Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: HyeqswmmX7aX6Ksp009/znukN5Y5jvzNQmelekr3JEw=
Subject key identifier: D8:43:25:AA:2A:8B:F8:AC:20:21:F3:D0:9C:2C:22:F7:B7:67:5E:9E
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019E1CB55E563F298F80CE84A8C9E9E006B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1233
Signing time: Tue 12 May 2026 15:01:48 +0000
Manifest this update: Tue 12 May 2026 15:01:48 +0000
Manifest next update: Wed 13 May 2026 15:01:48 +0000
Files and hashes: 1: fpTANtI4bRz4exyqA72XnfqWeAU.asa (hash: AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: Ulnl3hMCWlwQ8SAfDZD/3wR0tfz3hJ1g2zzhnRZ6DOo=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:5e:56:3f:29:8f:80:ce:84:a8:c9:e9:e0:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: May 12 15:01:48 2026 GMT
Not After : May 13 15:01:48 2026 GMT
Subject: CN=d84325aa2a8bf8ac2021f3d09c2c22f7b7675e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:dd:36:bc:b6:ec:fd:da:3d:46:16:59:b9:
e9:03:56:16:bf:2e:40:2b:ec:bc:79:b1:9f:06:15:
fb:f9:3b:19:dd:4c:0f:77:55:9c:79:7d:72:6c:ad:
c2:9c:74:89:f3:66:08:e9:d0:36:c8:13:89:50:4a:
07:2c:8d:16:96:8d:79:72:ca:9a:2d:06:b8:ce:4c:
ba:de:ef:aa:56:df:fa:df:59:6c:89:e7:21:53:78:
d3:b9:d4:cc:3f:aa:9e:9b:57:f9:6e:b8:71:42:d0:
6a:f2:3e:cc:7e:3f:92:8b:6c:cc:ea:24:f1:b0:56:
7e:4f:c9:13:f9:6b:18:12:07:dd:e4:32:6b:9d:54:
ff:b2:2b:e3:20:9b:06:99:d2:8e:f7:8b:b0:ec:23:
6d:a4:21:5c:89:a6:26:f0:c8:42:8a:e1:8a:e9:a7:
81:48:5d:4e:e5:5a:6b:a0:33:fb:0f:6e:7b:fc:11:
cf:24:44:1d:6b:89:c3:73:65:62:b7:5b:e4:b0:27:
bc:5f:04:9a:c6:4b:c0:29:d5:fc:41:46:e3:a3:22:
18:aa:db:89:01:6d:27:02:58:1f:95:9b:20:5c:1c:
f3:d2:8e:3f:ed:b1:b4:60:be:2b:f7:f0:22:b9:1f:
bf:35:e2:37:f3:af:22:1c:5d:21:34:a9:96:75:36:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:43:25:AA:2A:8B:F8:AC:20:21:F3:D0:9C:2C:22:F7:B7:67:5E:9E
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:52:34:91:66:d0:b5:01:80:3d:ef:08:89:cf:74:7c:a1:
2e:3d:17:43:dd:e0:76:ac:69:3c:86:d2:f0:68:63:dd:39:c5:
02:d0:bc:5c:b7:38:6b:79:1f:81:f5:2f:e0:cd:65:fc:e8:0d:
e3:08:97:5a:2d:9d:b5:ba:2b:27:ce:6f:f7:6f:08:77:db:c8:
62:c4:74:8f:f2:47:6f:9e:3d:eb:27:f4:3d:a7:62:4a:60:72:
8c:e3:00:5d:80:84:3a:d9:c9:21:a7:6c:40:bb:65:6b:9b:d5:
76:7e:12:94:86:53:cb:8d:92:39:f4:77:be:25:f7:16:df:4e:
41:ff:e4:7f:aa:f7:95:77:d0:29:99:31:b9:a2:8d:5e:5c:a1:
16:77:e2:3d:04:b3:41:c9:11:46:d0:a3:51:55:6d:49:97:d3:
f4:7e:87:1c:c4:d5:82:cd:92:a7:66:9f:9a:cb:04:48:7e:d9:
79:af:eb:bc:79:5d:27:fa:67:97:88:a1:98:18:df:bd:c7:d7:
66:5a:52:8e:f9:24:75:08:ef:8f:6d:ef:86:86:b0:ae:c9:c5:
4a:9b:f2:b6:33:f5:cc:3b:f5:7d:a5:b0:c4:32:15:a9:4f:30:
57:3c:da:64:07:a5:ca:63:e3:cf:c1:d5:96:d5:54:65:ea:7c:
65:03:b6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctV5WPymPgM6EqMnp4Aa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzAyYTYxNmMwNDk0MWUyYzlmMDcxNjUxZTQ5YzVkZjNh
ZWQwYjEwHhcNMjYwNTEyMTUwMTQ4WhcNMjYwNTEzMTUwMTQ4WjAzMTEwLwYDVQQD
EyhkODQzMjVhYTJhOGJmOGFjMjAyMWYzZDA5YzJjMjJmN2I3Njc1ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/dNry27P3aPUYWWbnpA1YWvy5A
K+y8ebGfBhX7+TsZ3UwPd1WceX1ybK3CnHSJ82YI6dA2yBOJUEoHLI0Wlo15csqa
LQa4zky63u+qVt/631lsiechU3jTudTMP6qem1f5brhxQtBq8j7Mfj+Si2zM6iTx
sFZ+T8kT+WsYEgfd5DJrnVT/sivjIJsGmdKO94uw7CNtpCFciaYm8MhCiuGK6aeB
SF1O5VproDP7D257/BHPJEQda4nDc2Vit1vksCe8XwSaxkvAKdX8QUbjoyIYqtuJ
AW0nAlgflZsgXBzz0o4/7bG0YL4r9/AiuR+/NeI3868iHF0hNKmWdTbiWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhDJaoqi/isICHz0JwsIve3Z16eMB8GA1UdIwQY
MBaAFI5wKmFsBJQeLJ8HFlHknF3zrtCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMt
Y2Q2MGM4OTEwMDFiLzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yYjg4NzctZTUyMy00ZTljLTlmYzMtY2Q2MGM4OTEwMDFi
LzEvam5BcVlXd0VsQjRzbndjV1VlU2NYZk91MExFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ5SNJFm
0LUBgD3vCInPdHyhLj0XQ93gdqxpPIbS8Ghj3TnFAtC8XLc4a3kfgfUv4M1l/OgN
4wiXWi2dtborJ85v928Id9vIYsR0j/JHb5496yf0PadiSmByjOMAXYCEOtnJIads
QLtla5vVdn4SlIZTy42SOfR3viX3Ft9OQf/kf6r3lXfQKZkxuaKNXlyhFnfiPQSz
QckRRtCjUVVtSZfT9H6HHMTVgs2Sp2afmssESH7Zea/rvHldJ/pnl4ihmBjfvcfX
ZlpSjvkkdQjvj23vhoawrsnFSpvytjP1zDv1faWwxDIVqU8wVzzaZAelymPjz8HV
ltVUZep8ZQO2bw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:44:15 2026 by rpki-client