Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: 4SoySIg8fE7oQUX8Rwk0n4sjD2PUV3sfGWH/kJAiqJU=
Subject key identifier: CD:7D:0E:BE:E8:75:FF:64:BE:B4:31:1B:FB:0D:B7:69:63:46:59:D5
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019EA9AE83AEFFEFBAC9287C7A9FDD87D7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1950
Signing time: Tue 09 Jun 2026 00:00:46 +0000
Manifest this update: Tue 09 Jun 2026 00:00:46 +0000
Manifest next update: Wed 10 Jun 2026 00:00:46 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: u/EE9tqrr6ckG3yyw8+dj6vA7csUoaAH7Q/tNJAGJtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 00:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:ae:83:ae:ff:ef:ba:c9:28:7c:7a:9f:dd:87:d7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Jun 9 00:00:46 2026 GMT
Not After : Jun 10 00:00:46 2026 GMT
Subject: CN=cd7d0ebee875ff64beb4311bfb0db769634659d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:18:c4:fe:b1:87:de:45:b9:75:73:03:da:
a3:26:c4:b4:3f:62:00:e4:87:b5:b8:b2:41:9b:7a:
05:c3:50:a1:8c:11:54:80:a1:28:20:e4:22:0f:d3:
76:fa:3f:40:58:50:8c:db:c0:b7:7a:3a:20:dc:8b:
eb:3a:03:59:e8:ff:ec:27:33:7d:7f:93:05:94:e1:
9a:1c:eb:36:d2:4c:51:df:ec:a4:11:2c:91:94:06:
7f:5e:b0:1e:4f:97:9e:5e:e6:27:bb:5c:80:62:d4:
49:fe:c9:5e:8c:56:1f:df:c9:07:6b:59:7d:45:f9:
53:b4:62:fc:61:44:ca:31:cb:e0:dd:af:22:22:a7:
e0:14:ea:b2:f1:a1:fa:c3:f5:0c:7d:05:69:a1:c4:
53:6b:f7:b5:8c:79:35:88:79:29:d3:74:bb:13:fc:
ee:ab:23:1d:5c:3d:93:e9:9e:c9:da:ca:dc:05:0f:
e7:87:5e:6c:70:49:29:7d:b3:86:84:ca:f3:ab:aa:
e6:9e:65:f6:e7:f6:c7:df:74:78:09:f6:6a:c2:f5:
9f:be:ea:00:ca:38:c1:df:bf:a9:39:41:b1:76:e4:
2e:39:d0:a2:f0:fe:f1:d2:86:1f:d5:a2:67:33:f9:
41:8c:fe:ce:41:8d:37:ba:a6:e6:5c:cf:29:20:20:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:0E:BE:E8:75:FF:64:BE:B4:31:1B:FB:0D:B7:69:63:46:59:D5
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4d:40:09:86:09:f5:77:3c:bf:d9:90:9a:ef:6d:43:df:19:
3d:82:26:91:1f:61:fa:77:ed:7d:cf:d8:52:2c:af:9b:43:f2:
1c:82:b2:ed:04:d6:1e:3e:48:aa:3d:a6:83:de:a7:00:29:da:
48:5b:fb:35:57:f9:07:81:d2:f1:7f:56:88:82:f8:e7:f6:a8:
1e:da:8a:15:29:8a:35:54:f8:a2:dc:62:85:cb:7d:16:88:e6:
32:3b:5e:d0:b0:b0:94:ea:7f:f9:0b:fb:19:98:e4:09:47:d2:
da:96:65:d6:61:8c:87:82:25:ae:90:19:ba:22:df:f8:ba:86:
80:80:6b:d5:ad:0b:11:c1:9b:af:7e:7e:4f:df:08:26:0e:a5:
65:2d:8d:39:87:cd:6d:a9:fd:6f:d9:37:e6:28:ae:98:03:3d:
63:94:3a:9c:21:3b:9a:11:70:dc:b8:a1:c9:0c:dc:9d:69:ba:
d5:bb:1f:f1:df:62:08:c2:55:17:f8:79:36:6a:42:1b:c8:68:
44:8f:ba:1c:cf:6b:81:a5:42:af:1c:3b:b5:5f:3d:d9:2d:a3:
55:a6:8c:c7:72:36:71:af:1f:19:36:72:17:cd:2b:75:45:58:
39:a5:81:aa:6d:0c:b7:54:6c:f2:34:ac:7a:1e:d3:3a:7e:c8:
fe:2d:ba:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6proOu/++6ySh8ep/dh9e3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjhiNzFmMWU3Y2E2OTUzMWRkNWRmMjU1OTUxMzU5OGRi
MWM3ZjMwHhcNMjYwNjA5MDAwMDQ2WhcNMjYwNjEwMDAwMDQ2WjAzMTEwLwYDVQQD
EyhjZDdkMGViZWU4NzVmZjY0YmViNDMxMWJmYjBkYjc2OTYzNDY1OWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqAYxP6xh95FuXVzA9qjJsS0P2IA
5Ie1uLJBm3oFw1ChjBFUgKEoIOQiD9N2+j9AWFCM28C3ejog3IvrOgNZ6P/sJzN9
f5MFlOGaHOs20kxR3+ykESyRlAZ/XrAeT5eeXuYnu1yAYtRJ/slejFYf38kHa1l9
RflTtGL8YUTKMcvg3a8iIqfgFOqy8aH6w/UMfQVpocRTa/e1jHk1iHkp03S7E/zu
qyMdXD2T6Z7J2srcBQ/nh15scEkpfbOGhMrzq6rmnmX25/bH33R4CfZqwvWfvuoA
yjjB37+pOUGxduQuOdCi8P7x0oYf1aJnM/lBjP7OQY03uqbmXM8pICBzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM19Dr7odf9kvrQxG/sNt2ljRlnVMB8GA1UdIwQY
MBaAFCUotx8efKaVMd1d8lWVE1mNscfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTkt
ZWQzMmM1NjEyODQwLzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zMGQ2OWUtZjBlNy00NmYzLTk3NTktZWQzMmM1NjEyODQw
LzEvSlNpM0h4NThwcFV4M1YzeVZaVVRXWTJ4eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE1ACYYJ
9Xc8v9mQmu9tQ98ZPYImkR9h+nftfc/YUiyvm0PyHIKy7QTWHj5Iqj2mg96nACna
SFv7NVf5B4HS8X9WiIL45/aoHtqKFSmKNVT4otxihct9FojmMjte0LCwlOp/+Qv7
GZjkCUfS2pZl1mGMh4IlrpAZuiLf+LqGgIBr1a0LEcGbr35+T98IJg6lZS2NOYfN
ban9b9k35iiumAM9Y5Q6nCE7mhFw3LihyQzcnWm61bsf8d9iCMJVF/h5NmpCG8ho
RI+6HM9rgaVCrxw7tV892S2jVaaMx3I2ca8fGTZyF80rdUVYOaWBqm0Mt1Rs8jSs
eh7TOn7I/i26Tw==
-----END CERTIFICATE-----
Generated at Tue Jun 9 09:49:57 2026 by rpki-client