Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: 12XPNbdtUj3MFHyDnkh7VeY+uPvXpIfL6VJiHfEKyVw=
Subject key identifier: 35:2D:E9:32:FE:B4:95:61:10:51:10:9F:96:9E:24:24:14:D6:E8:26
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019E2092362680353594F9A4579C844195D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0E05
Signing time: Wed 13 May 2026 09:01:53 +0000
Manifest this update: Wed 13 May 2026 09:01:53 +0000
Manifest next update: Thu 14 May 2026 09:01:53 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: ubZbd44vilzadwAfLzYik0YMhvfCtiPrQ3P45f5/C7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:36:26:80:35:35:94:f9:a4:57:9c:84:41:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: May 13 09:01:53 2026 GMT
Not After : May 14 09:01:53 2026 GMT
Subject: CN=352de932feb495611051109f969e242414d6e826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:5e:25:c8:dd:77:11:be:90:db:66:09:aa:
63:b5:06:c4:6e:08:b1:db:ae:44:b5:e7:e1:ff:e8:
b6:46:da:b2:1b:14:5a:e6:be:d1:db:da:92:0e:0f:
74:fc:3e:8d:3d:46:73:cd:07:be:7a:68:5c:2c:03:
59:64:f8:97:6c:a1:03:4e:c8:90:ca:6f:6e:7a:4d:
ff:dd:27:c5:52:d2:f3:9c:ec:12:f8:dc:e8:a1:40:
e0:e6:1b:90:6d:92:5b:c2:5a:e2:3b:8d:3b:4f:1a:
39:58:75:3b:e0:f8:69:ae:fc:f4:2e:88:61:a7:64:
a5:87:47:16:5e:81:1d:a6:c9:d5:e6:f4:76:73:08:
82:a6:83:12:a2:16:66:1e:69:bb:de:69:6d:6d:7a:
3c:ea:2c:c4:62:57:60:c6:a8:9c:6e:49:a7:0e:aa:
52:3b:db:9a:71:9a:72:3d:6a:44:95:1b:47:2d:69:
b5:6a:f2:29:2c:a1:9f:1e:bf:21:d1:69:7b:3f:62:
67:6d:2a:7b:f4:31:2d:b0:5c:68:7a:a7:df:84:6b:
92:a8:5c:ce:aa:b0:c9:c3:fc:bd:24:2f:86:80:dc:
d2:a1:9e:9a:50:fb:11:55:67:3f:f8:96:d8:2f:64:
da:20:34:3f:6f:34:1e:bc:68:e0:84:14:28:5f:c7:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:E9:32:FE:B4:95:61:10:51:10:9F:96:9E:24:24:14:D6:E8:26
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:79:83:e8:c1:7b:6d:67:3f:f2:eb:cd:55:d5:4c:32:15:aa:
05:5a:6d:1b:c0:88:5f:0c:6b:b6:3f:d1:ba:dc:7d:c8:4b:c2:
06:bb:f7:29:f8:71:b0:c0:a0:27:20:39:03:c3:58:39:fe:98:
c7:77:fd:29:a1:a2:14:5e:36:82:fd:cf:f1:de:bc:68:ec:58:
48:14:a4:38:18:52:43:19:4f:16:45:73:3d:7d:bc:4f:34:29:
0d:f7:ed:5c:14:44:e8:99:33:21:77:09:70:2d:79:79:f1:2e:
59:1f:c1:a3:c3:20:6d:0d:10:8f:19:8d:b5:6a:59:a6:f0:0c:
e6:c4:3f:54:0f:8f:e4:18:05:ea:d2:57:58:5a:e6:08:c3:c2:
3a:6d:9c:96:1a:ac:50:cc:f9:26:7d:a0:7d:6b:eb:4e:f2:f9:
59:99:19:29:9a:9f:4c:86:c4:19:7b:b2:af:c0:24:11:b9:61:
5c:67:57:7e:cf:c1:d2:08:1b:66:bd:2d:3c:3d:0d:c0:38:97:
0a:66:e4:56:93:75:bb:75:ae:cc:78:cb:6b:a6:a2:43:59:b6:
4c:d1:94:4c:6b:c2:60:f2:e8:0b:1f:a4:36:0c:e9:f0:97:e5:
d6:b6:4c:b9:ff:31:c7:07:c5:65:33:62:f8:e3:d1:d4:a8:26:
60:b6:82:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkjYmgDU1lPmkV5yEQZXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjYwNTEzMDkwMTUzWhcNMjYwNTE0MDkwMTUzWjAzMTEwLwYDVQQD
EygzNTJkZTkzMmZlYjQ5NTYxMTA1MTEwOWY5NjllMjQyNDE0ZDZlODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6BeJcjddxG+kNtmCapjtQbEbgix
265Etefh/+i2RtqyGxRa5r7R29qSDg90/D6NPUZzzQe+emhcLANZZPiXbKEDTsiQ
ym9uek3/3SfFUtLznOwS+NzooUDg5huQbZJbwlriO407Txo5WHU74Phprvz0Lohh
p2Slh0cWXoEdpsnV5vR2cwiCpoMSohZmHmm73mltbXo86izEYldgxqicbkmnDqpS
O9uacZpyPWpElRtHLWm1avIpLKGfHr8h0Wl7P2JnbSp79DEtsFxoeqffhGuSqFzO
qrDJw/y9JC+GgNzSoZ6aUPsRVWc/+JbYL2TaIDQ/bzQevGjghBQoX8f8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUt6TL+tJVhEFEQn5aeJCQU1ugmMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnmD6MF7
bWc/8uvNVdVMMhWqBVptG8CIXwxrtj/Rutx9yEvCBrv3KfhxsMCgJyA5A8NYOf6Y
x3f9KaGiFF42gv3P8d68aOxYSBSkOBhSQxlPFkVzPX28TzQpDfftXBRE6JkzIXcJ
cC15efEuWR/Bo8MgbQ0QjxmNtWpZpvAM5sQ/VA+P5BgF6tJXWFrmCMPCOm2clhqs
UMz5Jn2gfWvrTvL5WZkZKZqfTIbEGXuyr8AkEblhXGdXfs/B0ggbZr0tPD0NwDiX
CmbkVpN1u3WuzHjLa6aiQ1m2TNGUTGvCYPLoCx+kNgzp8Jfl1rZMuf8xxwfFZTNi
+OPR1KgmYLaC0g==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:36 2026 by rpki-client