Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: HD5apsVBEs5IFIaX4jBhzDF9yVGbwBvWmG606hCCEVs=
Subject key identifier: B3:11:97:CC:58:14:93:FA:F9:AD:BF:6D:24:02:5D:99:B3:E3:D8:1D
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 019DCDBDD51C2854F121FDBECCC9AAC09521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 13B7
Signing time: Mon 27 Apr 2026 07:01:03 +0000
Manifest this update: Mon 27 Apr 2026 07:01:03 +0000
Manifest next update: Tue 28 Apr 2026 07:01:03 +0000
Files and hashes: 1: 1-wqXuXVjU4DK7DThoDM4xKkLzpA.roa (hash: Ysd+kwqFCaatF0B+CxMd/0KKzo486Kn7yiW2Q4tdeXQ=)
2: 5e0tqH24BTM03yiq8eWs7gQhfjU.roa (hash: 2dooK4E+vB8Vi+8KxuvklQIHFbXhQITTT/Vg0tuOqZ0=)
3: BAVWZ2GqddVuzhP06KD0A_bCtt4.roa (hash: eKvOsbHOl1mbbSCZG1SoTdZdmz2aVvIhgRs7YLzoCNw=)
4: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: UO9jrcIk4PTmJDka1HMcwtOWlXxP5gpicsY3vu22UAQ=)
5: obhZjPoFU0GF5aoDtx8pszyeQNo.roa (hash: DtLP/BpnbtJiMnxxKHcSTdBX7T/DtG/NN3abv8oUzzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:d5:1c:28:54:f1:21:fd:be:cc:c9:aa:c0:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Apr 27 07:01:03 2026 GMT
Not After : Apr 28 07:01:03 2026 GMT
Subject: CN=b31197cc581493faf9adbf6d24025d99b3e3d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:d3:5f:c0:12:fc:30:0b:27:80:54:15:03:
d2:12:81:95:0f:02:12:65:ef:41:32:6f:93:91:c0:
df:6c:03:4e:c8:13:2c:a3:16:c8:a3:80:85:01:65:
98:e5:34:f0:d4:b6:cd:b3:42:ef:20:f7:a9:8c:d2:
eb:38:33:97:f2:9c:4a:73:f2:72:c2:ae:4a:65:05:
43:7e:81:a6:bf:9f:ad:07:82:29:f7:c8:73:61:50:
df:c4:50:4d:a1:b5:ab:88:8b:53:38:ee:a1:ad:74:
f2:c8:0d:a8:3d:8b:23:ed:58:33:9d:2e:fa:7b:6d:
ba:cb:10:4c:5b:2e:02:f5:c7:2a:bd:15:4b:00:b0:
57:e2:c6:51:7a:9a:bf:22:33:9a:03:22:0f:ff:4e:
50:43:af:15:b1:63:7a:2d:eb:7c:cf:66:59:a3:ff:
2a:85:a0:b9:c0:90:14:98:84:6a:3c:27:71:06:a9:
eb:bc:a5:1c:6d:b3:89:69:3e:e6:33:ac:f7:64:75:
e0:27:0b:90:6f:41:73:b9:80:ec:cd:54:2c:59:77:
66:d3:93:5a:70:07:f2:ed:00:7b:dd:c7:78:21:3e:
00:5c:6b:d4:c6:5f:1b:08:1a:aa:61:fb:50:d4:f0:
3a:5a:1b:73:47:8f:07:34:d9:17:93:de:fa:2b:a5:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:11:97:CC:58:14:93:FA:F9:AD:BF:6D:24:02:5D:99:B3:E3:D8:1D
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:2d:9d:92:f2:76:da:6e:3f:3e:ce:3a:6c:6e:b2:33:e5:87:
