Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: 5LnKn52ivoK41hv3HGYDPfsicjt7EjDUkIJen+l6nZU=
Subject key identifier: 77:3B:9D:9B:96:3C:36:63:9B:B2:CC:F5:86:5F:22:3B:90:0F:CE:9A
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019E1F7F4E154097AAC2611E1506AD13B517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 04EF
Signing time: Wed 13 May 2026 04:01:37 +0000
Manifest this update: Wed 13 May 2026 04:01:37 +0000
Manifest next update: Thu 14 May 2026 04:01:37 +0000
Files and hashes: 1: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (hash: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: Oci2O49ldnn+SrWQnHKbwk3H6BPlN3dXDYF6Ug1qrnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:4e:15:40:97:aa:c2:61:1e:15:06:ad:13:b5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: May 13 04:01:37 2026 GMT
Not After : May 14 04:01:37 2026 GMT
Subject: CN=773b9d9b963c36639bb2ccf5865f223b900fce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:5e:28:4b:ef:24:c4:39:d0:c3:b9:54:b8:
14:c8:05:ef:ae:c3:d2:fd:f9:68:aa:b4:53:89:b2:
1f:d6:4b:7a:9f:cb:73:e7:ef:79:ea:85:ba:7c:b2:
e2:64:db:bf:75:ca:90:f3:0a:91:c2:f1:03:af:78:
8b:0f:f0:e9:e3:27:0a:4f:76:87:b8:40:ff:3a:d6:
68:a8:dd:7a:3b:55:fe:08:b2:de:ba:76:b5:71:a3:
3f:d2:b0:26:7a:1b:cd:92:55:54:3d:ca:d2:a1:0c:
40:67:f6:94:74:e7:2a:e7:37:66:fa:13:8f:77:af:
65:da:e4:7f:77:37:0d:4f:d6:af:4d:e0:57:5c:71:
78:71:bb:09:4e:48:02:f9:1a:4a:94:95:1f:68:1c:
e4:9c:9a:d1:b3:59:9c:06:1a:8a:2f:98:00:91:4b:
a3:fd:d5:6f:2a:a5:50:61:2c:80:2f:96:b0:fa:97:
b2:b5:a1:86:8a:a3:cd:65:08:e7:d1:4f:19:09:9e:
21:e5:41:41:ea:7a:88:c2:ae:a8:15:8e:fa:fb:a1:
cf:b8:85:1c:cb:78:83:62:2b:7e:6b:14:79:fa:12:
d1:ea:f7:3b:fb:09:49:77:ad:b7:87:f1:c5:cc:7c:
42:31:10:cc:21:da:72:c2:6c:79:dd:b7:17:63:de:
c3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:9D:9B:96:3C:36:63:9B:B2:CC:F5:86:5F:22:3B:90:0F:CE:9A
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:82:cf:58:c6:ba:9d:cd:cd:2d:d2:6e:d9:e4:ca:43:97:
70:20:17:e0:36:2b:bf:f8:79:9f:68:3b:0f:35:a1:ae:b3:b6:
46:ef:78:39:b2:38:fa:52:7f:1e:8f:77:9f:69:73:f2:74:06:
c8:f6:9b:be:bd:06:56:0e:85:ad:c7:df:e7:26:68:a6:69:73:
95:55:fb:4d:72:63:96:7e:b5:40:f9:dd:2e:b2:18:ba:36:a2:
62:c3:f2:b2:cf:e3:f7:b5:1d:d1:91:6a:ab:c1:c6:b5:05:ca:
bf:e1:bf:29:c6:75:be:8f:35:0c:68:c5:0d:b2:df:42:62:58:
db:d6:f1:83:8b:e8:04:1a:a4:c7:9c:1b:61:01:57:13:2f:89:
23:87:52:25:7d:f0:f6:74:be:a5:bc:1c:92:de:40:bf:2f:d1:
39:c3:3a:ce:eb:a0:76:bb:7c:a6:93:0c:9c:e5:7f:97:24:19:
e9:e8:9d:f0:3d:78:de:9a:d2:88:34:d0:14:fa:fd:31:78:8a:
9f:49:2b:f8:9c:85:6b:58:9d:81:fd:5f:9a:5d:89:d9:d5:43:
79:83:a1:dc:c6:a3:54:2b:b3:f2:b9:a4:5b:1d:31:b0:85:7a:
ab:35:62:55:d5:e0:ba:26:00:6e:c7:fb:57:f6:b3:28:c5:8c:
3e:79:cc:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff04VQJeqwmEeFQatE7UXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj
Zjc2M2YwHhcNMjYwNTEzMDQwMTM3WhcNMjYwNTE0MDQwMTM3WjAzMTEwLwYDVQQD
Eyg3NzNiOWQ5Yjk2M2MzNjYzOWJiMmNjZjU4NjVmMjIzYjkwMGZjZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVteKEvvJMQ50MO5VLgUyAXvrsPS
/floqrRTibIf1kt6n8tz5+956oW6fLLiZNu/dcqQ8wqRwvEDr3iLD/Dp4ycKT3aH
uED/OtZoqN16O1X+CLLeuna1caM/0rAmehvNklVUPcrSoQxAZ/aUdOcq5zdm+hOP
d69l2uR/dzcNT9avTeBXXHF4cbsJTkgC+RpKlJUfaBzknJrRs1mcBhqKL5gAkUuj
/dVvKqVQYSyAL5aw+peytaGGiqPNZQjn0U8ZCZ4h5UFB6nqIwq6oFY76+6HPuIUc
y3iDYit+axR5+hLR6vc7+wlJd623h/HFzHxCMRDMIdpywmx53bcXY97DuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc7nZuWPDZjm7LM9YZfIjuQD86aMB8GA1UdIwQY
MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt
YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi
LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx2Cz1jG
up3NzS3SbtnkykOXcCAX4DYrv/h5n2g7DzWhrrO2Ru94ObI4+lJ/Ho93n2lz8nQG
yPabvr0GVg6Frcff5yZopmlzlVX7TXJjln61QPndLrIYujaiYsPyss/j97Ud0ZFq
q8HGtQXKv+G/KcZ1vo81DGjFDbLfQmJY29bxg4voBBqkx5wbYQFXEy+JI4dSJX3w
9nS+pbwckt5Avy/ROcM6zuugdrt8ppMMnOV/lyQZ6eid8D143prSiDTQFPr9MXiK
n0kr+JyFa1idgf1fml2J2dVDeYOh3MajVCuz8rmkWx0xsIV6qzViVdXguiYAbsf7
V/azKMWMPnnMVw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:53 2026 by rpki-client