Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: 7BCsXSLFYBljWlEyB0I5r5rKpjfa0nJKuACunc5d0ck=
Subject key identifier: 5E:3D:F0:E9:A2:7E:FF:3D:C5:1F:C3:E4:BB:BA:20:2E:2E:3A:E8:6A
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019DCED07DA4BB6E4F1273183FA2487A2D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0906
Signing time: Mon 27 Apr 2026 12:01:03 +0000
Manifest this update: Mon 27 Apr 2026 12:01:03 +0000
Manifest next update: Tue 28 Apr 2026 12:01:03 +0000
Files and hashes: 1: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
2: PKNrfh3XImYcJKqE7W0yYI6OiUY.roa (hash: sziy6P9qjmgMh/Wjufdq7yg5DrB3okhv2h8JK1TFDTU=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: 9kOvZVLDwMh6s4Q1btuRq8KQeVouMwAneMp1zkELTyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:7d:a4:bb:6e:4f:12:73:18:3f:a2:48:7a:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Apr 27 12:01:03 2026 GMT
Not After : Apr 28 12:01:03 2026 GMT
Subject: CN=5e3df0e9a27eff3dc51fc3e4bbba202e2e3ae86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:41:ba:2f:ff:1f:60:71:4c:2b:ea:ba:b7:
6e:33:7b:d8:00:d0:52:4d:33:1b:e5:e0:d7:05:2a:
0c:60:06:ac:2d:12:41:f8:27:8d:fd:22:25:d7:77:
60:2c:f8:7f:05:30:9f:51:d7:b1:dd:2f:81:26:78:
f4:cf:dd:9f:ef:f8:cd:01:70:c0:ca:c5:a0:c9:51:
81:29:c9:8f:dc:d0:0d:c1:83:f1:52:64:a4:b7:ca:
cf:03:8b:f2:5b:08:d7:5b:8d:68:e1:94:f4:3f:f9:
48:2a:2f:38:6b:8a:04:ae:ca:1d:fd:58:00:6d:d3:
1e:f5:52:e3:0e:e0:17:2a:d5:0c:c2:d9:0e:77:d9:
1b:1d:9a:e5:01:f8:23:97:9f:3a:61:69:e0:9d:be:
97:24:3d:f5:2d:d7:94:d7:32:d1:02:24:19:01:31:
fc:db:b7:a5:81:15:2b:a5:af:f0:27:fb:5a:ec:02:
d8:99:99:70:90:29:de:c6:48:7d:fb:c9:27:5e:9f:
60:e5:06:62:44:03:9b:eb:c7:66:ff:cb:15:e7:ce:
ff:d0:2b:8b:51:37:cc:72:13:78:de:39:6a:dd:9f:
42:a0:7b:37:33:6a:15:83:69:43:58:c5:28:0c:d8:
0e:8f:65:12:48:82:a1:c5:a7:09:15:4f:bb:a2:4c:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:F0:E9:A2:7E:FF:3D:C5:1F:C3:E4:BB:BA:20:2E:2E:3A:E8:6A
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:68:7d:09:cc:2f:87:0d:f7:2c:51:54:0f:b0:22:80:71:
62:41:88:03:a8:ce:f8:48:ee:20:7f:c8:f2:fb:92:b7:f2:39:
c4:54:90:64:15:d5:47:43:ef:ae:8d:9d:73:de:7c:74:33:9e:
58:a3:bb:c9:9a:eb:6b:e4:5e:e9:73:ad:48:1e:d1:e6:1b:d9:
f6:f4:1d:66:54:aa:c1:5a:52:f5:f7:f1:2f:80:d7:2f:55:6b:
d9:c5:63:3a:d2:c1:a3:23:80:46:c4:39:5d:1d:c2:69:f8:b9:
fe:96:2c:1f:bd:8e:5d:a8:28:69:20:1b:7f:d7:24:f3:49:1b:
f0:75:0a:3e:7d:b1:c3:2d:2e:ea:97:a1:d4:f1:6c:eb:c2:f6:
e1:70:ab:a6:ee:59:fe:4e:d3:d2:7c:2b:f5:32:6f:29:6f:17:
a0:35:4a:50:90:f9:d0:1f:e1:29:94:32:28:e5:25:c6:d9:8c:
aa:1e:7f:24:63:8b:ed:01:78:13:33:d9:12:b4:36:ce:71:b2:
31:38:64:58:df:41:52:83:c4:99:97:d8:c1:65:be:c1:c4:88:
b7:0e:4a:a3:ad:36:6f:53:ca:26:a7:24:bb:1f:d3:cc:c3:66:
32:c8:65:ee:0a:4b:24:45:c4:82:7d:41:cb:22:e0:c9:84:2b:
59:f6:cc:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0H2ku25PEnMYP6JIei0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OThjOTdiMTRjMzc0YTUyODMzZGI2YTQwMDdiNTRiNDY2
MmM1YTkwHhcNMjYwNDI3MTIwMTAzWhcNMjYwNDI4MTIwMTAzWjAzMTEwLwYDVQQD
Eyg1ZTNkZjBlOWEyN2VmZjNkYzUxZmMzZTRiYmJhMjAyZTJlM2FlODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx71Bui//H2BxTCvqurduM3vYANBS
TTMb5eDXBSoMYAasLRJB+CeN/SIl13dgLPh/BTCfUdex3S+BJnj0z92f7/jNAXDA
ysWgyVGBKcmP3NANwYPxUmSkt8rPA4vyWwjXW41o4ZT0P/lIKi84a4oErsod/VgA
bdMe9VLjDuAXKtUMwtkOd9kbHZrlAfgjl586YWngnb6XJD31LdeU1zLRAiQZATH8
27elgRUrpa/wJ/ta7ALYmZlwkCnexkh9+8knXp9g5QZiRAOb68dm/8sV587/0CuL
UTfMchN43jlq3Z9CoHs3M2oVg2lDWMUoDNgOj2USSIKhxacJFU+7okwyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF498Omifv89xR/D5Lu6IC4uOuhqMB8GA1UdIwQY
MBaAFLSYyXsUw3SlKDPbakAHtUtGYsWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzct
ODY1NDI2NjQ1N2M2LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xNDcwZjUtYzMxNi00ZmZmLTljMzctODY1NDI2NjQ1N2M2
LzEvdEpqSmV4VERkS1VvTTl0cVFBZTFTMFppeGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwVofQnM
L4cN9yxRVA+wIoBxYkGIA6jO+EjuIH/I8vuSt/I5xFSQZBXVR0Pvro2dc958dDOe
WKO7yZrra+Re6XOtSB7R5hvZ9vQdZlSqwVpS9ffxL4DXL1Vr2cVjOtLBoyOARsQ5
XR3Cafi5/pYsH72OXagoaSAbf9ck80kb8HUKPn2xwy0u6peh1PFs68L24XCrpu5Z
/k7T0nwr9TJvKW8XoDVKUJD50B/hKZQyKOUlxtmMqh5/JGOL7QF4EzPZErQ2znGy
MThkWN9BUoPEmZfYwWW+wcSItw5Ko602b1PKJqckux/TzMNmMshl7gpLJEXEgn1B
yyLgyYQrWfbMkA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:24 2026 by rpki-client