
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: s7l8msIQNxuP/Z172UwJHpVH3dixr2LHYbDL3ow1NAM=
Subject key identifier: 8F:D6:41:E9:CC:87:DC:60:A8:01:B3:46:1F:53:CA:A4:EB:E4:F4:91
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 019E2248E0E586AF3EE58BCE9644A0C94CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 051D
Signing time: Wed 13 May 2026 17:01:01 +0000
Manifest this update: Wed 13 May 2026 17:01:01 +0000
Manifest next update: Thu 14 May 2026 17:01:01 +0000
Files and hashes: 1: 0qno_wqpopJBxt4-OrgwJXk2bwk.roa (hash: RgyK5hH34ROLc4JKaSs3aIaF9IUNB+c+DaeyeBLcUj8=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: U/DLg93TqOgBHFyj+uX80OqcZ3PPcWvAyBGX3fhxaUM=)
3: dc3eKFfSxHFYzzU_oM182euYwgE.roa (hash: Gv+75A1LB5RsqtJnS89RJjrHYzND9EYfxZEGawh5qzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:48:e0:e5:86:af:3e:e5:8b:ce:96:44:a0:c9:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: May 13 17:01:01 2026 GMT
Not After : May 14 17:01:01 2026 GMT
Subject: CN=8fd641e9cc87dc60a801b3461f53caa4ebe4f491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:ec:f4:6d:96:92:34:77:07:ef:85:46:c3:
3f:fc:94:f0:c6:84:39:17:a4:4b:93:f1:3b:66:20:
a2:73:b8:e0:10:9f:06:86:b0:2d:b3:31:ce:0d:62:
8b:c6:2f:ab:6e:ec:e3:67:2a:ea:6b:10:93:5b:79:
25:64:3c:45:37:2c:12:73:8e:e7:91:83:60:1a:84:
bb:f3:31:f9:cb:a3:8c:20:3e:73:4e:6f:e1:51:1e:
61:89:da:b8:0b:eb:f6:13:cb:5c:31:e6:97:3c:11:
32:85:33:5e:59:ac:bd:83:ef:da:40:e9:fc:93:55:
86:06:20:26:4d:bf:d1:8a:90:a3:2e:fb:5c:5c:e7:
e4:b2:50:76:f5:f1:32:18:2d:d8:bd:de:3e:39:b7:
56:ec:78:c3:3c:d9:de:21:f1:86:da:b4:f5:39:83:
81:ee:e6:87:d8:96:4f:be:38:b5:a6:ea:d3:d7:fb:
29:2b:4e:f4:cd:bd:b9:26:94:e4:b1:23:49:7a:d5:
bb:f3:ec:94:3e:98:3c:69:1a:9a:2a:06:a4:b7:c2:
21:84:5f:72:a9:a0:55:4b:52:1a:7f:7b:e3:36:aa:
f6:49:e1:72:f3:8d:4f:1b:e2:2e:68:bc:63:26:1c:
d0:9f:fc:18:77:6c:41:25:87:7b:64:2e:b0:21:9e:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D6:41:E9:CC:87:DC:60:A8:01:B3:46:1F:53:CA:A4:EB:E4:F4:91
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:9e:f0:db:26:76:06:c1:83:e3:0a:fe:96:e8:24:be:32:
bb:06:ef:f3:02:22:0a:20:4f:0a:82:59:17:2c:79:84:3a:49:
07:fc:e3:f5:33:52:97:47:8d:a5:5a:f5:9b:0e:a4:b8:2d:ca:
98:37:98:ef:67:63:9c:8e:2f:1a:4d:a7:96:6b:83:5c:ff:88:
ba:95:f7:6b:ba:57:fa:b3:02:1f:01:3b:0e:b9:4e:05:b1:0d:
0f:c8:5a:ac:2f:cd:fa:06:9f:f3:87:0f:a5:08:ba:b5:25:74:
95:0c:92:68:da:42:32:2c:80:b8:6c:46:68:2a:a5:f4:2e:cc:
b7:8c:44:93:cd:fa:01:93:68:1e:c4:72:25:87:77:45:a5:7b:
a1:bc:d2:09:be:82:54:9d:01:63:77:c6:7f:78:29:d2:58:45:
5b:f8:53:39:20:68:d0:17:59:81:89:2d:6c:88:c8:16:bc:56:
c5:48:62:55:16:47:17:5c:79:98:8e:25:c3:c2:df:1a:b5:6e:
59:c5:d7:5e:e1:1c:e5:75:bc:d2:59:e1:e4:6c:98:94:57:3c:
a0:9c:8f:8f:99:46:d1:a0:ee:e6:2d:d1:7a:06:2b:1f:b0:90:
90:28:65:b3:a1:c3:b3:f2:c6:a4:f5:7d:26:dd:6f:ff:20:05:
50:36:9b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4iSODlhq8+5YvOlkSgyUyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjYwNTEzMTcwMTAxWhcNMjYwNTE0MTcwMTAxWjAzMTEwLwYDVQQD
Eyg4ZmQ2NDFlOWNjODdkYzYwYTgwMWIzNDYxZjUzY2FhNGViZTRmNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/s9G2WkjR3B++FRsM//JTwxoQ5
F6RLk/E7ZiCic7jgEJ8GhrAtszHODWKLxi+rbuzjZyrqaxCTW3klZDxFNywSc47n
kYNgGoS78zH5y6OMID5zTm/hUR5hidq4C+v2E8tcMeaXPBEyhTNeWay9g+/aQOn8
k1WGBiAmTb/RipCjLvtcXOfkslB29fEyGC3Yvd4+ObdW7HjDPNneIfGG2rT1OYOB
7uaH2JZPvji1purT1/spK070zb25JpTksSNJetW78+yUPpg8aRqaKgakt8IhhF9y
qaBVS1Iaf3vjNqr2SeFy841PG+IuaLxjJhzQn/wYd2xBJYd7ZC6wIZ6eGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/WQenMh9xgqAGzRh9TyqTr5PSRMB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJye8Nsm
dgbBg+MK/pboJL4yuwbv8wIiCiBPCoJZFyx5hDpJB/zj9TNSl0eNpVr1mw6kuC3K
mDeY72djnI4vGk2nlmuDXP+IupX3a7pX+rMCHwE7DrlOBbEND8harC/N+gaf84cP
pQi6tSV0lQySaNpCMiyAuGxGaCql9C7Mt4xEk836AZNoHsRyJYd3RaV7obzSCb6C
VJ0BY3fGf3gp0lhFW/hTOSBo0BdZgYktbIjIFrxWxUhiVRZHF1x5mI4lw8LfGrVu
WcXXXuEc5XW80lnh5GyYlFc8oJyPj5lG0aDu5i3RegYrH7CQkChls6HDs/LGpPV9
Jt1v/yAFUDabeg==
-----END CERTIFICATE-----
Generated at Wed May 13 22:13:45 2026 by rpki-client