Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: ZzBiQxohvwtqaQAmIIffdM/GVh0cjIOYA+3pJvHP9UE=
Subject key identifier: 7E:CB:B2:44:A7:B9:1E:B9:C6:64:12:C4:C0:92:C3:DF:0B:97:1F:4F
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019D3941725FF8E49E1AB758640AE87AA279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 17E2
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: 8yYMhh0gMT6CiQOLVp2cTc5vVZ0.roa (hash: 7gaVBUF1/eBBpHyrZMX3iYaRP7VQvzONGdsKY6mhoPg=)
2: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: aDK9M8QlL6qK2Ora7krcVIh05EUGx9AaLkvVtVD0LCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:72:5f:f8:e4:9e:1a:b7:58:64:0a:e8:7a:a2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=7ecbb244a7b91eb9c66412c4c092c3df0b971f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:9b:85:b9:44:0d:81:15:0a:e2:29:cb:57:
15:ab:f4:05:dc:42:30:72:ba:9c:a7:7f:ba:38:da:
94:0e:b6:46:4d:20:be:8d:79:a1:5e:b8:5c:33:a9:
41:a7:3d:42:ab:c8:98:1e:0a:a8:64:91:ac:b5:43:
ae:f5:c8:2c:17:a1:9d:a8:fe:4a:2e:0c:bf:ba:d7:
2e:8c:09:9b:5b:04:cf:55:a9:1d:17:6d:b7:6c:b4:
ab:e7:4a:dd:9c:3e:70:d0:af:ae:a3:54:76:4a:02:
05:be:bb:69:72:a4:1f:88:03:94:c3:fe:77:dd:d0:
22:63:df:55:5a:1a:bd:95:20:5e:aa:97:2c:4a:ad:
f6:c0:fc:82:4f:eb:0f:10:59:8c:2a:bf:5d:3e:52:
50:1d:04:c5:2a:8f:67:9b:e4:f6:8c:be:3b:65:97:
72:2c:1b:8e:bc:9f:ba:fc:29:38:dc:eb:89:b6:7d:
11:43:dc:2d:94:ff:0c:f8:62:85:58:4f:9d:af:58:
f2:3e:5c:b5:ec:e9:e1:2b:9b:db:78:e5:52:9e:0f:
30:4a:19:39:4d:88:0b:2f:8a:c1:96:4e:2b:2f:16:
7f:8e:be:a1:9f:20:c0:2d:bc:1a:f0:fa:2e:c9:75:
ca:db:30:4c:f5:61:ab:ca:90:8f:71:b2:63:b9:f4:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:B2:44:A7:B9:1E:B9:C6:64:12:C4:C0:92:C3:DF:0B:97:1F:4F
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:11:72:22:14:32:51:d8:b9:da:ef:53:d5:ef:d4:d1:79:
4e:88:2a:02:89:04:1a:0f:0e:38:9a:fb:a9:45:21:0a:e1:33:
c5:6a:27:64:84:35:c1:fe:b1:36:08:ee:a9:5e:dd:85:c3:cb:
10:5e:de:30:17:64:de:e9:c8:07:8e:e2:64:28:84:a2:30:5e:
96:d1:e7:e6:ae:86:62:85:5a:b7:53:42:60:de:91:53:5f:66:
d3:19:8e:27:55:4b:86:11:5c:3f:f1:37:94:37:e6:de:80:d2:
74:72:cd:7a:46:9b:cb:d4:49:d5:e6:ef:e4:1b:1f:be:48:dd:
3f:3d:47:c6:d3:6c:7c:23:f9:f0:26:2d:38:d3:d7:26:49:9f:
f2:76:18:94:c3:ab:da:ed:b5:33:b0:1a:fe:f8:b9:df:f4:bb:
7b:3f:04:4a:04:79:8a:d6:90:75:69:2d:6d:a4:39:79:db:41:
6f:a6:56:b5:79:a8:c5:bd:50:0e:e9:d3:e0:44:d0:33:f4:16:
22:7f:5b:80:56:db:93:ad:56:5a:b7:0b:f7:8e:4c:46:df:62:
84:4e:e0:19:79:da:7a:7c:b1:d9:aa:d6:fd:17:0c:4d:51:fe:
fd:69:09:fc:dc:c8:cc:99:83:6e:73:ca:e9:2b:e1:e2:4c:79:
99:67:0e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXJf+OSeGrdYZAroeqJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjYwMzI5MTEwMTIzWhcNMjYwMzMwMTEwMTIzWjAzMTEwLwYDVQQD
Eyg3ZWNiYjI0NGE3YjkxZWI5YzY2NDEyYzRjMDkyYzNkZjBiOTcxZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMObhblEDYEVCuIpy1cVq/QF3EIw
crqcp3+6ONqUDrZGTSC+jXmhXrhcM6lBpz1Cq8iYHgqoZJGstUOu9cgsF6GdqP5K
Lgy/utcujAmbWwTPVakdF223bLSr50rdnD5w0K+uo1R2SgIFvrtpcqQfiAOUw/53
3dAiY99VWhq9lSBeqpcsSq32wPyCT+sPEFmMKr9dPlJQHQTFKo9nm+T2jL47ZZdy
LBuOvJ+6/Ck43OuJtn0RQ9wtlP8M+GKFWE+dr1jyPly17OnhK5vbeOVSng8wShk5
TYgLL4rBlk4rLxZ/jr6hnyDALbwa8PouyXXK2zBM9WGrypCPcbJjufSncwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7LskSnuR65xmQSxMCSw98Llx9PMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+URciIU
MlHYudrvU9Xv1NF5TogqAokEGg8OOJr7qUUhCuEzxWonZIQ1wf6xNgjuqV7dhcPL
EF7eMBdk3unIB47iZCiEojBeltHn5q6GYoVat1NCYN6RU19m0xmOJ1VLhhFcP/E3
lDfm3oDSdHLNekaby9RJ1ebv5BsfvkjdPz1HxtNsfCP58CYtONPXJkmf8nYYlMOr
2u21M7Aa/vi53/S7ez8ESgR5itaQdWktbaQ5edtBb6ZWtXmoxb1QDunT4ETQM/QW
In9bgFbbk61WWrcL945MRt9ihE7gGXnaenyx2arW/RcMTVH+/WkJ/NzIzJmDbnPK
6Svh4kx5mWcOpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:50:04 2026 by rpki-client