Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: K5exXBiz0fGZWg5STpA0dU4eEJwXtmqJnv3JN7SX8KA=
Subject key identifier: ED:CF:7E:9D:04:11:30:75:AA:E0:F8:E9:FB:BB:69:97:C7:C6:64:BF
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 019D273B304CCFF7E9379CEABFFE17E76BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 1518
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: CFs9QijMQZXft1qyL9GnWPO1GTU.roa (hash: oKwOUscI0w8VVSNnLxFijPy/YKPFlOCw7H1bV/hxHVM=)
2: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: JsKxZhhuINK+0oftO82R8mGm+33+L2RcIrApubmiLNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:30:4c:cf:f7:e9:37:9c:ea:bf:fe:17:e7:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=edcf7e9d04113075aae0f8e9fbbb6997c7c664bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:cc:8a:d7:e5:ad:46:d0:76:0d:e6:83:a8:
73:f6:0c:20:52:9a:7d:56:92:5e:71:6e:20:d2:d6:
2c:47:57:c7:18:2b:85:de:d7:82:1f:74:b3:74:63:
8e:83:5c:80:f5:02:04:0d:5c:ae:7e:6f:e4:c1:bc:
e5:bd:45:bd:58:65:a0:69:88:14:42:4c:4f:41:1b:
b2:d7:d2:f4:0b:2d:c5:cb:e0:5d:71:dc:96:62:68:
2e:62:ad:a2:86:b2:36:33:6f:92:78:2b:fb:47:a3:
94:a5:4d:f8:c6:77:9f:73:13:65:dc:6c:9b:d9:64:
83:bd:ef:40:92:b5:51:f4:6d:d4:d1:0e:d8:99:b7:
7d:8a:23:63:c4:a1:10:d2:82:3b:8a:ef:de:b9:0a:
1f:27:70:71:c2:80:56:64:9c:2f:7a:59:82:e8:ce:
f2:f9:6a:76:a8:68:25:9f:c7:c1:56:66:49:49:29:
5c:17:f3:fd:2d:f9:86:84:9b:58:91:37:44:99:a2:
41:fb:a1:0e:8d:1d:1b:1d:e7:c0:dd:f1:16:dc:85:
3e:d0:85:29:79:e2:45:e2:77:9e:3d:0c:86:14:ae:
3b:27:49:3b:84:94:1a:a4:5e:18:8f:0c:79:1d:3a:
6d:1d:0d:6f:a3:57:a3:d5:98:e5:97:06:76:9e:0b:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CF:7E:9D:04:11:30:75:AA:E0:F8:E9:FB:BB:69:97:C7:C6:64:BF
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b9:ac:9e:f7:5d:09:76:f7:3a:81:06:3c:b6:d7:27:f8:8a:
a8:14:66:68:38:b4:48:4e:a5:94:e5:e3:49:45:95:08:4d:3d:
37:d2:64:95:06:2e:d8:28:7d:14:51:d4:db:ce:ff:b8:bb:aa:
59:8a:54:de:c1:07:c9:2b:06:6f:d9:d3:a1:ff:60:42:ef:83:
bc:d7:96:6d:32:67:b3:34:c4:4c:b1:92:f7:6c:49:39:f9:58:
e3:bf:1e:03:b8:09:cb:3a:67:8b:d6:3f:dd:2e:58:8e:da:5a:
ba:91:67:f1:15:ec:b8:8f:69:f8:42:8e:5b:69:64:ac:65:5c:
e9:92:6d:6b:77:5d:d6:b6:0e:b5:ee:16:c5:50:b6:5b:9d:3e:
6e:a5:39:42:9b:dd:b0:63:47:d7:f9:86:3a:2e:0f:6f:73:58:
e7:0b:c1:5d:c1:a1:63:1b:cb:63:15:85:ab:30:e7:d6:9c:0a:
18:3b:12:00:16:6a:7a:f5:ca:4c:e8:d9:7b:47:0c:40:2e:dc:
fb:41:1c:c8:a2:96:40:1b:59:09:c7:34:f0:fd:55:60:c0:56:
01:6e:f7:e3:4a:fd:a3:c7:48:79:83:00:21:aa:e6:5b:df:1f:
b3:24:fc:30:f3:67:e2:3c:11:bf:49:91:9a:8b:08:ec:e1:38:
9a:a5:e6:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzBMz/fpN5zqv/4X52vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2Y0ZDUzZWQ1YzBhNGJkM2ZlMjQyMjAxYTk2NjY1NWM4
MGNjMGUwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
EyhlZGNmN2U5ZDA0MTEzMDc1YWFlMGY4ZTlmYmJiNjk5N2M3YzY2NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxvMitflrUbQdg3mg6hz9gwgUpp9
VpJecW4g0tYsR1fHGCuF3teCH3SzdGOOg1yA9QIEDVyufm/kwbzlvUW9WGWgaYgU
QkxPQRuy19L0Cy3Fy+BdcdyWYmguYq2ihrI2M2+SeCv7R6OUpU34xnefcxNl3Gyb
2WSDve9AkrVR9G3U0Q7Ymbd9iiNjxKEQ0oI7iu/euQofJ3BxwoBWZJwvelmC6M7y
+Wp2qGgln8fBVmZJSSlcF/P9LfmGhJtYkTdEmaJB+6EOjR0bHefA3fEW3IU+0IUp
eeJF4neePQyGFK47J0k7hJQapF4Yjwx5HTptHQ1vo1ej1ZjllwZ2ngvXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Pfp0EETB1quD46fu7aZfHxmS/MB8GA1UdIwQY
MBaAFCbPTVPtXApL0/4kIgGpZmVcgMwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAt
YTc4OGZkYzcwOTQ4LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAtYTc4OGZkYzcwOTQ4
LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7msnvdd
CXb3OoEGPLbXJ/iKqBRmaDi0SE6llOXjSUWVCE09N9JklQYu2Ch9FFHU287/uLuq
WYpU3sEHySsGb9nTof9gQu+DvNeWbTJnszTETLGS92xJOflY478eA7gJyzpni9Y/
3S5YjtpaupFn8RXsuI9p+EKOW2lkrGVc6ZJta3dd1rYOte4WxVC2W50+bqU5Qpvd
sGNH1/mGOi4Pb3NY5wvBXcGhYxvLYxWFqzDn1pwKGDsSABZqevXKTOjZe0cMQC7c
+0EcyKKWQBtZCcc08P1VYMBWAW7340r9o8dIeYMAIarmW98fsyT8MPNn4jwRv0mR
mosI7OE4mqXmGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:33 2026 by rpki-client