Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: LMMuRed1xWGNFO5gBU+dUbMj9FgshNlV9SRfxOFig+o=
Subject key identifier: F0:29:89:34:F4:D7:3B:2F:17:A3:0F:09:25:A6:8C:3D:76:36:44:3F
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019D996269025C411FA26CC42CEF6E339B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1844
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 8P7bUfaRiBfoAMDV69ldnXL9cTGZ6pPjIVvRm5Cx2G4=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:69:02:5c:41:1f:a2:6c:c4:2c:ef:6e:33:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=f0298934f4d73b2f17a30f0925a68c3d7636443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:57:12:9f:90:40:ae:9a:8c:a6:3e:d9:cf:
ab:0c:51:2f:44:52:55:f7:9b:29:a8:64:30:00:97:
6e:45:d0:cc:43:79:94:4a:36:88:c7:2c:50:0a:6a:
87:f0:98:3d:49:52:43:ea:41:3c:e1:9e:44:77:e7:
3a:79:f0:42:c0:18:fc:8c:07:96:4b:36:f7:94:77:
71:29:7b:b5:85:94:e5:9a:d5:d8:6d:f8:c5:be:89:
25:d1:58:c0:b2:39:b7:35:ce:85:e7:a6:5d:d7:c3:
c5:d0:19:32:9f:ca:f2:97:bc:d6:c7:84:16:bc:06:
15:4d:a6:b2:5d:d8:6c:2a:b7:38:74:71:8c:12:db:
c7:18:5b:71:67:27:d7:59:eb:0e:90:a3:e2:3f:e7:
53:bc:47:5a:e3:46:cb:a8:81:19:94:2d:9a:1a:f1:
84:36:19:69:65:a6:34:d0:4e:e1:31:d4:b3:b1:92:
da:a0:f7:b7:df:d2:a3:6f:fe:17:74:60:c6:2c:cd:
a9:5d:e3:49:07:98:29:a2:41:93:c8:9f:67:17:ea:
49:4e:69:a2:76:5f:4b:aa:d6:b6:09:b2:7c:2f:bc:
35:44:e3:a6:37:48:1b:9e:5f:ab:52:3c:66:1b:f6:
6e:8f:c7:72:0d:c0:47:4e:b0:75:ca:9e:19:61:cd:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:89:34:F4:D7:3B:2F:17:A3:0F:09:25:A6:8C:3D:76:36:44:3F
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d8:43:e8:f2:14:f3:8d:45:0a:4e:a2:85:ed:03:07:7c:aa:
6d:a7:c7:48:d7:33:84:65:c1:95:8f:24:86:5c:0c:e7:d8:b7:
bf:b7:1b:2f:3f:7b:0f:dc:e9:6e:b0:9f:77:ee:48:6d:cd:bf:
00:bf:f1:e4:48:1f:4a:22:54:39:3b:ba:1b:84:70:9a:f5:4b:
78:2a:44:73:0a:c9:02:89:19:e8:c5:3c:52:38:bd:93:8b:62:
60:69:d6:ae:4d:88:9b:0d:07:2c:24:c6:85:b0:12:e0:c4:d6:
e9:48:1c:b5:cb:90:8c:7e:b8:12:09:08:3e:ee:43:e5:42:08:
c5:56:4c:a1:12:fd:e5:6c:33:73:2f:01:53:b2:57:df:5a:e1:
86:79:83:14:9e:fb:ed:b8:4f:21:74:33:53:25:62:f1:49:5e:
58:cc:0c:a3:2f:23:40:0d:09:b5:34:bc:d0:0d:8e:eb:43:cf:
f8:df:d4:4c:03:a9:12:8f:63:4a:c3:0b:49:c1:60:9e:c7:d5:
da:c0:41:f9:37:45:36:71:43:ef:3b:ad:7e:12:54:8a:4d:8b:
b3:25:c9:78:14:af:f5:42:94:1f:f0:81:ae:9d:d8:8e:f7:33:
17:fa:22:e9:a9:71:36:71:37:74:03:b8:b6:61:aa:a9:49:23:
3a:dd:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:12 2026 by rpki-client