Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: NKPwEALv+wQ+SK50vq+elCpH9qiw9uGit0YG0EX/1Lk=
Subject key identifier: 1D:55:3E:98:4A:F8:20:E6:5C:27:0B:0E:D8:33:5C:8D:D0:2F:B0:57
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019E1D911F39520AC56E1FAF1AE6C59C6F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 07CC
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: sZ9vcZtgD3dW5RwrBTQK3kxnI1PWpqj+iU551QmJ7Xw=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1f:39:52:0a:c5:6e:1f:af:1a:e6:c5:9c:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=1d553e984af820e65c270b0ed8335c8dd02fb057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d4:d2:75:2f:c6:24:fa:f6:19:9c:be:34:e5:
e0:ee:2f:36:bf:d9:fc:c6:a9:83:e0:4c:31:47:3b:
5c:19:74:a4:98:0b:fb:6f:3d:0d:ff:99:5e:d7:b4:
79:55:a3:3b:b5:62:7f:ea:cd:28:aa:91:26:8d:67:
ae:d5:38:d5:42:64:b0:76:41:f1:0a:7e:08:12:a5:
59:ac:bd:ef:8b:27:9e:35:c1:a5:c4:58:15:8f:13:
57:fe:ee:e3:46:dc:d6:5a:7f:4f:be:82:20:00:58:
e9:c7:74:e4:18:f6:59:10:55:95:e1:5e:d0:4d:23:
cd:6a:3a:ac:94:51:d2:ca:a9:d3:ab:6a:87:f2:3a:
ac:9f:6c:06:7e:08:9d:7c:04:9e:4e:da:32:0d:30:
2b:ec:7f:22:27:e3:99:a0:27:6a:d2:c5:b1:97:81:
9d:8f:d5:f2:4b:6f:ca:9c:4a:9a:f2:f8:6a:6a:2c:
6e:71:0e:f5:0a:10:45:67:b2:da:19:28:24:e0:77:
bf:36:34:5c:ea:9b:2a:26:71:86:a5:f1:a9:5a:df:
93:3a:27:be:b1:f7:87:99:e9:1e:51:56:df:a7:58:
e9:a0:52:76:e3:24:fa:10:59:6b:34:16:c1:e9:65:
b0:ed:69:ca:2c:08:17:37:12:37:f7:aa:d5:15:e7:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:55:3E:98:4A:F8:20:E6:5C:27:0B:0E:D8:33:5C:8D:D0:2F:B0:57
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4b:2c:91:f8:24:e8:5f:db:e7:9a:f9:a4:29:77:4d:9e:33:
d3:cb:a6:4f:99:e9:c3:db:bf:43:c9:f3:67:da:99:23:91:c9:
bc:3d:3b:12:6c:4b:8d:a6:9d:1a:d9:87:6c:8d:60:83:64:ca:
02:e6:a0:e6:8a:31:76:34:dd:cf:68:7b:2d:86:ce:9d:7e:9e:
0d:f7:88:12:a5:41:c7:d8:30:29:ca:eb:01:a7:7e:50:4b:a0:
17:5c:93:a1:c8:e5:6b:24:3b:f0:ff:7c:84:35:40:8d:59:b4:
f4:f3:af:48:45:65:28:1f:2a:bc:4b:f6:05:4b:3c:5b:5a:fe:
71:45:07:ff:52:37:f0:70:34:b8:c8:d5:3a:3c:f1:1b:29:26:
43:2b:88:fd:65:fd:4b:d5:d2:0e:77:4e:9d:77:89:15:cb:7c:
c8:f3:ac:67:fa:b2:3b:ef:58:37:3a:33:5f:bb:e3:0c:e5:e1:
4b:88:cf:a0:a1:97:e2:65:63:1b:66:c4:4e:73:66:81:a0:64:
91:05:19:54:0d:f2:4d:6c:98:b0:3e:21:a1:da:6b:04:47:1f:
f9:e4:c5:2a:c2:5f:fd:71:aa:89:bb:36:57:fa:3a:d9:2b:d3:
ef:bb:7e:9d:08:d3:35:23:fb:3a:74:b6:49:5c:35:89:88:76:
98:f3:75:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkR85UgrFbh+vGubFnG9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw
YWFkMmYwHhcNMjYwNTEyMTkwMTUwWhcNMjYwNTEzMTkwMTUwWjAzMTEwLwYDVQQD
EygxZDU1M2U5ODRhZjgyMGU2NWMyNzBiMGVkODMzNWM4ZGQwMmZiMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79TSdS/GJPr2GZy+NOXg7i82v9n8
xqmD4EwxRztcGXSkmAv7bz0N/5le17R5VaM7tWJ/6s0oqpEmjWeu1TjVQmSwdkHx
Cn4IEqVZrL3viyeeNcGlxFgVjxNX/u7jRtzWWn9PvoIgAFjpx3TkGPZZEFWV4V7Q
TSPNajqslFHSyqnTq2qH8jqsn2wGfgidfASeTtoyDTAr7H8iJ+OZoCdq0sWxl4Gd
j9XyS2/KnEqa8vhqaixucQ71ChBFZ7LaGSgk4He/NjRc6psqJnGGpfGpWt+TOie+
sfeHmekeUVbfp1jpoFJ24yT6EFlrNBbB6WWw7WnKLAgXNxI396rVFefj1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1VPphK+CDmXCcLDtgzXI3QL7BXMB8GA1UdIwQY
MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt
ZjRkMzBhNzk0M2Y2LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2
LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwksskfgk
6F/b55r5pCl3TZ4z08umT5npw9u/Q8nzZ9qZI5HJvD07EmxLjaadGtmHbI1gg2TK
Auag5ooxdjTdz2h7LYbOnX6eDfeIEqVBx9gwKcrrAad+UEugF1yTocjlayQ78P98
hDVAjVm09POvSEVlKB8qvEv2BUs8W1r+cUUH/1I38HA0uMjVOjzxGykmQyuI/WX9
S9XSDndOnXeJFct8yPOsZ/qyO+9YNzozX7vjDOXhS4jPoKGX4mVjG2bETnNmgaBk
kQUZVA3yTWyYsD4hodprBEcf+eTFKsJf/XGqibs2V/o62SvT77t+nQjTNSP7OnS2
SVw1iYh2mPN1Ig==
-----END CERTIFICATE-----
Generated at Wed May 13 03:53:47 2026 by rpki-client