1b:93:3c:af:d0:d4:a6:31:0f:e8:c7:03:7f:82:05:47:48:f5:
2c:da:79:d8:3a:c9:2e:ea:dc:85:ad:d8:6d:fe:98:d0:14:06:
db:d4:75:3a:68:7f:18:f9:43:9f:88:e3:8d:31:09:df:55:13:
33:68:cd:93:39:77:75:8a:09:1c:85:41:17:7c:6a:0e:b6:7d:
c2:ca:ef:dc:24:a5:81:29:79:3f:ed:da:a7:1a:cc:23:e2:48:
92:f6:54:03:1d:94:c9:7d:4e:e7:f6:26:a0:15:5f:79:6e:65:
36:22:0c:ac:91:ab:64:96:84:75:c0:ed:62:e3:6d:5f:62:cf:
a7:c3:f7:52:13:c3:fc:7a:08:08:ac:9f:02:64:66:bb:67:78:
38:cc:32:8e:a2:69:cc:71:84:72:06:86:3d:9c:43:33:3f:e1:
59:4f:62:85:b5:76:c2:a3:ec:aa:42:bc:c3:ab:b8:0d:db:3d:
ca:b4:7d:3c:b1:cf:73:ac:54:49:e0:12:5d:48:a1:2c:c6:fb:
7a:1f:12:55:13:01:10:a2:c5:8f:59:ac:70:4a:d1:ff:12:38:
95:27:0f:e1:d9:f2:0a:5e:a2:7c:0c:fb:42:03:35:d5:87:9d:
bc:c7:4c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvdUcKFTxIf2+zMmqwJUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTA0Yzc0YzcxMjcwOTBhNGNmZjg1MDAxZjQ0MzE0OWUx
MjhlNjAwHhcNMjYwNDI3MDcwMTAzWhcNMjYwNDI4MDcwMTAzWjAzMTEwLwYDVQQD
EyhiMzExOTdjYzU4MTQ5M2ZhZjlhZGJmNmQyNDAyNWQ5OWIzZTNkODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvnTX8AS/DALJ4BUFQPSEoGVDwIS
Ze9BMm+TkcDfbANOyBMsoxbIo4CFAWWY5TTw1LbNs0LvIPepjNLrODOX8pxKc/Jy
wq5KZQVDfoGmv5+tB4Ip98hzYVDfxFBNobWriItTOO6hrXTyyA2oPYsj7VgznS76
e226yxBMWy4C9ccqvRVLALBX4sZRepq/IjOaAyIP/05QQ68VsWN6Let8z2ZZo/8q
haC5wJAUmIRqPCdxBqnrvKUcbbOJaT7mM6z3ZHXgJwuQb0FzuYDszVQsWXdm05Na
cAfy7QB73cd4IT4AXGvUxl8bCBqqYftQ1PA6WhtzR48HNNkXk976K6WT3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMRl8xYFJP6+a2/bSQCXZmz49gdMB8GA1UdIwQY
MBaAFCRQTHTHEnCQpM/4UAH0QxSeEo5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQt
ZDA2MjJjNGNkNDhkLzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zOTZlOGItNzFkMy00NmJmLWEyNDQtZDA2MjJjNGNkNDhk
LzEvSkZCTWRNY1NjSkNrel9oUUFmUkRGSjRTam1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvC2dkvJ2
2m4/Ps46bG6yM+WHG5M8r9DUpjEP6McDf4IFR0j1LNp52DrJLurcha3Ybf6Y0BQG
29R1Omh/GPlDn4jjjTEJ31UTM2jNkzl3dYoJHIVBF3xqDrZ9wsrv3CSlgSl5P+3a
pxrMI+JIkvZUAx2UyX1O5/YmoBVfeW5lNiIMrJGrZJaEdcDtYuNtX2LPp8P3UhPD
/HoICKyfAmRmu2d4OMwyjqJpzHGEcgaGPZxDMz/hWU9ihbV2wqPsqkK8w6u4Dds9
yrR9PLHPc6xUSeASXUihLMb7eh8SVRMBEKLFj1mscErR/xI4lScP4dnyCl6ifAz7
QgM11YedvMdMsA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:34:14 2026 by rpki-client