHNlSulgRjLRqXIXh3UxgGZB8O
5V22QYh1sft7/xsG5jJ5J1G16s9ejqH9DDzYT/twvLnNq3Co6U1SdqSiMLqzxoxa
kBWDPpWuPcUX3cLdJaHfYjGoMpxkt0S0CZeyCjWkyAWgg2P//uIz4B8hw5I8pXUO
gFGM7tyCl5FIw6i33KFks8iOdgHr8hFU6mttRPTTifS8M0J+I4W1gIonjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCk01iwm7ytRI/pX4+iPpIG8qWTMB8GA1UdIwQY
MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt
ZThjNTU5YzcxZDY2LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2
LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5epSEXT
MslyDlw2X6rnsuF54pCmFIvugqiTG05QVDmLAGohZ06/FU5LHWMnEdZ/uBD7tXjP
GJ2W7sVRxRSntYQJl+QcWWw6pCn/CVzMm3y3Jd0gGkbfXMaP8/WWCP1fidx9/wRB
qmhNCY5BsmywOY2YbPXtroSiDmXilftmK+3PmfPquY4q6+wD9hg3T2CimEETYvUS
sqD6P3YT8fsn45aa1nS45Z1hANnvgLCZqyRKMa5MqCF9Xkp5GqIzClL4D7NePiLf
u/4qJR2zL1eUKZfmnQzgXrbt2Q6Rr+5Q9YAE+CeUuD9qP3BHaaRuVFsXn3AmO/iV
Y1Qs2UUNM3xuZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:05:28 2026 by rpki-client