Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: atRyIa18GodTVlon2VaXM59AAyZ5etjOKNI9Zh5bW5U=
Subject key identifier: 75:3C:A4:57:52:86:78:62:62:9C:02:47:A1:0E:D4:35:A9:D1:A7:A4
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019E21A405491B0DD126C5D5E609612BDCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 14EB
Signing time: Wed 13 May 2026 14:00:57 +0000
Manifest this update: Wed 13 May 2026 14:00:57 +0000
Manifest next update: Thu 14 May 2026 14:00:57 +0000
Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: Xu5/3MK3+BZTT09KlxyWr4ONAlDmAdQudr693EFYkCE=)
2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:a4:05:49:1b:0d:d1:26:c5:d5:e6:09:61:2b:dc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: May 13 14:00:57 2026 GMT
Not After : May 14 14:00:57 2026 GMT
Subject: CN=753ca45752867862629c0247a10ed435a9d1a7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:72:14:95:63:43:db:c9:5a:3f:dc:72:b1:
dc:ef:48:83:4d:e6:8b:2f:d2:c7:91:52:98:5c:75:
d6:45:3b:cc:2a:c7:f8:37:79:98:3c:77:21:8f:bf:
37:ef:e6:3f:9c:ae:30:b2:fa:c0:d3:38:d2:d7:9e:
ee:e8:34:99:e9:f4:81:17:e7:6b:69:2c:b5:96:d2:
fa:db:72:87:ac:13:d7:7d:31:6a:00:55:08:49:29:
b3:ec:33:ea:ff:03:fc:e6:cb:c3:15:b8:d6:1e:4f:
d3:b0:03:da:9e:d7:af:02:e2:91:ab:a7:07:0d:8e:
5c:94:f3:a2:c7:23:2d:cf:21:69:a4:af:a2:e5:c9:
2b:1c:4b:1e:12:07:db:4c:66:07:22:ad:72:c5:5e:
f2:3b:25:e3:7c:7c:a4:ff:14:74:57:f3:8b:21:09:
f9:33:ae:a0:26:b6:f1:55:a4:58:7e:65:3c:e0:36:
88:65:9b:49:bb:87:1c:c9:31:7f:ee:99:c1:34:86:
a1:71:89:79:5d:14:a1:a7:30:92:b0:9d:41:b3:92:
07:0d:f7:7a:93:0c:d5:5a:19:4e:ec:27:ea:30:8a:
bb:05:eb:f2:f3:95:9e:ea:e7:d4:33:ad:19:ff:c5:
78:ea:08:06:10:69:e3:4d:63:83:4b:6c:a7:e1:a0:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:A4:57:52:86:78:62:62:9C:02:47:A1:0E:D4:35:A9:D1:A7:A4
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:05:8b:ac:5c:a7:2b:23:d1:76:19:9e:2f:d8:58:54:e8:
8b:d3:c7:81:dd:65:b7:60:6c:54:75:06:ca:94:86:e9:ef:9d:
7b:a7:10:b5:7c:64:03:96:f0:9e:b9:1d:a2:b8:27:ba:cf:4a:
71:0a:20:69:45:60:a0:11:8e:7e:ce:b0:f3:5b:c5:62:39:d1:
cc:6f:19:82:7a:d2:ca:c3:25:cc:3a:b4:92:7f:b2:26:01:0d:
55:4b:ef:96:09:16:96:7f:5e:48:e3:d1:d3:2f:67:dd:dc:45:
5a:4f:d4:7b:ca:68:78:32:c0:28:d4:40:99:63:e8:33:c6:5e:
cf:d7:11:49:1d:94:b7:f9:e3:88:c2:9e:0c:a7:48:ae:2c:a2:
ab:91:33:9e:e5:c7:da:6d:96:f9:8f:21:11:fa:06:f2:fe:74:
87:98:8f:d2:f7:6a:68:f5:19:0e:1a:17:48:01:01:ea:77:4b:
0b:a5:9c:50:3f:aa:93:ae:34:48:f0:9f:2e:c0:17:1a:ec:fb:
b8:17:92:c8:b8:08:08:97:ca:cf:24:9b:1c:5a:30:4b:b7:7f:
6d:8f:00:f3:46:c8:79:c6:a8:f6:27:70:32:56:6d:4a:78:0c:
d3:7b:5a:bf:5f:f1:77:25:a2:37:3f:83:ed:dc:cd:58:36:ef:
3b:19:9c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hpAVJGw3RJsXV5glhK9ymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmIyOTgyYmJiZDQzOGI3YWIxYWMwNGUzNmMxODgwZjM4
YzZhZGEwHhcNMjYwNTEzMTQwMDU3WhcNMjYwNTE0MTQwMDU3WjAzMTEwLwYDVQQD
Eyg3NTNjYTQ1NzUyODY3ODYyNjI5YzAyNDdhMTBlZDQzNWE5ZDFhN2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/5yFJVjQ9vJWj/ccrHc70iDTeaL
L9LHkVKYXHXWRTvMKsf4N3mYPHchj7837+Y/nK4wsvrA0zjS157u6DSZ6fSBF+dr
aSy1ltL623KHrBPXfTFqAFUISSmz7DPq/wP85svDFbjWHk/TsAPantevAuKRq6cH
DY5clPOixyMtzyFppK+i5ckrHEseEgfbTGYHIq1yxV7yOyXjfHyk/xR0V/OLIQn5
M66gJrbxVaRYfmU84DaIZZtJu4ccyTF/7pnBNIahcYl5XRShpzCSsJ1Bs5IHDfd6
kwzVWhlO7CfqMIq7Bevy85We6ufUM60Z/8V46ggGEGnjTWODS2yn4aCgOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU8pFdShnhiYpwCR6EO1DWp0aekMB8GA1UdIwQY
MBaAFI4rKYK7vUOLerGsBONsGIDzjGraMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEt
ZGU4MWM3YzFlNzU0LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83MDNkZjItYjhiNC00OGY3LTkzMDEtZGU4MWM3YzFlNzU0
LzEvamlzcGdydTlRNHQ2c2F3RTQyd1lnUE9NYXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKoFi6xc
pysj0XYZni/YWFToi9PHgd1lt2BsVHUGypSG6e+de6cQtXxkA5bwnrkdorgnus9K
cQogaUVgoBGOfs6w81vFYjnRzG8ZgnrSysMlzDq0kn+yJgENVUvvlgkWln9eSOPR
0y9n3dxFWk/Ue8poeDLAKNRAmWPoM8Zez9cRSR2Ut/njiMKeDKdIriyiq5EznuXH
2m2W+Y8hEfoG8v50h5iP0vdqaPUZDhoXSAEB6ndLC6WcUD+qk640SPCfLsAXGuz7
uBeSyLgICJfKzySbHFowS7d/bY8A80bIecao9idwMlZtSngM03tav1/xdyWiNz+D
7dzNWDbvOxmcuA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:13:03 2026 by rpki-client