Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: odu15ffDFZTBE+i00g6zRw7LXbDue9df50ZJGxgGEuM=
Subject key identifier: 86:C0:BD:E5:70:E2:20:48:3C:20:13:E4:42:EA:24:3D:F4:61:3D:FD
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 019D390A0106CD2CE39BA3AE70EFAA817CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 0900
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: 2l98OJUUaR9ta-P_Yl3BL25xX6E.asa (hash: epA5OEpKpO6J6HOrXhbe4eK7JMJAieEm7djq/rBNlXc=)
2: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: lHGxb3HdV1BTYsxIj4PQY0STHLRzPE3wAPi6hiKWt3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:01:06:cd:2c:e3:9b:a3:ae:70:ef:aa:81:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=86c0bde570e220483c2013e442ea243df4613dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:15:da:bb:04:22:e4:40:3b:c2:07:10:2d:e3:
51:ae:b7:0a:46:9a:69:e9:03:80:49:c4:5b:c7:cd:
ba:e5:66:d3:53:0f:8c:b8:f5:48:b2:0c:17:15:c3:
25:88:17:6b:45:d1:9a:3d:50:57:f8:c1:6f:da:c3:
5a:10:66:3c:03:c0:3c:1e:22:5e:bb:bd:01:f9:93:
eb:e4:a3:2a:1a:fd:2a:d5:f9:cb:8b:f6:39:ef:b9:
fb:1b:fd:27:b4:06:a6:3a:9d:92:9e:34:62:f0:5f:
84:11:6d:ed:01:66:0a:47:a7:e2:75:9f:5d:85:b4:
11:06:7c:6d:c2:d3:f1:52:48:b0:66:ff:c5:f8:3a:
f9:be:ed:3c:64:8c:ce:4a:33:4d:77:7e:fd:09:27:
97:d8:65:a6:58:99:fc:9a:da:8e:18:28:58:26:e5:
a8:4b:29:9e:93:62:4f:2b:98:57:c4:7e:9a:59:2c:
ce:6c:53:ca:14:e2:65:b6:3f:5f:53:da:42:48:39:
0f:8e:de:ce:4e:cb:d1:28:a4:52:90:52:83:01:ca:
51:53:f2:51:ce:73:45:13:c8:27:73:42:7f:56:98:
d7:e1:6f:e4:f4:8a:c5:fb:22:42:98:55:43:a4:b5:
b4:1c:60:1d:0a:e0:25:01:5a:a8:fa:56:a8:27:49:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:BD:E5:70:E2:20:48:3C:20:13:E4:42:EA:24:3D:F4:61:3D:FD
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:90:f9:8b:0b:5b:41:3c:13:2a:db:66:04:a7:2a:ac:35:
4c:1a:3c:69:04:b0:03:8c:b2:98:81:9d:d8:73:ce:65:84:9a:
da:df:d8:ed:06:4e:ae:b7:2c:51:76:18:1b:1b:c5:65:0f:70:
3d:ac:cd:d8:fc:9e:a0:bf:e1:b4:c1:8d:d6:52:e1:39:e6:39:
55:d8:8f:d6:33:56:b0:2e:44:2b:bc:d1:96:f1:f9:c8:de:dd:
a4:78:2a:33:d3:71:49:46:58:39:89:fb:f4:80:7f:5f:00:60:
b4:93:08:f0:91:bf:f2:6b:bf:79:9f:ab:26:c9:44:b0:db:50:
d1:ea:ca:94:b1:c9:57:44:af:b8:13:84:c4:7b:4b:96:29:bf:
e7:0b:d0:75:be:14:68:d3:6b:19:b8:39:3e:02:1e:6a:d3:8d:
34:e0:48:1e:96:b2:19:05:7b:eb:38:d7:6a:7d:7b:0d:45:bd:
7a:2c:9b:94:c2:db:21:62:ab:d3:50:1c:e6:15:1f:1d:55:55:
df:48:60:62:9b:d7:89:c7:97:df:2c:69:27:b2:c3:7b:c0:11:
ab:52:e6:6f:cf:a8:ed:d4:d9:dc:7e:23:33:0a:19:3b:a6:1e:
09:8b:0c:2e:3a:8f:44:aa:f4:78:ff:93:8b:17:a7:bb:be:ff:
f6:16:bd:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgEGzSzjm6OucO+qgXzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz
MDFhMGUwHhcNMjYwMzI5MTAwMDQ5WhcNMjYwMzMwMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg4NmMwYmRlNTcwZTIyMDQ4M2MyMDEzZTQ0MmVhMjQzZGY0NjEzZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBXauwQi5EA7wgcQLeNRrrcKRppp
6QOAScRbx8265WbTUw+MuPVIsgwXFcMliBdrRdGaPVBX+MFv2sNaEGY8A8A8HiJe
u70B+ZPr5KMqGv0q1fnLi/Y577n7G/0ntAamOp2SnjRi8F+EEW3tAWYKR6fidZ9d
hbQRBnxtwtPxUkiwZv/F+Dr5vu08ZIzOSjNNd379CSeX2GWmWJn8mtqOGChYJuWo
Symek2JPK5hXxH6aWSzObFPKFOJltj9fU9pCSDkPjt7OTsvRKKRSkFKDAcpRU/JR
znNFE8gnc0J/VpjX4W/k9IrF+yJCmFVDpLW0HGAdCuAlAVqo+laoJ0my/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbAveVw4iBIPCAT5ELqJD30YT39MB8GA1UdIwQY
MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt
MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3
LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVCQ+YsL
W0E8EyrbZgSnKqw1TBo8aQSwA4yymIGd2HPOZYSa2t/Y7QZOrrcsUXYYGxvFZQ9w
PazN2PyeoL/htMGN1lLhOeY5VdiP1jNWsC5EK7zRlvH5yN7dpHgqM9NxSUZYOYn7
9IB/XwBgtJMI8JG/8mu/eZ+rJslEsNtQ0erKlLHJV0SvuBOExHtLlim/5wvQdb4U
aNNrGbg5PgIeatONNOBIHpayGQV76zjXan17DUW9eiyblMLbIWKr01Ac5hUfHVVV
30hgYpvXiceX3yxpJ7LDe8ARq1Lmb8+o7dTZ3H4jMwoZO6YeCYsMLjqPRKr0eP+T
ixenu77/9ha9Ug==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:22 2026 by rpki-client