Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: zA2jMDkUbh37oXvmgQwBIVcuR/rcMGGutMQVnd7EYMU=
Subject key identifier: D9:DF:9D:3F:F8:C5:53:19:F0:DA:1A:3B:74:51:04:5E:E1:AD:22:41
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019D25F10DDF57ABEB82041D663759F2ACC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 15D3
Signing time: Wed 25 Mar 2026 17:00:47 +0000
Manifest this update: Wed 25 Mar 2026 17:00:47 +0000
Manifest next update: Thu 26 Mar 2026 17:00:47 +0000
Files and hashes: 1: 1MewjKs7oZbPQCWXkDdeqf-hRUI.roa (hash: ZIOY5qx7Rihwq5CYw6fFGk6ypYaqCmJubtJXiapIpl8=)
2: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: 92+xMUx9rXOENn6OiE2L3VUzyjx2RsLbad/7y+IZMco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:0d:df:57:ab:eb:82:04:1d:66:37:59:f2:ac:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Mar 25 17:00:47 2026 GMT
Not After : Mar 26 17:00:47 2026 GMT
Subject: CN=d9df9d3ff8c55319f0da1a3b7451045ee1ad2241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6d:aa:00:61:b7:a8:cc:d3:9b:ec:c5:83:df:
d6:e3:ad:a8:9e:f2:c7:a1:c7:e3:09:27:6a:75:c9:
12:a1:56:d9:24:99:3a:41:83:ed:8e:ca:9c:10:3b:
68:af:93:f2:ce:97:47:4b:c0:e0:b0:3b:2e:bd:61:
51:f6:45:2e:ba:bc:7c:78:8a:ae:a1:a9:2e:99:a3:
93:84:30:53:cb:47:da:44:5b:f4:58:62:36:e1:af:
fc:25:fb:d3:9d:1d:cb:ab:ed:2a:b5:98:36:c6:1a:
fa:bd:63:9d:07:65:89:f1:ed:2b:41:b2:d1:a0:36:
7b:5f:4b:bb:6d:22:2f:52:67:f0:f6:a4:59:5b:e9:
ee:33:5f:01:a3:87:df:8c:86:fe:6e:2c:31:92:e3:
6a:e4:df:39:6f:d3:35:0d:0f:0b:02:33:14:25:fa:
b7:81:98:3e:7d:10:81:05:5b:64:fd:12:36:c7:19:
56:71:56:e6:cc:6c:4a:20:33:43:84:6a:e2:3e:d2:
79:30:0e:9b:8b:d3:2b:8b:af:7d:a6:0e:62:40:99:
cb:1e:fb:15:ac:7a:3e:4a:0b:92:05:30:47:be:d4:
88:20:c3:c6:1e:61:ff:df:b0:47:a9:e5:9e:8d:6b:
98:06:8f:a8:81:8f:c5:43:99:b8:8f:b6:c8:bb:43:
ce:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DF:9D:3F:F8:C5:53:19:F0:DA:1A:3B:74:51:04:5E:E1:AD:22:41
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:8b:37:57:bb:12:94:70:36:a5:05:27:8d:35:39:d4:92:
d2:9b:e1:c0:51:f7:3f:c3:27:b4:24:45:ef:39:04:46:39:ea:
a7:a6:de:ee:1c:46:d9:2a:5d:ef:7c:56:fb:a1:0f:2a:ed:d6:
c8:ae:fe:1e:44:ec:81:36:7b:1e:d1:22:02:bf:a7:53:2e:51:
ed:eb:cb:6b:51:32:d8:9c:98:00:66:4c:c4:7c:7e:d3:52:bb:
9c:98:24:30:25:6b:6f:ea:3e:5c:9f:88:15:88:6d:3d:9c:e8:
77:99:c8:8a:98:2c:5c:41:1e:ae:de:41:45:e4:44:bc:69:78:
0a:a9:56:cf:ab:02:7c:d9:85:3d:cf:86:09:f7:24:68:03:76:
be:a1:95:19:c0:22:27:82:a8:45:1a:76:6d:f1:df:54:05:53:
ab:05:85:91:83:11:1c:91:75:c0:ba:55:42:11:1c:90:2c:5e:
10:80:9b:fb:f7:a4:fd:46:5d:1b:57:04:0d:91:cb:53:ad:8f:
bf:2b:f6:3f:fd:28:c6:24:c5:51:cb:1d:13:f2:b9:bb:37:51:
51:48:3b:05:66:51:59:89:25:a7:7b:26:67:fd:80:8e:9d:0b:
4f:92:13:97:da:e5:57:d9:fe:e3:7c:01:c2:7f:af:64:58:55:
b4:eb:e5:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Q3fV6vrggQdZjdZ8qzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0
OGI2ZTcwHhcNMjYwMzI1MTcwMDQ3WhcNMjYwMzI2MTcwMDQ3WjAzMTEwLwYDVQQD
EyhkOWRmOWQzZmY4YzU1MzE5ZjBkYTFhM2I3NDUxMDQ1ZWUxYWQyMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm2qAGG3qMzTm+zFg9/W462onvLH
ocfjCSdqdckSoVbZJJk6QYPtjsqcEDtor5PyzpdHS8DgsDsuvWFR9kUuurx8eIqu
oakumaOThDBTy0faRFv0WGI24a/8JfvTnR3Lq+0qtZg2xhr6vWOdB2WJ8e0rQbLR
oDZ7X0u7bSIvUmfw9qRZW+nuM18Bo4ffjIb+biwxkuNq5N85b9M1DQ8LAjMUJfq3
gZg+fRCBBVtk/RI2xxlWcVbmzGxKIDNDhGriPtJ5MA6bi9Mri699pg5iQJnLHvsV
rHo+SguSBTBHvtSIIMPGHmH/37BHqeWejWuYBo+ogY/FQ5m4j7bIu0POuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnfnT/4xVMZ8NoaO3RRBF7hrSJBMB8GA1UdIwQY
MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt
YjJhMTNhM2E5YjhhLzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh
LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjWLN1e7
EpRwNqUFJ401OdSS0pvhwFH3P8MntCRF7zkERjnqp6be7hxG2Spd73xW+6EPKu3W
yK7+HkTsgTZ7HtEiAr+nUy5R7evLa1Ey2JyYAGZMxHx+01K7nJgkMCVrb+o+XJ+I
FYhtPZzod5nIipgsXEEert5BReREvGl4CqlWz6sCfNmFPc+GCfckaAN2vqGVGcAi
J4KoRRp2bfHfVAVTqwWFkYMRHJF1wLpVQhEckCxeEICb+/ek/UZdG1cEDZHLU62P
vyv2P/0oxiTFUcsdE/K5uzdRUUg7BWZRWYklp3smZ/2Ajp0LT5ITl9rlV9n+43wB
wn+vZFhVtOvlUQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:29 2026 by rpki-client