Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: JFbY1hlf09zsS70+ON4L06YH894jI6PJHl0vck9hvGc=
Subject key identifier: 68:BF:14:DB:B0:19:EF:EC:B8:4A:43:67:41:98:FA:46:74:F4:B3:F9
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019D25BA51FCE44129959C9015E1FFF0B144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1251
Signing time: Wed 25 Mar 2026 16:01:00 +0000
Manifest this update: Wed 25 Mar 2026 16:01:00 +0000
Manifest next update: Thu 26 Mar 2026 16:01:00 +0000
Files and hashes: 1: 4xXEgGHm6FNEvzXSZMYA4CB15Xo.roa (hash: kLRMqyoKtLNzDHMHuXXnJpKSX1vsJYZPpStvOsdpbkA=)
2: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: IVNeIjhY6L8fvgGsbDA5YAAJ/AM76hy0EXG5R307+Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:51:fc:e4:41:29:95:9c:90:15:e1:ff:f0:b1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Mar 25 16:01:00 2026 GMT
Not After : Mar 26 16:01:00 2026 GMT
Subject: CN=68bf14dbb019efecb84a43674198fa4674f4b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:06:88:9f:7e:00:40:38:b3:fd:fd:df:ee:
ba:3d:cf:72:77:b3:24:5f:63:b1:ae:70:5f:2d:ba:
33:1c:c2:b4:22:40:95:57:5b:90:94:d6:24:76:a0:
ff:80:ea:d4:76:dc:f7:43:0d:b3:5b:9a:4d:bc:12:
24:b2:74:3b:ca:e3:82:73:6b:a7:68:7d:9f:c0:a3:
29:fe:24:d6:75:24:e4:f1:de:b2:92:0b:49:bb:44:
28:0d:a5:d4:80:76:ac:6e:f2:c5:46:4e:fd:88:79:
1c:2c:56:09:e3:f1:d5:8a:11:81:9d:52:a5:cc:14:
0b:1c:b3:ba:5c:27:06:90:0f:71:17:7b:6d:dd:f5:
e8:f3:5d:11:6e:ee:48:af:ee:0c:31:f6:19:c5:ab:
ed:a8:fb:db:9d:f1:c0:ea:7e:b5:24:9b:d7:99:93:
d2:d6:84:97:ac:13:21:e7:6b:bb:89:f7:40:68:05:
0a:8d:72:d9:6d:74:0b:29:7c:52:2e:cb:f7:05:d9:
4b:cd:cc:27:4b:ac:71:fc:ba:2e:65:88:7a:62:92:
3a:a9:91:f2:d2:43:e3:1a:cd:24:f9:17:7e:3b:50:
ef:8d:3e:c7:ef:2c:0b:3b:72:49:69:1e:1a:37:4d:
e1:56:bb:c5:30:cd:c9:e7:e3:ab:55:13:24:38:66:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:14:DB:B0:19:EF:EC:B8:4A:43:67:41:98:FA:46:74:F4:B3:F9
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d7:a3:3f:f4:ea:08:a9:d5:ac:49:5a:4d:61:53:fc:a2:fc:
8f:c5:7e:ce:c5:54:55:50:d8:3b:19:bf:30:7d:8b:8b:cf:31:
0d:c6:7b:d7:7b:83:1b:dc:c9:2c:3b:fe:8a:2c:57:b7:1c:f9:
20:36:16:65:c6:58:27:7c:4a:f2:d0:fb:7e:14:b4:b2:cc:ef:
9e:a1:24:02:ca:40:92:4b:b5:e2:f4:f4:f5:23:40:40:00:6e:
32:11:1a:21:d8:7a:5d:fa:1d:f7:d0:52:56:f1:f3:a2:30:5a:
92:14:0f:39:0f:7a:02:54:2f:32:f3:6c:81:4a:13:cb:41:d8:
e9:39:f6:7c:da:52:20:91:58:7d:31:be:b6:32:6f:84:4e:e0:
02:90:44:1d:3a:41:95:f4:34:3e:18:ee:e7:57:c5:3b:8b:3b:
68:0a:df:11:96:0b:da:8d:5c:2b:1b:e0:dc:7c:a1:9a:a3:fe:
47:c4:4a:69:1a:53:10:eb:3d:9d:10:bb:7f:80:7c:79:72:ac:
05:95:04:5e:df:aa:73:a8:4d:2b:27:a4:df:35:52:e3:88:fc:
35:88:89:d3:b9:e8:37:d5:b5:61:19:bb:66:52:0c:1d:de:ba:
af:df:97:ef:45:da:70:d7:74:13:c9:44:37:22:12:d2:b0:ca:
05:92:72:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lulH85EEplZyQFeH/8LFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm
ZDk4ODkwHhcNMjYwMzI1MTYwMTAwWhcNMjYwMzI2MTYwMTAwWjAzMTEwLwYDVQQD
Eyg2OGJmMTRkYmIwMTllZmVjYjg0YTQzNjc0MTk4ZmE0Njc0ZjRiM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtswGiJ9+AEA4s/393+66Pc9yd7Mk
X2OxrnBfLbozHMK0IkCVV1uQlNYkdqD/gOrUdtz3Qw2zW5pNvBIksnQ7yuOCc2un
aH2fwKMp/iTWdSTk8d6ykgtJu0QoDaXUgHasbvLFRk79iHkcLFYJ4/HVihGBnVKl
zBQLHLO6XCcGkA9xF3tt3fXo810Rbu5Ir+4MMfYZxavtqPvbnfHA6n61JJvXmZPS
1oSXrBMh52u7ifdAaAUKjXLZbXQLKXxSLsv3BdlLzcwnS6xx/LouZYh6YpI6qZHy
0kPjGs0k+Rd+O1DvjT7H7ywLO3JJaR4aN03hVrvFMM3J5+OrVRMkOGbKTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi/FNuwGe/suEpDZ0GY+kZ09LP5MB8GA1UdIwQY
MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt
NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk
LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9ejP/Tq
CKnVrElaTWFT/KL8j8V+zsVUVVDYOxm/MH2Li88xDcZ713uDG9zJLDv+iixXtxz5
IDYWZcZYJ3xK8tD7fhS0sszvnqEkAspAkku14vT09SNAQABuMhEaIdh6Xfod99BS
VvHzojBakhQPOQ96AlQvMvNsgUoTy0HY6Tn2fNpSIJFYfTG+tjJvhE7gApBEHTpB
lfQ0Phju51fFO4s7aArfEZYL2o1cKxvg3HyhmqP+R8RKaRpTEOs9nRC7f4B8eXKs
BZUEXt+qc6hNKyek3zVS44j8NYiJ07noN9W1YRm7ZlIMHd66r9+X70XacNd0E8lE
NyIS0rDKBZJyEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:04 2026 by rpki-client