Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: jb+fuIbM+uNlpl+Xf+K7ULxLgzBIPtWBkAnn+0h2nyc=
Subject key identifier: 5A:A0:CF:DD:FA:57:35:4C:39:AA:21:10:DA:F8:43:FA:5C:DC:82:07
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019D9A74C78482AF97C3258F2F19365148BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 08:00:37 +0000
Manifest this update: Fri 17 Apr 2026 08:00:37 +0000
Manifest next update: Sat 18 Apr 2026 08:00:37 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: 69GJD/RdPWJskn1M6SR88m1dAqYjBt8pK/pZ8AP/pW8=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c7:84:82:af:97:c3:25:8f:2f:19:36:51:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Apr 17 08:00:37 2026 GMT
Not After : Apr 18 08:00:37 2026 GMT
Subject: CN=5aa0cfddfa57354c39aa2110daf843fa5cdc8207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:df:1a:b7:c0:8c:91:e1:5d:64:11:d2:1d:
40:34:76:86:b3:76:3f:8e:63:c4:4e:e8:45:5a:b4:
32:38:e1:5e:5a:2c:02:3c:c5:b6:a6:9f:9e:c7:c7:
2b:86:2a:5a:a8:70:03:54:3c:f3:24:fb:b9:56:80:
c0:62:6d:76:7a:f9:ab:1b:fd:5f:cb:d8:76:1b:d1:
4c:22:b9:4a:d6:5b:53:0e:0b:ee:26:8a:f2:c0:be:
b7:ec:40:89:94:e2:d5:bd:cb:d8:9d:cc:cd:8f:cd:
83:0d:88:a7:11:95:b5:25:8e:73:b7:1c:f7:8e:01:
30:28:a9:82:df:3b:fc:37:b8:0d:4d:63:cf:98:93:
2f:dd:89:9d:e5:2d:b1:ca:aa:ee:98:5d:4e:85:4f:
cc:54:3f:55:83:46:b1:dc:97:0a:e7:e6:2f:34:73:
60:9d:46:e9:dd:bb:32:f5:8a:85:c9:4a:dd:ed:56:
a7:2c:cf:fa:9c:5b:12:a3:93:a9:c1:69:d0:5a:f8:
01:5a:8a:36:4b:60:5f:4c:74:28:8a:b2:84:f2:76:
67:24:06:34:c6:24:da:6b:b1:82:85:f2:85:2c:f7:
34:de:e3:e9:a8:8d:0a:ab:57:b3:f2:ac:10:45:68:
f2:86:a1:82:bf:11:db:c2:03:b8:eb:78:8e:1d:20:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:CF:DD:FA:57:35:4C:39:AA:21:10:DA:F8:43:FA:5C:DC:82:07
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:9a:f0:9e:a5:5c:1c:b5:03:d8:e7:8f:c4:0b:05:3e:f5:
2d:31:6c:62:60:57:47:58:42:71:13:a4:97:9b:c7:98:ba:e6:
46:65:19:6d:91:8f:fe:65:5e:bf:29:1b:ff:08:37:cd:ec:50:
0c:10:b5:9d:17:5b:86:9b:28:6c:78:2e:4b:c1:92:fe:fc:8f:
83:02:3a:39:2b:23:88:6f:e9:27:ac:19:2b:7a:89:6e:7e:fb:
ce:cb:ef:34:ef:68:1b:c6:e1:4a:aa:f1:dc:9a:d6:31:e4:4a:
7f:7a:d5:ed:d5:28:e9:b7:11:95:fc:c2:00:a4:1a:84:85:27:
a2:2d:b5:1e:4c:49:53:bc:15:c4:7a:53:e9:4a:fa:7d:eb:25:
47:25:b4:09:8d:d0:72:3a:8e:df:a9:6f:28:18:b8:5f:9a:f6:
72:75:5a:ab:cd:44:4a:3f:e2:52:34:9b:3d:42:c6:4e:f4:e7:
47:a4:79:05:6c:ac:99:38:15:94:31:b9:06:96:c6:fb:b7:c2:
f8:43:cb:72:90:ca:0e:59:27:f3:70:7e:1e:b6:ec:7f:23:cd:
ab:46:96:5d:ba:3c:12:64:49:33:33:19:77:67:f0:09:d6:0f:
d0:79:fb:51:05:08:af:8b:5d:80:4b:d3:d7:df:37:db:f0:1a:
e6:04:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:49:10 2026 by rpki-client