Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: jWndv3KTIpg94T8imFDprhMtY0veBTj67DiMP8pJ7SM=
Subject key identifier: B4:DD:B3:4D:A0:93:A2:AC:26:F0:0E:F1:84:1C:07:92:FE:86:82:E6
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019E205AC9D79FDEF93F781E798BEBD3C2D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1643
Signing time: Wed 13 May 2026 08:01:21 +0000
Manifest this update: Wed 13 May 2026 08:01:21 +0000
Manifest next update: Thu 14 May 2026 08:01:21 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: x8N9qoSWNFa5y47Psaah2+fhVZrKXbgYaQC3ORprB98=)
2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:c9:d7:9f:de:f9:3f:78:1e:79:8b:eb:d3:c2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: May 13 08:01:21 2026 GMT
Not After : May 14 08:01:21 2026 GMT
Subject: CN=b4ddb34da093a2ac26f00ef1841c0792fe8682e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:df:14:ba:f2:3a:29:eb:69:ec:4b:27:32:be:
05:3f:c5:cf:0b:bd:2c:ea:c6:30:e2:61:ae:dd:66:
c5:0b:b7:ce:da:7b:56:0e:98:49:32:82:f2:d7:d1:
cd:4e:1f:e5:71:cf:a6:ea:8d:01:ac:52:87:f9:16:
61:fc:49:23:9a:32:03:70:9b:9f:3f:11:af:0a:1d:
d7:cc:cd:66:86:55:67:c2:cb:2f:7d:38:0f:24:78:
66:ca:50:af:7e:7a:96:9e:9c:35:4b:e1:48:8a:54:
3b:c9:02:36:5b:9a:e6:21:b8:55:29:ff:b2:6c:27:
42:11:ea:8b:99:b6:3d:ff:51:bf:f3:f7:54:a3:9b:
98:07:47:b4:40:26:86:73:e9:c9:8a:79:f4:61:7a:
55:48:c6:b1:a6:5f:8f:9f:b8:d5:76:d7:27:1d:c7:
cd:1a:92:b0:9a:2b:a9:cc:a2:7d:26:95:1a:55:23:
1e:d1:f9:1d:92:c2:89:59:4c:f3:37:71:4c:40:2b:
2b:f0:6b:32:1a:f9:9d:5d:1c:fd:8e:fc:f9:32:58:
67:7f:58:d7:92:7f:d5:ff:ed:d6:80:a4:39:57:c8:
71:09:d1:bf:fa:93:2b:70:48:9a:39:40:79:1c:b7:
1a:29:c2:98:7a:31:c7:60:d7:fb:99:c1:5a:60:74:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:B3:4D:A0:93:A2:AC:26:F0:0E:F1:84:1C:07:92:FE:86:82:E6
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8e:0c:3a:bc:a9:b7:55:c3:60:97:02:b8:d7:0f:97:73:3c:
b4:61:a8:f6:09:69:84:22:a0:3d:de:af:75:5e:92:28:05:ad:
39:70:d7:d9:f0:4c:a1:0a:fb:e4:67:14:35:8a:7f:98:9c:db:
96:ee:ac:8d:12:12:5a:0d:a4:94:91:f7:28:ac:c5:83:0d:56:
05:ce:4b:b0:71:15:47:c9:e2:cc:bd:05:bc:c6:d1:d4:e8:63:
eb:90:af:7a:b6:df:b4:ef:78:f4:b1:e3:78:19:df:d2:66:cf:
4e:f7:17:92:db:fd:07:82:94:5d:c1:85:1e:0f:e2:6d:df:58:
01:97:ba:a2:4f:63:75:7e:f5:15:b7:4a:97:ea:0c:a3:ea:72:
e3:3f:0d:5c:ad:a5:52:a9:22:19:f3:46:45:11:19:18:ef:1a:
bd:ad:38:4c:84:ca:65:cf:f2:6a:85:f3:b4:ea:b9:db:86:26:
16:f9:ad:08:2d:9a:9b:d2:ef:c6:58:2d:de:5a:fd:72:08:37:
32:70:84:53:ca:16:e3:e1:c9:4b:52:43:ac:8b:d4:5d:52:e1:
af:a1:61:23:08:6e:66:70:86:e4:7a:a5:fc:6c:17:af:ee:8b:
60:50:51:d5:d2:a6:a3:97:0a:6e:36:42:1d:9e:db:7f:b6:a4:
52:02:ff:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWsnXn975P3geeYvr08LSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Y2FjY2VlZTM1ZmY4N2NkNjc4ZWY2YTkyMjYyY2VmY2U4
NDkyZGYwHhcNMjYwNTEzMDgwMTIxWhcNMjYwNTE0MDgwMTIxWjAzMTEwLwYDVQQD
EyhiNGRkYjM0ZGEwOTNhMmFjMjZmMDBlZjE4NDFjMDc5MmZlODY4MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+t8UuvI6Ketp7EsnMr4FP8XPC70s
6sYw4mGu3WbFC7fO2ntWDphJMoLy19HNTh/lcc+m6o0BrFKH+RZh/EkjmjIDcJuf
PxGvCh3XzM1mhlVnwssvfTgPJHhmylCvfnqWnpw1S+FIilQ7yQI2W5rmIbhVKf+y
bCdCEeqLmbY9/1G/8/dUo5uYB0e0QCaGc+nJinn0YXpVSMaxpl+Pn7jVdtcnHcfN
GpKwmiupzKJ9JpUaVSMe0fkdksKJWUzzN3FMQCsr8GsyGvmdXRz9jvz5Mlhnf1jX
kn/V/+3WgKQ5V8hxCdG/+pMrcEiaOUB5HLcaKcKYejHHYNf7mcFaYHT9JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTds02gk6KsJvAO8YQcB5L+hoLmMB8GA1UdIwQY
MBaAFCTKzO7jX/h81njvapImLO/OhJLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAt
YTI5ZWIxMzllNzlkLzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82NjcwZjktNDE4ZS00Mjc1LTgwMDAtYTI5ZWIxMzllNzlk
LzEvSk1yTTd1TmYtSHpXZU85cWtpWXM3ODZFa3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXo4MOryp
t1XDYJcCuNcPl3M8tGGo9glphCKgPd6vdV6SKAWtOXDX2fBMoQr75GcUNYp/mJzb
lu6sjRISWg2klJH3KKzFgw1WBc5LsHEVR8nizL0FvMbR1Ohj65CverbftO949LHj
eBnf0mbPTvcXktv9B4KUXcGFHg/ibd9YAZe6ok9jdX71FbdKl+oMo+py4z8NXK2l
UqkiGfNGRREZGO8ava04TITKZc/yaoXztOq524YmFvmtCC2am9Lvxlgt3lr9cgg3
MnCEU8oW4+HJS1JDrIvUXVLhr6FhIwhuZnCG5Hql/GwXr+6LYFBR1dKmo5cKbjZC
HZ7bf7akUgL/nA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:01:37 2026 by rpki-client