Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: qdrApSYkYCsl9LoUo0sr1AZ1oeTpOuZt9xI011SF9+M=
Subject key identifier: D5:3A:C4:15:17:A3:46:27:57:36:B3:66:D1:23:06:1E:1A:1D:63:90
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019D2BF35F1172846BBC146B50B22597578D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 21:01:02 +0000
Manifest this update: Thu 26 Mar 2026 21:01:02 +0000
Manifest next update: Fri 27 Mar 2026 21:01:02 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: rOdxvIGz71hmIcAideVZrxucm34fqnd0q0NWyDx9ZKA=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:5f:11:72:84:6b:bc:14:6b:50:b2:25:97:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Mar 26 21:01:02 2026 GMT
Not After : Mar 27 21:01:02 2026 GMT
Subject: CN=d53ac41517a346275736b366d123061e1a1d6390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:65:48:9b:ea:27:9d:a2:01:6f:02:d8:c9:
f9:c8:bb:a9:85:2b:86:34:30:9e:e9:1d:fe:63:1c:
37:e1:02:63:fe:aa:6b:fe:11:80:91:12:ab:4d:b1:
b6:cf:16:fe:53:b9:71:4a:3f:c3:27:32:19:12:6d:
38:a5:0e:bf:ea:75:ef:b9:13:5e:2c:c2:19:d3:18:
e9:a4:67:76:08:ff:02:84:80:ae:43:e3:ab:e4:b0:
c3:6e:bf:f6:59:6f:61:55:e9:9a:2f:7d:14:f0:82:
04:fc:ff:97:e2:e0:67:e6:31:46:db:21:31:fa:78:
82:cd:f4:60:09:db:dd:a0:6a:79:da:22:5c:2e:75:
37:1a:c0:d7:ad:54:cd:17:b8:3c:8b:78:88:bb:a1:
7d:59:2f:c0:a5:b7:16:6c:9c:f6:c2:c2:cb:cf:61:
e2:22:62:61:17:b2:90:b0:27:04:1e:ca:2a:e7:f1:
40:75:d9:73:4c:89:79:0c:6f:5a:9f:75:c8:a9:c1:
bc:9d:61:3f:e4:61:81:b2:c9:fc:69:97:f6:56:b7:
0f:d1:80:ca:d6:b3:0e:47:ab:f8:63:92:4c:5d:7b:
dc:14:40:d1:0f:25:1c:55:1d:44:26:9e:32:8f:c2:
89:e0:fc:97:27:06:75:23:8d:92:02:74:55:f3:30:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3A:C4:15:17:A3:46:27:57:36:B3:66:D1:23:06:1E:1A:1D:63:90
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:31:98:9b:96:ad:cd:46:e0:8f:fe:27:fc:55:c6:66:a5:
c6:cc:6f:b3:06:70:3d:61:1b:34:35:33:d4:24:fb:af:06:71:
21:e9:80:e8:d5:53:d4:8a:8f:dc:eb:f3:3a:2b:07:0d:ba:de:
15:0b:4d:63:9e:3e:87:ea:7d:8b:d2:6f:72:6d:3c:91:00:1a:
fb:9d:bf:a5:6b:6a:1e:4d:cf:72:19:78:8a:8f:ee:f6:e3:51:
66:1d:c2:13:08:b0:c0:47:68:95:81:ee:ad:30:f7:ff:5a:7c:
8b:dd:c9:e0:80:03:a5:8a:08:b2:5c:5c:7a:20:ab:3a:20:d6:
25:70:de:6b:7d:3b:28:91:6c:70:9c:d0:3a:52:48:be:47:52:
30:e3:fd:de:1c:a4:dd:30:1e:f2:4c:92:2f:2c:11:89:d9:80:
2c:7e:fe:17:8b:a7:41:d4:0e:7b:3f:a8:00:aa:90:44:e5:de:
6e:08:6c:79:4f:3a:f0:63:9c:cb:44:df:ab:35:68:ba:da:9c:
42:03:5a:17:34:29:d7:c7:ce:8b:35:b3:52:95:a8:4a:6c:4b:
09:9a:91:b2:4d:72:d7:cc:8a:a0:21:75:dc:e4:11:0f:12:e8:
7e:21:e8:9e:f2:d5:0f:5b:b7:5c:ad:67:b3:d4:2b:a8:a4:f0:
1e:d1:3a:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0r818RcoRrvBRrULIll1eNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwMzI2MjEwMTAyWhcNMjYwMzI3MjEwMTAyWjAzMTEwLwYDVQQD
EyhkNTNhYzQxNTE3YTM0NjI3NTczNmIzNjZkMTIzMDYxZTFhMWQ2MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv09lSJvqJ52iAW8C2Mn5yLuphSuG
NDCe6R3+Yxw34QJj/qpr/hGAkRKrTbG2zxb+U7lxSj/DJzIZEm04pQ6/6nXvuRNe
LMIZ0xjppGd2CP8ChICuQ+Or5LDDbr/2WW9hVemaL30U8IIE/P+X4uBn5jFG2yEx
+niCzfRgCdvdoGp52iJcLnU3GsDXrVTNF7g8i3iIu6F9WS/ApbcWbJz2wsLLz2Hi
ImJhF7KQsCcEHsoq5/FAddlzTIl5DG9an3XIqcG8nWE/5GGBssn8aZf2VrcP0YDK
1rMOR6v4Y5JMXXvcFEDRDyUcVR1EJp4yj8KJ4PyXJwZ1I42SAnRV8zDupwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNU6xBUXo0YnVzazZtEjBh4aHWOQMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrcxmJuW
rc1G4I/+J/xVxmalxsxvswZwPWEbNDUz1CT7rwZxIemA6NVT1IqP3OvzOisHDbre
FQtNY54+h+p9i9Jvcm08kQAa+52/pWtqHk3Pchl4io/u9uNRZh3CEwiwwEdolYHu
rTD3/1p8i93J4IADpYoIslxceiCrOiDWJXDea307KJFscJzQOlJIvkdSMOP93hyk
3TAe8kySLywRidmALH7+F4unQdQOez+oAKqQROXebghseU868GOcy0TfqzVoutqc
QgNaFzQp18fOizWzUpWoSmxLCZqRsk1y18yKoCF13OQRDxLofiHonvLVD1u3XK1n
s9QrqKTwHtE6EQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:37:26 2026 by rpki-client