Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: Q7MY6ZpsI+fagiknoT+N4qAcJZglH+cuGx5vN9Hp+54=
Subject key identifier: FA:B2:F2:05:F2:89:23:75:70:61:30:6D:52:15:4D:A1:48:C7:EB:C4
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019E205AC8FE8958307D415379E3382BB87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 0AC2
Signing time: Wed 13 May 2026 08:01:20 +0000
Manifest this update: Wed 13 May 2026 08:01:20 +0000
Manifest next update: Thu 14 May 2026 08:01:20 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: Eo/0MePR+Mz8H2UB/skUVcFPYp/QuFyFgYE/5DSedGA=)
2: gWon8go1X1etoZ8VVC7MVcrh7rw.roa (hash: +h9DsffeSnMEN/znqbhxvFFiJiaGvYzj2iIhf/egNzg=)
3: nePHPrOEtQ2PBdl8CIDH53O4jYo.roa (hash: LtVuUBSEUcTSpEfdLMbOtpgX1qZbM9aciFJAh+jdl4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:c8:fe:89:58:30:7d:41:53:79:e3:38:2b:b8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: May 13 08:01:20 2026 GMT
Not After : May 14 08:01:20 2026 GMT
Subject: CN=fab2f205f28923757061306d52154da148c7ebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:a9:52:29:b6:c7:99:e9:34:62:f3:82:b9:
cd:8b:b7:e4:fb:52:cb:05:63:a2:c6:9d:8c:3b:cb:
7a:15:0b:a6:11:f5:33:d2:a8:47:ea:aa:89:87:ac:
f1:0b:ca:27:6a:72:46:93:2e:89:d7:37:5a:41:97:
c3:eb:64:29:90:a9:19:16:a6:91:4c:19:d1:f6:12:
10:21:f2:00:c1:75:63:62:ec:0d:40:a3:3c:86:02:
5c:27:0a:04:38:1f:18:3f:89:b2:a7:52:7f:a0:fc:
47:26:d8:48:ee:ff:56:33:a3:ce:14:5c:74:07:3c:
03:91:2e:1d:a9:95:01:4c:7e:90:97:1d:c3:3e:1f:
f5:6d:01:ff:bf:13:d7:43:22:0f:48:5e:92:a3:d5:
de:17:c3:f6:a8:bf:c9:fc:5b:b6:12:86:14:b2:27:
02:d2:87:4a:64:4e:ef:04:c8:48:3e:af:7f:1e:a0:
f1:0d:3e:6f:06:50:70:63:e2:a4:22:ff:cb:8e:f9:
63:c0:f9:99:a8:22:9d:af:21:47:b6:57:ba:45:0b:
dd:92:c9:2a:1d:0c:1d:fa:4f:08:44:97:50:72:0e:
c4:bf:81:16:23:69:da:99:9f:65:a3:13:4f:cc:d0:
5c:11:5a:b1:3f:4a:fb:eb:46:e3:8e:6d:66:24:c4:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:F2:05:F2:89:23:75:70:61:30:6D:52:15:4D:A1:48:C7:EB:C4
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a2:e6:49:21:5f:da:40:5e:79:4c:81:86:e0:f2:95:c5:84:
22:20:5f:1e:b2:98:d4:5a:d1:75:c9:a5:65:9b:65:57:9b:a1:
7d:f7:12:3a:55:ab:0a:db:27:42:5e:14:6d:6f:84:90:64:77:
47:6d:fb:b2:0b:9d:07:4f:8d:8e:53:bd:8d:8a:6e:05:4a:49:
c2:df:99:04:ee:ea:33:75:2a:76:41:05:75:e8:9f:4a:69:43:
7f:67:d7:8c:81:3f:b7:1c:49:0d:73:4f:b6:11:6f:ca:9c:da:
04:f2:d1:cd:14:a4:a8:bd:50:3b:5e:b8:be:3d:65:3a:35:75:
92:1e:96:9f:b3:37:44:1d:4f:fb:b7:58:50:8f:9b:cd:16:f9:
f9:13:7a:a8:17:d9:73:00:2b:d6:5e:bf:ef:7d:ff:4f:7f:71:
91:54:25:83:fb:cb:d2:f2:be:28:58:fa:1c:f7:79:c5:f5:a0:
f5:36:0c:7f:10:1e:cc:3c:72:dd:12:2c:5e:37:4e:16:64:23:
c0:c0:b6:3b:8c:11:12:88:18:32:e9:b6:65:40:72:6b:bc:a7:
bb:40:e3:c8:3e:0f:a4:9e:53:ba:e7:9f:12:48:3f:ad:44:38:
a3:14:58:1f:c2:45:a5:29:18:0b:6e:69:2f:31:50:67:f3:32:
f6:04:9a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWsj+iVgwfUFTeeM4K7h7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDkwNmI5MGMxZDg1NjY3M2U0MTRmMzk4MDViZTU4M2Qy
MzBiYTcwHhcNMjYwNTEzMDgwMTIwWhcNMjYwNTE0MDgwMTIwWjAzMTEwLwYDVQQD
EyhmYWIyZjIwNWYyODkyMzc1NzA2MTMwNmQ1MjE1NGRhMTQ4YzdlYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+OpUim2x5npNGLzgrnNi7fk+1LL
BWOixp2MO8t6FQumEfUz0qhH6qqJh6zxC8onanJGky6J1zdaQZfD62QpkKkZFqaR
TBnR9hIQIfIAwXVjYuwNQKM8hgJcJwoEOB8YP4myp1J/oPxHJthI7v9WM6POFFx0
BzwDkS4dqZUBTH6Qlx3DPh/1bQH/vxPXQyIPSF6So9XeF8P2qL/J/Fu2EoYUsicC
0odKZE7vBMhIPq9/HqDxDT5vBlBwY+KkIv/LjvljwPmZqCKdryFHtle6RQvdkskq
HQwd+k8IRJdQcg7Ev4EWI2namZ9loxNPzNBcEVqxP0r760bjjm1mJMQDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqy8gXyiSN1cGEwbVIVTaFIx+vEMB8GA1UdIwQY
MBaAFCTZBrkMHYVmc+QU85gFvlg9IwunMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEt
NGZjMjhlNTA5OGM3LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iNTNkYjEtMWUwZS00NGQwLWExMzEtNGZjMjhlNTA5OGM3
LzEvSk5rR3VRd2RoV1p6NUJUem1BVy1XRDBqQzZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKLmSSFf
2kBeeUyBhuDylcWEIiBfHrKY1FrRdcmlZZtlV5uhffcSOlWrCtsnQl4UbW+EkGR3
R237sgudB0+NjlO9jYpuBUpJwt+ZBO7qM3UqdkEFdeifSmlDf2fXjIE/txxJDXNP
thFvypzaBPLRzRSkqL1QO164vj1lOjV1kh6Wn7M3RB1P+7dYUI+bzRb5+RN6qBfZ
cwAr1l6/733/T39xkVQlg/vL0vK+KFj6HPd5xfWg9TYMfxAezDxy3RIsXjdOFmQj
wMC2O4wREogYMum2ZUBya7ynu0DjyD4PpJ5TuuefEkg/rUQ4oxRYH8JFpSkYC25p
LzFQZ/My9gSaZA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:12:02 2026 by rpki-client