Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: f76sDE0p5YLZRNmNmzi71xUhy3qOVQGc7ZKRe8agHXI=
Subject key identifier: 22:35:06:7D:35:88:64:38:1A:92:E8:6B:24:B7:B6:E7:EE:FF:35:D1
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 019D2884D00BF7D9CA49B65D9823E1D35780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0660
Signing time: Thu 26 Mar 2026 05:01:25 +0000
Manifest this update: Thu 26 Mar 2026 05:01:25 +0000
Manifest next update: Fri 27 Mar 2026 05:01:25 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: vyp8bgPZVjz3RQkT0DVnelUR1HcybajRbBQDYMGXfFs=)
2: kt6ISYmYzdT_sD7cn5nH6bulSe4.roa (hash: 6LvWtYhhWQnpqxU2WlqAAGv11j/zEYewR/NkDp4dAe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:d0:0b:f7:d9:ca:49:b6:5d:98:23:e1:d3:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Mar 26 05:01:25 2026 GMT
Not After : Mar 27 05:01:25 2026 GMT
Subject: CN=2235067d358864381a92e86b24b7b6e7eeff35d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:93:6c:f1:0b:83:77:75:15:9d:af:26:6f:
07:a3:b0:3a:10:a6:ec:d9:bb:a8:9b:18:c5:f0:55:
be:77:12:9e:5e:6a:46:ac:19:ba:fe:c9:14:af:45:
ac:c6:9b:9d:8c:5a:32:ce:bb:69:e5:dd:f5:76:77:
b0:5d:6a:19:b6:47:5e:8c:0b:1a:16:da:fa:e7:46:
e7:7b:eb:5d:55:3a:e0:e8:87:c5:e0:89:bd:48:de:
76:35:e8:46:42:80:e9:94:89:93:f8:3c:99:2f:af:
3d:71:42:02:9a:44:05:6a:69:41:df:67:b3:d4:cb:
cd:0f:62:60:b9:27:99:55:74:4d:f2:6b:3a:fe:d9:
9e:86:f3:37:43:18:9f:b6:77:90:92:76:c0:3b:a1:
97:bc:b2:70:c5:32:35:99:3a:87:8f:b2:cd:45:66:
f2:e9:b4:5e:4d:79:72:20:6d:c2:4b:00:58:19:e1:
da:04:ce:18:31:32:ae:2f:cb:85:63:8a:22:10:3f:
17:e7:45:cc:fd:e7:9b:c7:6a:62:0a:93:b3:d4:d7:
4e:d3:9d:35:d1:9f:a8:b6:8c:13:b0:c1:63:ea:d7:
9d:ac:e2:3d:a1:5c:88:16:b9:71:c3:30:e1:cb:a6:
32:40:ca:d2:62:cb:4e:de:8c:44:18:f4:14:26:30:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:35:06:7D:35:88:64:38:1A:92:E8:6B:24:B7:B6:E7:EE:FF:35:D1
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:85:ec:f4:81:e3:c0:ea:43:f7:0b:b2:51:9b:dc:12:a8:5c:
a4:0d:9e:b6:78:4d:d6:0a:5e:9e:5d:0c:94:2a:36:56:8c:66:
25:de:81:66:88:17:4d:b4:c6:fd:98:ee:3e:9b:2c:53:53:02:
2d:21:d9:67:b8:c4:04:a3:8c:6f:60:af:90:83:49:44:5d:30:
d8:b4:e7:65:00:e2:3b:25:93:9b:11:e9:20:eb:c0:e4:84:80:
9c:4c:7e:65:b6:56:1c:15:07:1f:6a:ea:40:3b:e1:85:3d:01:
ec:f8:ec:b4:53:94:90:80:5e:9e:a9:ce:13:da:6c:16:39:fb:
27:83:dc:59:33:de:62:a7:7f:99:78:96:c8:e7:eb:8a:dd:ed:
99:b1:53:a2:00:3d:80:8a:2e:b3:f5:13:c8:11:c4:b5:28:8d:
8b:93:77:6e:35:b8:c9:95:13:e8:70:58:ee:52:9b:36:77:61:
3a:2e:07:4c:9d:b2:83:e9:52:3f:ee:f9:f7:4f:3b:4e:4c:36:
e3:d3:a4:36:22:50:03:e5:aa:f7:7a:eb:97:fd:cb:38:71:cb:
b5:ec:ca:f0:cd:6b:f1:dc:0c:ac:08:b2:34:1e:96:ce:16:a2:
ed:b5:fa:85:0c:70:a2:08:db:ee:4b:c6:a8:9e:ee:37:5a:8d:
4f:40:03:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohNAL99nKSbZdmCPh01eAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTI1MGQ2YzQ2ZjI2ZjRjMzAwNWZhNDJlNDAxYThhOWU1
Yzg4NmUwHhcNMjYwMzI2MDUwMTI1WhcNMjYwMzI3MDUwMTI1WjAzMTEwLwYDVQQD
EygyMjM1MDY3ZDM1ODg2NDM4MWE5MmU4NmIyNGI3YjZlN2VlZmYzNWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4uTbPELg3d1FZ2vJm8Ho7A6EKbs
2buomxjF8FW+dxKeXmpGrBm6/skUr0WsxpudjFoyzrtp5d31dnewXWoZtkdejAsa
Ftr650bne+tdVTrg6IfF4Im9SN52NehGQoDplImT+DyZL689cUICmkQFamlB32ez
1MvND2JguSeZVXRN8ms6/tmehvM3QxiftneQknbAO6GXvLJwxTI1mTqHj7LNRWby
6bReTXlyIG3CSwBYGeHaBM4YMTKuL8uFY4oiED8X50XM/eebx2piCpOz1NdO0501
0Z+otowTsMFj6tedrOI9oVyIFrlxwzDhy6YyQMrSYstO3oxEGPQUJjDTCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI1Bn01iGQ4GpLoayS3tufu/zXRMB8GA1UdIwQY
MBaAFCaiUNbEbyb0wwBfpC5AGoqeXIhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5Zjct
MWZmN2IzMWU1MmNkLzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MmE1MGItNTVlYi00OTdiLWE5ZjctMWZmN2IzMWU1MmNk
LzEvSnFKUTFzUnZKdlREQUYta0xrQWFpcDVjaUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYXs9IHj
wOpD9wuyUZvcEqhcpA2etnhN1gpenl0MlCo2VoxmJd6BZogXTbTG/ZjuPpssU1MC
LSHZZ7jEBKOMb2CvkINJRF0w2LTnZQDiOyWTmxHpIOvA5ISAnEx+ZbZWHBUHH2rq
QDvhhT0B7PjstFOUkIBenqnOE9psFjn7J4PcWTPeYqd/mXiWyOfrit3tmbFTogA9
gIous/UTyBHEtSiNi5N3bjW4yZUT6HBY7lKbNndhOi4HTJ2yg+lSP+759087Tkw2
49OkNiJQA+Wq93rrl/3LOHHLtezK8M1r8dwMrAiyNB6Wzhai7bX6hQxwogjb7kvG
qJ7uN1qNT0ADCA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:07 2026 by rpki-client