Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: CVIZUtKViyXBlsEnQoztcMrGpKQPXiL14jiyghQkuv8=
Subject key identifier: 21:4E:52:CE:8E:04:3D:74:0E:90:60:B0:C1:BE:DA:65:1A:5E:26:FE
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019D273AD68C8CEB38E1CAE0C0301F65E9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0AEB
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: WWbU/2kHaseR85hzXk/KYFkJnKRKM/ppS7BzS/UGw6c=)
2: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (hash: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d6:8c:8c:eb:38:e1:ca:e0:c0:30:1f:65:e9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=214e52ce8e043d740e9060b0c1beda651a5e26fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:e0:bd:95:76:da:81:73:ed:40:82:9d:cb:
7d:e5:40:07:6b:13:f4:25:fd:33:d2:03:fd:d1:96:
26:c3:2f:b9:1e:4a:23:c8:b9:17:8a:b4:a2:ce:5c:
db:be:04:92:72:d0:a2:0c:be:5f:07:d2:91:c7:d9:
d7:05:b7:9d:f7:ab:a0:4e:90:f3:48:9e:42:7a:b2:
0c:81:be:66:c1:42:48:9a:3d:63:7f:35:0e:9c:b3:
77:3c:76:03:3b:c8:62:2d:2c:5d:bf:7b:ec:ed:4d:
76:14:2e:29:5a:0d:69:f8:fc:be:95:05:25:c1:92:
f3:77:5e:c3:0a:f4:9d:e5:3f:1e:66:25:e5:4c:75:
ba:c9:73:bb:de:df:a9:4a:78:f3:85:44:07:25:47:
98:09:ad:08:7d:dc:f7:19:bc:0a:91:2f:de:a1:7d:
9c:03:dd:c0:27:20:72:59:6c:6b:af:00:d7:83:db:
57:7e:18:4a:91:7c:bd:d4:e3:96:5c:24:ea:42:73:
46:84:f0:1c:bc:8d:c6:2a:e4:33:0f:08:31:2c:90:
39:97:84:11:b4:4d:f7:80:0d:af:24:0a:d3:98:14:
7b:e5:aa:b7:4c:14:b8:9a:e2:ae:33:9c:83:4e:94:
24:75:e9:57:73:ba:c4:57:ac:a0:46:e2:02:b2:dc:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:52:CE:8E:04:3D:74:0E:90:60:B0:C1:BE:DA:65:1A:5E:26:FE
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4e:51:e6:1b:a0:ac:68:e4:12:d5:cc:de:21:3a:cc:bd:47:
cd:47:df:df:42:da:60:bb:9c:ba:79:06:b5:01:33:48:24:5a:
51:65:93:7b:4b:5b:82:b2:0c:c9:62:5a:19:0c:b4:28:6a:c4:
a7:3f:a3:55:42:cd:83:8e:f5:e7:ba:a5:ab:ed:2d:09:81:52:
6c:ba:15:14:3c:f2:f1:e6:62:32:a4:9a:9e:88:cd:f5:02:b7:
c1:79:3c:d2:28:a0:22:0b:06:ec:58:ad:cf:3a:65:93:8d:c5:
0d:a0:98:e4:ce:e6:79:81:0b:d2:ee:4d:e7:d5:80:28:61:f6:
81:2d:a3:28:83:8a:5e:d7:c5:41:a7:b0:26:1b:2f:c9:ba:42:
7c:c5:10:e2:85:ba:ac:a9:81:37:9a:c9:02:bf:8e:43:68:d7:
6a:3c:dd:ac:3c:71:86:29:7a:66:99:58:5b:08:f4:8b:4f:8e:
a4:76:00:18:0f:96:53:14:ad:a3:9b:3b:10:7a:a8:d1:33:75:
6b:3c:b7:53:45:2f:83:ae:69:0a:48:0b:99:f4:90:8f:66:b2:
d2:94:70:f6:31:8c:a0:01:21:24:b4:87:22:e7:ff:9d:8f:be:
dc:f7:32:66:13:87:fc:be:74:e9:b0:0d:f5:6f:a6:85:42:84:
7b:93:3f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtaMjOs44crgwDAfZentMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkwMTY3MjdjZWE5NDdiZGI0OGIzYTdkZTdlMjA3MWJl
NDU4MGEwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
EygyMTRlNTJjZThlMDQzZDc0MGU5MDYwYjBjMWJlZGE2NTFhNWUyNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyjgvZV22oFz7UCCnct95UAHaxP0
Jf0z0gP90ZYmwy+5HkojyLkXirSizlzbvgSSctCiDL5fB9KRx9nXBbed96ugTpDz
SJ5CerIMgb5mwUJImj1jfzUOnLN3PHYDO8hiLSxdv3vs7U12FC4pWg1p+Py+lQUl
wZLzd17DCvSd5T8eZiXlTHW6yXO73t+pSnjzhUQHJUeYCa0Ifdz3GbwKkS/eoX2c
A93AJyByWWxrrwDXg9tXfhhKkXy91OOWXCTqQnNGhPAcvI3GKuQzDwgxLJA5l4QR
tE33gA2vJArTmBR75aq3TBS4muKuM5yDTpQkdelXc7rEV6ygRuICstyjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFOUs6OBD10DpBgsMG+2mUaXib+MB8GA1UdIwQY
MBaAFCXZAWcnzqlHvbSLOn3n4gcb5FgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQt
YTM4ZGRhMTNhNjA4LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zY2M4OWUtNzZkZi00NmIzLTlmMTQtYTM4ZGRhMTNhNjA4
LzEvSmRrQlp5Zk9xVWU5dElzNmZlZmlCeHZrV0FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE5R5hug
rGjkEtXM3iE6zL1HzUff30LaYLucunkGtQEzSCRaUWWTe0tbgrIMyWJaGQy0KGrE
pz+jVULNg47157qlq+0tCYFSbLoVFDzy8eZiMqSanojN9QK3wXk80iigIgsG7Fit
zzplk43FDaCY5M7meYEL0u5N59WAKGH2gS2jKIOKXtfFQaewJhsvybpCfMUQ4oW6
rKmBN5rJAr+OQ2jXajzdrDxxhil6ZplYWwj0i0+OpHYAGA+WUxSto5s7EHqo0TN1
azy3U0Uvg65pCkgLmfSQj2ay0pRw9jGMoAEhJLSHIuf/nY++3PcyZhOH/L506bAN
9W+mhUKEe5M/7A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:31 2026 by rpki-client