Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: tsfEoKj7KTyZup5sT6DiJEO9lBiKtKotcW/z4vvcQ9Y=
Subject key identifier: 71:D4:5F:DD:69:A3:F7:11:6F:7B:9E:56:A9:C4:68:41:F9:A6:CA:AE
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019E21A44969E319040100F1C5BE4DF7AF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 03A2
Signing time: Wed 13 May 2026 14:01:15 +0000
Manifest this update: Wed 13 May 2026 14:01:15 +0000
Manifest next update: Thu 14 May 2026 14:01:15 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: mMYmMIz09T/0G34ImxkYgC9HS//RRAg5SRuQ2WVxbAc=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:49:69:e3:19:04:01:00:f1:c5:be:4d:f7:af:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: May 13 14:01:15 2026 GMT
Not After : May 14 14:01:15 2026 GMT
Subject: CN=71d45fdd69a3f7116f7b9e56a9c46841f9a6caae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:ad:20:ce:bd:64:ca:dc:68:fb:24:ad:27:
79:70:7c:1c:e6:04:c4:ea:f3:3c:f8:9b:38:9d:35:
05:8f:71:0c:d7:23:f8:26:9f:85:59:5c:f3:df:a6:
2f:ca:ae:c0:7e:2c:b5:d5:32:c1:66:36:20:9d:90:
9d:7a:cc:2e:e3:04:99:13:33:ab:6e:62:28:91:df:
7a:f8:1c:3d:af:f3:ea:2d:13:ec:ad:32:7d:a9:82:
e6:6d:b4:3c:27:5a:c4:f7:ec:41:7f:72:67:40:2d:
54:8f:72:f5:10:77:c9:69:c3:0a:c6:a7:7a:80:92:
f5:c3:ec:75:1d:22:df:f7:4e:70:99:78:a2:5f:a0:
73:2c:1f:9d:62:e4:41:61:43:c7:18:c2:ba:0a:d3:
3e:ba:e1:eb:a9:0a:37:b6:09:06:6d:55:ab:11:b9:
37:7a:20:7a:82:4c:79:06:b3:b5:a2:ae:b0:b5:63:
fc:cf:a0:53:b7:bf:61:87:d7:ea:64:2d:e3:2c:8f:
6f:18:09:e0:60:dc:7a:23:50:4a:40:3c:d2:4e:28:
b0:e4:34:51:7c:24:5a:80:05:f9:f5:14:74:3a:51:
05:96:2e:ae:bb:86:8b:66:d4:4e:d0:d5:2c:c2:2d:
64:e8:0d:13:dd:e7:bc:b2:b0:fa:97:f4:3f:10:c0:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D4:5F:DD:69:A3:F7:11:6F:7B:9E:56:A9:C4:68:41:F9:A6:CA:AE
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:67:19:6e:26:fe:95:6b:b1:fb:c1:3e:67:41:d8:92:01:
c9:3f:af:39:87:d7:08:48:16:e4:3e:5e:75:91:74:0d:b3:34:
58:e5:d8:a6:22:1e:b7:50:37:48:35:3f:a6:b3:06:56:72:ac:
41:ca:9c:bf:27:e6:89:c5:39:2b:84:c4:e7:fd:41:34:51:3e:
cd:74:ab:ed:cd:b9:f7:9e:c0:99:ee:cf:c2:e2:8e:0a:00:88:
60:b6:27:90:10:77:87:d0:42:be:0b:23:60:f1:d7:4e:e6:43:
34:0b:76:ac:d1:77:ee:e4:68:44:7d:d7:ab:c0:fe:95:f8:8e:
a9:36:8c:1f:34:11:95:1a:2c:62:88:a8:1d:a5:db:61:ca:f1:
22:4c:16:6d:1a:51:44:49:fe:01:6c:3f:3c:b2:ef:e6:ad:b5:
d9:ea:a5:65:79:d1:0d:b1:3f:a9:00:85:8e:aa:ce:67:95:f0:
b7:42:a0:11:2c:6c:fc:23:dc:08:1a:75:91:97:fb:d4:f0:ce:
db:51:e9:85:01:44:af:7b:76:76:cb:b8:aa:b1:6a:e3:04:aa:
a0:47:ba:7d:5e:34:98:c9:ef:db:75:6b:b7:ed:a3:48:88:f4:
dc:08:8b:21:5a:9b:f5:3a:76:52:7d:e5:6c:54:c0:b5:ad:e0:
57:9b:ae:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hpElp4xkEAQDxxb5N96+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjNkOWNmYzgxNzMyZWQyZmE0YTY0MmVkYWUzMzRjMDAy
OTUwZjgwHhcNMjYwNTEzMTQwMTE1WhcNMjYwNTE0MTQwMTE1WjAzMTEwLwYDVQQD
Eyg3MWQ0NWZkZDY5YTNmNzExNmY3YjllNTZhOWM0Njg0MWY5YTZjYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7OtIM69ZMrcaPskrSd5cHwc5gTE
6vM8+Js4nTUFj3EM1yP4Jp+FWVzz36Yvyq7Afiy11TLBZjYgnZCdeswu4wSZEzOr
bmIokd96+Bw9r/PqLRPsrTJ9qYLmbbQ8J1rE9+xBf3JnQC1Uj3L1EHfJacMKxqd6
gJL1w+x1HSLf905wmXiiX6BzLB+dYuRBYUPHGMK6CtM+uuHrqQo3tgkGbVWrEbk3
eiB6gkx5BrO1oq6wtWP8z6BTt79hh9fqZC3jLI9vGAngYNx6I1BKQDzSTiiw5DRR
fCRagAX59RR0OlEFli6uu4aLZtRO0NUswi1k6A0T3ee8srD6l/Q/EMCaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHUX91po/cRb3ueVqnEaEH5psquMB8GA1UdIwQY
MBaAFCdj2c/IFzLtL6SmQu2uM0wAKVD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2Mt
MWQxMjI4MGJhMzIyLzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83YWMxYzItMTQwZi00YzFhLTgxY2MtMWQxMjI4MGJhMzIy
LzEvSjJQWno4Z1hNdTB2cEtaQzdhNHpUQUFwVVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqltnGW4m
/pVrsfvBPmdB2JIByT+vOYfXCEgW5D5edZF0DbM0WOXYpiIet1A3SDU/prMGVnKs
QcqcvyfmicU5K4TE5/1BNFE+zXSr7c25957Ame7PwuKOCgCIYLYnkBB3h9BCvgsj
YPHXTuZDNAt2rNF37uRoRH3Xq8D+lfiOqTaMHzQRlRosYoioHaXbYcrxIkwWbRpR
REn+AWw/PLLv5q212eqlZXnRDbE/qQCFjqrOZ5Xwt0KgESxs/CPcCBp1kZf71PDO
21HphQFEr3t2dsu4qrFq4wSqoEe6fV40mMnv23Vrt+2jSIj03AiLIVqb9Tp2Un3l
bFTAta3gV5uu/w==
-----END CERTIFICATE-----
Generated at Wed May 13 18:05:11 2026 by rpki-client