Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: 75ni0HTa3iN9/qBg1fHsQQJ5gs6wasMzRcfQOhsMprU=
Subject key identifier: FA:CF:EF:54:13:11:50:BB:40:32:55:EB:18:A3:17:C7:65:F5:7D:30
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019D26CCBA3D1C0180EFD55CD414526FBBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0D03
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: FbQ9gg85Y5Qx602ZBVh6YkaLcXs.roa (hash: T391+Idz7L3dve/E2xgopb1fIMnjsWpWTFaXJBaoxCg=)
2: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: HudhqGerpNVoFBgcWUbMgm+eXz8YG5fWA6OPTi87xUA=)
3: LeJNm1ZK5iVV3SsDbJERcUuUUyU.roa (hash: YZLLMnJFDKGZDywuXIt3IlZ5Tc81OdOTnXuXJJ8sLok=)
4: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (hash: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ba:3d:1c:01:80:ef:d5:5c:d4:14:52:6f:bb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=facfef54131150bb403255eb18a317c765f57d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:fb:e3:7b:52:b6:0c:75:a6:81:a0:a5:53:
86:f2:2e:b3:e6:66:85:60:72:96:41:a8:4c:5f:95:
10:ac:1e:f5:fd:b8:0a:13:23:60:ec:dd:da:43:33:
93:1b:c9:e0:1b:e2:77:41:c7:ad:de:b1:f7:51:e3:
4a:94:66:31:28:88:1b:c0:2b:80:05:bc:67:52:06:
a5:72:4a:7b:8b:22:a4:ad:61:32:1e:f7:93:58:cc:
10:cd:a2:89:13:3c:9c:23:34:98:b5:43:63:5a:e5:
55:48:84:f0:f1:c3:d1:6b:14:be:cd:b6:64:4b:9f:
c4:81:d8:06:ab:34:c7:9b:60:cd:42:2b:53:6d:c5:
17:e2:ae:98:0d:09:8e:ff:4f:cd:46:34:ee:56:41:
17:9b:93:43:19:1d:d4:be:4f:5e:0f:32:0b:31:30:
e4:4f:47:8e:dd:94:cd:73:09:8e:e6:8d:3b:11:a6:
8e:c1:ab:cd:ba:0b:8a:75:e0:78:68:4f:ea:8d:36:
95:48:92:52:0f:d1:5b:95:c7:21:4f:cf:1c:86:ab:
64:23:76:aa:40:03:c2:7a:e0:b4:5e:cc:05:96:a2:
18:92:a7:16:71:c0:8f:0a:b0:73:45:84:ef:ed:bb:
be:13:54:87:b3:03:5b:1b:cf:6a:2d:9f:31:44:87:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:EF:54:13:11:50:BB:40:32:55:EB:18:A3:17:C7:65:F5:7D:30
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:49:e6:77:77:c8:5f:e1:7c:07:a1:88:31:2d:6c:a5:76:
fc:33:87:d3:47:bc:38:f8:55:df:4e:92:8e:82:73:37:f7:25:
c0:1c:6a:7a:ea:12:6d:ea:28:89:fc:94:c1:8c:03:82:aa:0d:
30:49:f3:b9:90:d9:39:26:43:04:9b:91:f3:71:51:5e:eb:6c:
68:3e:44:46:71:c6:a5:d5:99:cc:e5:05:39:3a:db:19:16:10:
ef:1f:f7:83:17:78:df:9c:8a:e4:cd:5f:53:6d:40:80:cb:9e:
95:6f:7e:20:f0:8e:7e:2b:16:49:d4:37:0d:f2:01:df:95:1a:
d6:80:f9:84:b3:d5:3d:74:e8:5a:7b:de:ec:14:37:c4:64:d0:
06:1c:44:47:74:a1:bc:b6:00:cc:96:8a:87:03:aa:26:45:3a:
7f:5a:ff:c4:ce:e3:de:1a:90:1f:e7:69:43:2e:b0:17:d2:74:
b8:79:69:64:7a:4e:48:ae:12:42:8d:59:ed:cd:90:9a:90:e6:
b1:f8:a1:53:36:3f:98:b9:9d:7e:2e:2d:b9:5b:31:b2:f9:ec:
96:19:98:b7:82:16:e5:d1:14:5c:d6:0b:c3:28:05:9b:25:5b:
f5:ce:ea:bd:ed:69:7c:f1:4f:b5:cf:be:2e:d2:1f:fb:52:dd:
11:3e:1d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzLo9HAGA79Vc1BRSb7v1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjYwMzI1MjEwMDQ0WhcNMjYwMzI2MjEwMDQ0WjAzMTEwLwYDVQQD
EyhmYWNmZWY1NDEzMTE1MGJiNDAzMjU1ZWIxOGEzMTdjNzY1ZjU3ZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvb743tStgx1poGgpVOG8i6z5maF
YHKWQahMX5UQrB71/bgKEyNg7N3aQzOTG8ngG+J3Qcet3rH3UeNKlGYxKIgbwCuA
BbxnUgalckp7iyKkrWEyHveTWMwQzaKJEzycIzSYtUNjWuVVSITw8cPRaxS+zbZk
S5/EgdgGqzTHm2DNQitTbcUX4q6YDQmO/0/NRjTuVkEXm5NDGR3Uvk9eDzILMTDk
T0eO3ZTNcwmO5o07EaaOwavNuguKdeB4aE/qjTaVSJJSD9FblcchT88chqtkI3aq
QAPCeuC0XswFlqIYkqcWccCPCrBzRYTv7bu+E1SHswNbG89qLZ8xRIfGBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrP71QTEVC7QDJV6xijF8dl9X0wMB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbJJ5nd3
yF/hfAehiDEtbKV2/DOH00e8OPhV306SjoJzN/clwBxqeuoSbeooifyUwYwDgqoN
MEnzuZDZOSZDBJuR83FRXutsaD5ERnHGpdWZzOUFOTrbGRYQ7x/3gxd435yK5M1f
U21AgMuelW9+IPCOfisWSdQ3DfIB35Ua1oD5hLPVPXToWnve7BQ3xGTQBhxER3Sh
vLYAzJaKhwOqJkU6f1r/xM7j3hqQH+dpQy6wF9J0uHlpZHpOSK4SQo1Z7c2QmpDm
sfihUzY/mLmdfi4tuVsxsvnslhmYt4IW5dEUXNYLwygFmyVb9c7qve1pfPFPtc++
LtIf+1LdET4dsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:38 2026 by rpki-client