Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: 7t6Rkm6QDqWUGValHTfahWans7zdqKHn5G7MDcp85ds=
Subject key identifier: 1E:73:96:BE:ED:03:74:93:C3:90:74:5D:16:FE:07:FC:A2:27:16:BE
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019D273AD41A93B73B69B3F3DBE9B62F6B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 05A7
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: 9vSrH2SAZYPVBs+zBh8Wl+O46qaGa6Ch9wIeOVC2r+4=)
2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d4:1a:93:b7:3b:69:b3:f3:db:e9:b6:2f:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=1e7396beed037493c390745d16fe07fca22716be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:2a:9d:8d:03:0b:c4:4b:7f:bd:11:fb:59:
74:86:a3:ac:cb:9f:a5:3a:95:49:36:58:b0:d2:3f:
33:2c:4e:b2:f4:3b:0b:5c:a9:8b:93:6f:c2:bf:f8:
7f:82:80:3d:e0:5f:93:68:e7:73:62:00:3b:fe:f0:
9e:bd:9b:36:08:03:0c:f4:ec:a7:fe:b6:b5:32:6b:
58:b8:7b:f4:3d:b2:73:84:79:94:3a:9a:59:15:9d:
6e:4d:e2:ff:bd:26:0a:0a:56:26:98:f9:31:80:61:
1e:3e:7b:b9:26:08:ea:ad:d2:52:74:29:8a:81:4c:
3f:c1:5e:2c:4c:bd:35:78:68:ee:fc:37:e1:85:5f:
d1:8e:ab:7f:50:02:46:da:4b:ee:4f:ff:9d:aa:7b:
fe:f6:3e:cf:ae:99:d4:45:de:79:c2:fd:1f:4d:f2:
41:10:59:28:bd:f0:3d:d0:a3:09:05:44:be:4c:05:
66:86:d2:52:b1:34:86:cc:c4:f6:e6:f7:59:3a:ae:
b1:bf:36:9f:00:cd:c2:e1:48:18:a5:e1:12:c3:8d:
b3:c0:ec:61:98:d4:4d:c9:78:67:9f:47:c2:a9:2d:
c3:3a:da:d8:45:7f:2a:78:3d:a7:6e:b0:bc:c8:6f:
00:60:6d:83:72:b0:00:60:49:8c:26:ce:0f:87:9f:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:96:BE:ED:03:74:93:C3:90:74:5D:16:FE:07:FC:A2:27:16:BE
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5d:e7:d1:59:b5:c3:ae:f1:11:82:cb:ff:84:a6:79:9a:97:
67:4b:00:2e:0b:c0:38:db:1b:d0:3c:24:90:79:e3:77:e7:46:
fc:78:27:2d:d4:fd:78:4c:e7:7e:c2:81:fa:c9:e2:4a:7f:e1:
be:e7:0f:d8:bb:a3:62:10:bd:6c:ef:ef:8d:84:41:8a:46:79:
ad:3c:ad:99:05:5b:a6:b3:90:23:2d:b8:a7:ac:1b:37:b7:fa:
99:ad:24:f6:08:1f:f7:d3:dd:be:05:dc:15:5e:45:f8:85:de:
94:ee:fd:3d:a3:4c:da:d9:87:ec:11:25:e6:b8:53:7b:a0:2d:
78:1e:76:1b:42:70:0e:52:7a:a4:a3:61:3b:8c:a8:49:cc:b0:
25:a9:f2:43:34:aa:6b:81:16:89:3c:19:14:ec:ff:d1:46:d4:
cf:fb:fa:f8:52:c6:0b:32:6c:32:ae:40:78:e1:c2:2d:da:fd:
a2:68:8d:d4:a7:bf:b6:49:44:74:fd:b3:3f:cd:72:08:13:60:
98:52:e9:b3:b0:58:4b:0e:65:ee:8f:94:b0:a5:9c:37:e5:c3:
c5:ee:fa:a9:d0:28:d2:bf:5c:87:86:00:aa:6f:e4:d5:59:d7:
b1:49:ae:d0:57:ad:2d:3b:e5:b9:60:1c:f0:90:f3:ee:8d:00:
4f:95:c4:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtQak7c7abPz2+m2L2tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky
NzkyM2EwHhcNMjYwMzI1MjMwMDU5WhcNMjYwMzI2MjMwMDU5WjAzMTEwLwYDVQQD
EygxZTczOTZiZWVkMDM3NDkzYzM5MDc0NWQxNmZlMDdmY2EyMjcxNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1wqnY0DC8RLf70R+1l0hqOsy5+l
OpVJNliw0j8zLE6y9DsLXKmLk2/Cv/h/goA94F+TaOdzYgA7/vCevZs2CAMM9Oyn
/ra1MmtYuHv0PbJzhHmUOppZFZ1uTeL/vSYKClYmmPkxgGEePnu5JgjqrdJSdCmK
gUw/wV4sTL01eGju/DfhhV/Rjqt/UAJG2kvuT/+dqnv+9j7PrpnURd55wv0fTfJB
EFkovfA90KMJBUS+TAVmhtJSsTSGzMT25vdZOq6xvzafAM3C4UgYpeESw42zwOxh
mNRNyXhnn0fCqS3DOtrYRX8qeD2nbrC8yG8AYG2DcrAAYEmMJs4Ph5/3rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5zlr7tA3STw5B0XRb+B/yiJxa+MB8GA1UdIwQY
MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt
NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz
LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF3n0Vm1
w67xEYLL/4SmeZqXZ0sALgvAONsb0DwkkHnjd+dG/HgnLdT9eEznfsKB+sniSn/h
vucP2LujYhC9bO/vjYRBikZ5rTytmQVbprOQIy24p6wbN7f6ma0k9ggf99PdvgXc
FV5F+IXelO79PaNM2tmH7BEl5rhTe6AteB52G0JwDlJ6pKNhO4yoScywJanyQzSq
a4EWiTwZFOz/0UbUz/v6+FLGCzJsMq5AeOHCLdr9omiN1Ke/tklEdP2zP81yCBNg
mFLps7BYSw5l7o+UsKWcN+XDxe76qdAo0r9ch4YAqm/k1VnXsUmu0FetLTvluWAc
8JDz7o0AT5XElA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:46 2026 by rpki-client