Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: O1rcblQKsisOnxTd3LFvfKf3jTuGZsTNWBMswAVCSQQ=
Subject key identifier: D2:E7:95:9C:EA:C2:56:FF:6E:85:92:A6:B3:1C:5B:93:54:12:DC:26
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019E1D905BEA439F3ECD76DE757AA94C0BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 06B8
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: tKM/EP5kcX9sZjLPkUZ9wy+5Uw3F8bhp+9P0TB+gUq0=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5b:ea:43:9f:3e:cd:76:de:75:7a:a9:4c:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=d2e7959ceac256ff6e8592a6b31c5b935412dc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:8e:6e:ef:6b:24:df:4d:28:cc:f2:e7:08:
3e:96:e4:92:d3:79:20:b2:60:01:82:3e:83:ea:1f:
c1:0f:c5:c4:07:bc:5b:61:0a:96:92:80:f4:7c:96:
e1:16:26:8b:50:db:3d:bf:8a:fb:5e:34:e3:7a:4f:
59:fe:79:d5:ad:bb:f2:84:8a:92:97:80:50:f9:92:
4b:01:e6:09:9c:45:0c:6a:bc:8e:05:e4:ee:9a:28:
1c:f1:3b:92:90:b0:14:46:56:7d:fc:a7:7c:f0:76:
71:e6:e2:51:f1:24:c8:bf:26:4a:cd:5f:6f:a8:5a:
e2:24:56:19:69:a4:61:9e:49:fd:70:5f:e4:48:67:
04:da:92:10:5f:19:f3:7a:9b:85:b1:0c:7c:4b:c3:
d8:56:00:57:7b:c9:2f:55:1f:d3:8d:41:e6:58:05:
4d:1b:5b:2d:28:b7:2b:6a:14:dc:91:59:fc:90:39:
37:ee:dc:66:20:d5:34:74:2d:2b:b7:cc:26:d1:1a:
3c:64:ae:22:54:0e:b1:51:b7:f7:20:87:6e:85:60:
e0:e9:04:0a:67:33:99:8b:45:20:4c:5d:91:15:74:
c0:f0:7a:b3:91:19:15:29:a6:62:a2:44:f5:82:ce:
68:8a:b4:59:4e:71:81:9a:b6:72:4b:0f:7c:a5:9d:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:95:9C:EA:C2:56:FF:6E:85:92:A6:B3:1C:5B:93:54:12:DC:26
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ea:11:af:1c:78:b0:d0:9f:2e:20:d4:93:ef:db:4a:ac:e1:
a3:dc:16:b4:d2:f0:4e:a5:b3:6b:92:0d:41:89:ce:c7:94:12:
b3:e2:b5:e4:f2:3a:e6:31:48:f5:5a:0f:94:3b:5d:30:d0:e6:
46:3a:92:f4:d2:45:03:5a:99:5d:26:fc:ba:7c:47:e4:dc:71:
9c:e6:3e:df:f5:5b:2c:99:49:4b:20:f7:f4:5c:2d:a0:59:67:
df:b5:56:3d:50:3c:af:89:b0:fc:fc:99:d3:0f:d7:e6:8c:73:
e0:ef:c6:b6:1a:80:51:e8:8a:50:37:60:02:03:e9:f6:28:e2:
6d:75:74:22:f2:9e:86:92:f4:0f:86:9a:4f:e4:e6:c8:84:e7:
b8:db:28:c2:27:04:f6:9d:b0:26:a3:fd:92:c3:06:5d:27:16:
a3:ff:ff:48:37:62:e7:55:fa:2b:91:9e:1a:85:09:79:45:fd:
bc:46:1f:83:20:b4:b9:af:6d:54:1a:6f:52:9a:5d:bc:e7:e4:
ea:7b:02:fc:03:75:5c:c3:7b:76:20:ee:71:17:84:dd:3d:7a:
05:1c:fa:c6:6f:f4:37:ea:60:6c:50:a7:cb:f3:71:d0:57:15:
65:1f:82:b5:27:93:03:7e:f6:4d:3c:4e:5d:cf:e2:c4:33:b3:
dd:20:1f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkFvqQ58+zXbedXqpTAvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjYwNTEyMTkwMTAwWhcNMjYwNTEzMTkwMTAwWjAzMTEwLwYDVQQD
EyhkMmU3OTU5Y2VhYzI1NmZmNmU4NTkyYTZiMzFjNWI5MzU0MTJkYzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuObu9rJN9NKMzy5wg+luSS03kg
smABgj6D6h/BD8XEB7xbYQqWkoD0fJbhFiaLUNs9v4r7XjTjek9Z/nnVrbvyhIqS
l4BQ+ZJLAeYJnEUMaryOBeTumigc8TuSkLAURlZ9/Kd88HZx5uJR8STIvyZKzV9v
qFriJFYZaaRhnkn9cF/kSGcE2pIQXxnzepuFsQx8S8PYVgBXe8kvVR/TjUHmWAVN
G1stKLcrahTckVn8kDk37txmINU0dC0rt8wm0Ro8ZK4iVA6xUbf3IIduhWDg6QQK
ZzOZi0UgTF2RFXTA8HqzkRkVKaZiokT1gs5oirRZTnGBmrZySw98pZ0ZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLnlZzqwlb/boWSprMcW5NUEtwmMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOoRrxx4
sNCfLiDUk+/bSqzho9wWtNLwTqWza5INQYnOx5QSs+K15PI65jFI9VoPlDtdMNDm
RjqS9NJFA1qZXSb8unxH5NxxnOY+3/VbLJlJSyD39FwtoFln37VWPVA8r4mw/PyZ
0w/X5oxz4O/GthqAUeiKUDdgAgPp9ijibXV0IvKehpL0D4aaT+TmyITnuNsowicE
9p2wJqP9ksMGXScWo///SDdi51X6K5GeGoUJeUX9vEYfgyC0ua9tVBpvUppdvOfk
6nsC/AN1XMN7diDucReE3T16BRz6xm/0N+pgbFCny/Nx0FcVZR+CtSeTA372TTxO
Xc/ixDOz3SAfwg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:23:21 2026 by rpki-client