Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: Yr4yVWjeCWMyASOvryebEwzuNamzH6wQRpyHnDPvSow=
Subject key identifier: BA:3A:11:FD:30:83:AA:B0:39:5E:FA:A0:FF:FB:68:D6:70:4E:89:AB
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019E1FEC60AD2E124EB6EF6360595F41D1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 06:00:45 +0000
Manifest this update: Wed 13 May 2026 06:00:45 +0000
Manifest next update: Thu 14 May 2026 06:00:45 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: FcSfKCWmX7l9ChOU2sFh/h33aigcSBGB2X4Ikm+Zoh4=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:60:ad:2e:12:4e:b6:ef:63:60:59:5f:41:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: May 13 06:00:45 2026 GMT
Not After : May 14 06:00:45 2026 GMT
Subject: CN=ba3a11fd3083aab0395efaa0fffb68d6704e89ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:52:b4:9c:bf:cd:19:ca:39:83:e8:bd:8f:
34:4e:ff:ee:07:24:e2:20:b9:a5:7d:fc:8c:90:46:
3c:7a:a8:10:43:66:07:28:c2:f8:1a:60:be:b1:a7:
d0:d3:62:af:64:27:50:96:0c:1f:5b:a8:8f:43:8d:
48:0a:cf:fe:2b:af:2b:0c:ab:39:e8:76:9c:16:92:
6b:a1:2c:8d:cb:3c:0d:88:53:af:87:1f:19:9f:12:
b7:88:d5:fa:c8:ef:ff:c5:92:37:49:4a:99:83:96:
2f:46:f7:3c:9b:a0:a0:7d:45:26:91:9d:b7:8f:15:
f9:f3:34:fa:e2:39:50:eb:02:af:71:b5:c4:53:d8:
b3:d3:01:12:bc:40:c7:69:75:fc:38:7b:4d:99:fa:
f6:91:f7:98:07:71:6b:ef:24:0e:11:6f:a2:6a:a0:
13:5a:d0:fa:52:d8:51:75:44:f7:eb:9e:eb:21:0f:
10:b6:2e:35:d4:91:7d:dc:73:93:5f:10:c8:fd:22:
81:04:bb:37:80:5f:73:9c:ba:2f:30:9c:63:f9:2c:
cb:22:00:06:4a:c3:3c:ff:98:ae:2a:a2:52:3c:70:
7d:28:c8:87:84:a5:49:41:2f:6b:de:2b:0a:5f:e3:
b1:22:e1:92:5f:cf:17:aa:fc:78:2c:f2:3f:5a:73:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3A:11:FD:30:83:AA:B0:39:5E:FA:A0:FF:FB:68:D6:70:4E:89:AB
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a0:6c:7a:c3:6b:4e:67:25:3d:e7:17:06:4e:e3:32:19:15:
af:e2:81:cf:ff:7f:dd:bf:ac:2d:a6:10:71:8a:5b:72:a1:07:
fc:e6:73:c1:9f:c8:e7:62:26:8e:27:1c:57:c7:a8:37:26:1c:
02:9d:91:1b:9c:bd:17:d0:c5:17:6e:74:0d:24:52:0a:83:58:
a1:eb:45:77:44:88:af:fd:b1:4c:ee:c9:b0:3d:6f:10:bb:f3:
4f:de:f0:f4:7d:d4:2d:6b:a6:6a:13:27:1c:02:25:77:7c:37:
36:c3:f2:b4:00:d7:00:7c:79:a0:14:eb:07:79:1f:2c:cf:f2:
b4:f9:60:9a:31:c0:3c:d7:1d:1a:e1:a3:4b:ff:22:64:de:e4:
0c:f4:dc:cd:70:68:72:53:cc:30:3f:94:7b:6d:9d:36:a2:5e:
1a:41:e7:7b:d1:e4:d4:00:6e:c2:87:f3:10:c5:d8:59:9c:6d:
0f:e7:8c:89:58:34:8b:74:28:92:66:58:69:7f:54:43:a3:57:
ba:54:f0:09:48:16:e0:3c:12:c5:6a:f1:23:17:8a:a5:f8:32:
71:2f:10:25:83:70:55:72:ba:d7:e1:1c:5c:1e:21:b6:2e:01:
3a:1c:89:20:bd:cc:31:41:e7:74:bb:33:2f:a3:04:85:b4:b5:
42:d1:74:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7GCtLhJOtu9jYFlfQdHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDliYjA1MzBkZmUzMjI4ZjgzYjA4NjEzOTJlMjg0NTkz
NGI2OTgwHhcNMjYwNTEzMDYwMDQ1WhcNMjYwNTE0MDYwMDQ1WjAzMTEwLwYDVQQD
EyhiYTNhMTFmZDMwODNhYWIwMzk1ZWZhYTBmZmZiNjhkNjcwNGU4OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZStJy/zRnKOYPovY80Tv/uByTi
ILmlffyMkEY8eqgQQ2YHKML4GmC+safQ02KvZCdQlgwfW6iPQ41ICs/+K68rDKs5
6HacFpJroSyNyzwNiFOvhx8ZnxK3iNX6yO//xZI3SUqZg5YvRvc8m6CgfUUmkZ23
jxX58zT64jlQ6wKvcbXEU9iz0wESvEDHaXX8OHtNmfr2kfeYB3Fr7yQOEW+iaqAT
WtD6UthRdUT3657rIQ8Qti411JF93HOTXxDI/SKBBLs3gF9znLovMJxj+SzLIgAG
SsM8/5iuKqJSPHB9KMiHhKVJQS9r3isKX+OxIuGSX88Xqvx4LPI/WnN2xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo6Ef0wg6qwOV76oP/7aNZwTomrMB8GA1UdIwQY
MBaAFCTZuwUw3+Mij4OwhhOS4oRZNLaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUt
NGVhMzAxMWRhYjZjLzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOTk3OWMtZDk4OS00NmZmLWI5MWUtNGVhMzAxMWRhYjZj
LzEvSk5tN0JURGY0eUtQZzdDR0U1TGloRmswdHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6BsesNr
TmclPecXBk7jMhkVr+KBz/9/3b+sLaYQcYpbcqEH/OZzwZ/I52ImjiccV8eoNyYc
Ap2RG5y9F9DFF250DSRSCoNYoetFd0SIr/2xTO7JsD1vELvzT97w9H3ULWumahMn
HAIld3w3NsPytADXAHx5oBTrB3kfLM/ytPlgmjHAPNcdGuGjS/8iZN7kDPTczXBo
clPMMD+Ue22dNqJeGkHne9Hk1ABuwofzEMXYWZxtD+eMiVg0i3QokmZYaX9UQ6NX
ulTwCUgW4DwSxWrxIxeKpfgycS8QJYNwVXK61+EcXB4hti4BOhyJIL3MMUHndLsz
L6MEhbS1QtF0kA==
-----END CERTIFICATE-----
Generated at Wed May 13 10:46:23 2026 by rpki-client