Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: O43zIekzBEdrXZ0s01Q9s+0gfDkuB2eUteyxBPRxWxM=
Subject key identifier: 64:9B:AB:BB:19:87:B2:CE:10:6F:28:C9:98:12:EE:F5:2E:DB:41:E7
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019D3940F50E884D24C36EB0216433B922AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0F86
Signing time: Sun 29 Mar 2026 11:00:51 +0000
Manifest this update: Sun 29 Mar 2026 11:00:51 +0000
Manifest next update: Mon 30 Mar 2026 11:00:51 +0000
Files and hashes: 1: E-g-v2Rn7ovW7XAIev5scQP8c8A.roa (hash: q74zdfQNlbmYnT3S1OTFeC3AloIjMONMGPowWsbDW2Y=)
2: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: zLg/1hG7ZfWCPQzcMHuJWT6HwWMW8DlEoMo/4CWTnwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f5:0e:88:4d:24:c3:6e:b0:21:64:33:b9:22:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Mar 29 11:00:51 2026 GMT
Not After : Mar 30 11:00:51 2026 GMT
Subject: CN=649babbb1987b2ce106f28c99812eef52edb41e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:f1:77:8a:90:51:5b:39:02:04:58:02:dd:
b6:8b:c3:f3:b5:90:02:7b:45:ae:04:ea:6c:ee:76:
cb:49:a5:d8:2c:f9:1a:f2:c9:48:4d:ea:07:12:1e:
70:84:e1:a1:83:7f:83:98:73:92:35:21:57:ba:49:
9c:ee:8e:79:bd:2e:8c:03:65:d0:2c:0a:5f:cf:6f:
19:15:f5:b5:30:58:75:e5:91:c5:62:62:16:35:7b:
ab:4c:2d:10:ba:83:6b:86:ff:30:95:e6:55:f6:da:
20:1f:95:19:9f:c9:2f:7c:60:e9:bf:0b:d5:ce:85:
2b:e2:c3:5f:0a:be:38:a9:12:fe:be:25:d8:07:b5:
fe:33:6c:10:75:51:2a:8d:55:09:27:24:07:83:26:
9c:03:eb:76:15:bc:fe:bc:47:de:b4:5a:67:8f:d5:
92:c5:20:6a:25:5c:0e:55:af:6e:76:e3:3b:c7:24:
0e:20:44:8e:66:0a:c7:e3:e0:67:88:c5:40:f9:99:
5d:60:95:99:e0:70:96:81:14:78:aa:70:82:55:da:
61:37:1d:42:27:eb:f5:5f:71:07:29:a1:5f:bc:c0:
ba:60:0a:9b:f2:d1:2d:ad:82:36:89:31:eb:5c:15:
f3:97:b0:78:96:51:56:90:c7:0f:c0:3d:26:e9:9b:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:AB:BB:19:87:B2:CE:10:6F:28:C9:98:12:EE:F5:2E:DB:41:E7
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:65:cc:cd:49:af:35:3a:af:5c:e7:91:a4:ef:f7:6f:61:
16:53:f2:8c:12:5f:d1:c9:95:fc:08:93:a4:09:86:bd:4e:97:
89:59:de:59:05:01:dc:0f:65:74:08:3e:c2:e5:5c:08:e7:af:
c2:00:0e:a4:9c:f1:77:1d:32:85:c2:6a:a7:e9:f5:82:48:8e:
68:5c:04:05:7d:bc:43:6d:87:fe:6b:8f:c5:58:79:ac:4a:96:
a6:b1:aa:8b:b7:a2:07:6c:12:b5:5d:ab:45:40:fc:25:71:03:
43:f5:1e:2c:19:d4:57:af:b6:d3:46:1e:e0:ed:33:25:18:68:
5e:57:51:dd:bc:69:24:4e:68:99:14:d3:3a:87:fb:b9:e6:01:
0d:53:3e:dc:da:45:b5:4c:7e:c3:c4:8f:06:7e:14:2a:c8:54:
b2:b3:67:fb:c8:71:dc:99:88:30:71:5c:af:8a:8a:32:e2:42:
73:16:10:9f:21:6e:ae:be:ea:22:5f:9a:2e:7e:04:04:46:32:
31:16:29:e0:fa:89:03:1a:f9:df:52:f6:f5:76:30:c4:03:17:
6f:60:6a:0b:ae:c3:4b:a9:1e:77:49:13:a0:32:72:c3:ba:4b:
c2:bf:e0:5a:df:dc:fe:70:4c:5d:fb:68:95:c0:b5:a1:41:2b:
9c:54:6a:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPUOiE0kw26wIWQzuSKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2NhNjJhMzU4ODFjYWU4ZDJjNTgxMmFjNThjYTA3MTA4
ZDcwYWUwHhcNMjYwMzI5MTEwMDUxWhcNMjYwMzMwMTEwMDUxWjAzMTEwLwYDVQQD
Eyg2NDliYWJiYjE5ODdiMmNlMTA2ZjI4Yzk5ODEyZWVmNTJlZGI0MWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDDxd4qQUVs5AgRYAt22i8PztZAC
e0WuBOps7nbLSaXYLPka8slITeoHEh5whOGhg3+DmHOSNSFXukmc7o55vS6MA2XQ
LApfz28ZFfW1MFh15ZHFYmIWNXurTC0QuoNrhv8wleZV9togH5UZn8kvfGDpvwvV
zoUr4sNfCr44qRL+viXYB7X+M2wQdVEqjVUJJyQHgyacA+t2Fbz+vEfetFpnj9WS
xSBqJVwOVa9uduM7xyQOIESOZgrH4+BniMVA+ZldYJWZ4HCWgRR4qnCCVdphNx1C
J+v1X3EHKaFfvMC6YAqb8tEtrYI2iTHrXBXzl7B4llFWkMcPwD0m6ZvEsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSbq7sZh7LOEG8oyZgS7vUu20HnMB8GA1UdIwQY
MBaAFCbMpio1iByujSxYEqxYygcQjXCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEt
YmI3YmI1YmYwMGIxLzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MzM3NWQtMGM5Yi00NTNlLTlmZjEtYmI3YmI1YmYwMGIx
LzEvSnN5bUtqV0lISzZOTEZnU3JGaktCeENOY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIb5lzM1J
rzU6r1znkaTv929hFlPyjBJf0cmV/AiTpAmGvU6XiVneWQUB3A9ldAg+wuVcCOev
wgAOpJzxdx0yhcJqp+n1gkiOaFwEBX28Q22H/muPxVh5rEqWprGqi7eiB2wStV2r
RUD8JXEDQ/UeLBnUV6+200Ye4O0zJRhoXldR3bxpJE5omRTTOof7ueYBDVM+3NpF
tUx+w8SPBn4UKshUsrNn+8hx3JmIMHFcr4qKMuJCcxYQnyFurr7qIl+aLn4EBEYy
MRYp4PqJAxr531L29XYwxAMXb2BqC67DS6ked0kToDJyw7pLwr/gWt/c/nBMXfto
lcC1oUErnFRqxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:12 2026 by rpki-client