Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: 1GtrlwOVfyAvBnRHg9S11MG4hBXy7pPvE+pRjFHdTnA=
Subject key identifier: 90:15:2E:35:FF:C3:B8:B7:0D:F6:89:35:98:9F:95:18:6E:F3:29:DD
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019E20FEE837D77E0F533B3064B78828F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 10A8
Signing time: Wed 13 May 2026 11:00:36 +0000
Manifest this update: Wed 13 May 2026 11:00:36 +0000
Manifest next update: Thu 14 May 2026 11:00:36 +0000
Files and hashes: 1: ChullwnZqQZYUszFjSx3fewyjwo.roa (hash: Q47vpxHW3Ryw8e0pAegAXyctEwiMaOAhvKLpvI/M8b8=)
2: DNSKPd01dwV1m0UA3OWZjHrv0VI.roa (hash: xZ97A5jZ/SukMOaFd3zQ70K1ldM9Hn7h4aFpzYLuuQg=)
3: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: Je06lWrblM+wbmO1/HuX68vCz2jCeDAR9cbPHVsVlHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:e8:37:d7:7e:0f:53:3b:30:64:b7:88:28:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: May 13 11:00:36 2026 GMT
Not After : May 14 11:00:36 2026 GMT
Subject: CN=90152e35ffc3b8b70df68935989f95186ef329dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:a2:27:37:e2:97:7f:1c:91:8a:4e:ea:f7:
22:5e:36:34:f7:53:e2:4a:95:e1:12:dc:c3:ad:d9:
7c:55:af:29:95:e1:06:18:27:f4:96:ab:ba:18:03:
c0:14:4c:64:f8:2d:87:00:f6:a1:22:1f:a4:18:d2:
07:84:b7:16:a0:62:c2:a9:fd:13:7c:c6:6e:46:5e:
5f:71:c1:32:45:4d:af:ea:61:70:a2:15:88:fe:f2:
92:da:60:77:79:a6:ad:af:c5:ef:ee:35:93:75:94:
d2:9a:18:8f:f3:79:62:4c:5f:44:b7:24:83:21:5d:
f2:62:1f:78:bf:79:38:cc:2d:11:21:9f:78:91:71:
fe:80:5c:b3:96:4c:bd:c7:55:a0:eb:8d:c9:63:86:
47:91:7b:0e:30:16:f6:bc:37:2c:fa:9a:78:42:b8:
68:bb:dd:c4:1d:ff:86:68:fd:61:28:21:85:80:d6:
f0:48:09:64:ef:c3:69:d4:0a:58:ea:9a:c3:31:a1:
d9:4f:a3:ea:97:49:ec:15:de:03:dd:1a:17:9a:4e:
2e:59:09:64:b5:68:20:26:c0:64:8e:ba:48:82:e3:
2c:b9:8e:0e:af:0a:5b:9d:2e:64:72:a8:67:de:a9:
d9:05:6e:b1:d1:04:f3:3c:57:f9:00:1f:26:03:9c:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:2E:35:FF:C3:B8:B7:0D:F6:89:35:98:9F:95:18:6E:F3:29:DD
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4d:a3:c5:4a:ef:36:03:0a:7b:cd:a4:41:98:0b:fa:46:03:
d9:ef:b3:21:40:fb:8b:00:32:66:ad:89:8e:97:e3:32:26:6b:
dc:03:59:79:87:83:ee:76:bc:b2:47:19:8e:d0:57:c6:8e:4a:
ff:68:37:0c:0d:62:0e:b3:18:76:0b:e7:ab:cb:d3:94:b0:d7:
0c:0b:34:2d:7e:c6:b4:f2:37:5b:7b:d9:0e:6d:b3:d7:94:6f:
dd:34:31:25:f9:ad:56:da:09:2d:52:4c:fe:5f:20:93:5b:89:
d4:cb:2c:ab:9a:aa:a1:05:ab:6b:6b:ab:49:a5:d7:57:1a:a5:
96:d9:37:a0:f1:e3:5e:97:de:3c:7f:86:8f:e6:bb:ad:0d:f8:
49:d2:b1:3a:b0:5f:6c:22:16:9d:9e:c5:79:35:e0:47:e3:ef:
e5:f0:be:4f:5d:e6:ef:6b:1d:7d:94:85:13:c4:25:3e:8a:44:
9a:54:aa:9a:c4:ac:2d:94:eb:3a:d4:e8:85:73:b0:9f:b8:3d:
95:38:56:31:11:5a:e4:ff:e6:3c:c2:eb:61:d0:2a:38:23:82:
46:d2:61:52:ad:29:1f:fe:4b:77:51:b5:ce:e1:4c:96:97:3d:
d9:01:0c:67:23:00:fe:fb:d8:bb:7e:64:a9:e0:5c:c3:f1:3c:
3c:fe:78:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/ug3134PUzswZLeIKPX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjYwNTEzMTEwMDM2WhcNMjYwNTE0MTEwMDM2WjAzMTEwLwYDVQQD
Eyg5MDE1MmUzNWZmYzNiOGI3MGRmNjg5MzU5ODlmOTUxODZlZjMyOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KiJzfil38ckYpO6vciXjY091Pi
SpXhEtzDrdl8Va8pleEGGCf0lqu6GAPAFExk+C2HAPahIh+kGNIHhLcWoGLCqf0T
fMZuRl5fccEyRU2v6mFwohWI/vKS2mB3eaatr8Xv7jWTdZTSmhiP83liTF9EtySD
IV3yYh94v3k4zC0RIZ94kXH+gFyzlky9x1Wg643JY4ZHkXsOMBb2vDcs+pp4Qrho
u93EHf+GaP1hKCGFgNbwSAlk78Np1ApY6prDMaHZT6Pql0nsFd4D3RoXmk4uWQlk
tWggJsBkjrpIguMsuY4OrwpbnS5kcqhn3qnZBW6x0QTzPFf5AB8mA5zDQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAVLjX/w7i3DfaJNZiflRhu8yndMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0k2jxUrv
NgMKe82kQZgL+kYD2e+zIUD7iwAyZq2JjpfjMiZr3ANZeYeD7na8skcZjtBXxo5K
/2g3DA1iDrMYdgvnq8vTlLDXDAs0LX7GtPI3W3vZDm2z15Rv3TQxJfmtVtoJLVJM
/l8gk1uJ1Mssq5qqoQWra2urSaXXVxqlltk3oPHjXpfePH+Gj+a7rQ34SdKxOrBf
bCIWnZ7FeTXgR+Pv5fC+T13m72sdfZSFE8QlPopEmlSqmsSsLZTrOtTohXOwn7g9
lThWMRFa5P/mPMLrYdAqOCOCRtJhUq0pH/5Ld1G1zuFMlpc92QEMZyMA/vvYu35k
qeBcw/E8PP54ag==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:41 2026 by rpki-client