Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: hVKQUtzP21KPXKWKtJoK99OYX7MnCUSzPQOCsmArrb8=
Subject key identifier: DD:C4:21:9F:AF:0F:53:ED:E6:47:C1:07:C8:06:FC:BE:8E:52:22:9F
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 019D9886280EABB3984043BF286D8E611DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:22 +0000
Manifest this update: Thu 16 Apr 2026 23:00:22 +0000
Manifest next update: Fri 17 Apr 2026 23:00:22 +0000
Files and hashes: 1: 39DTcMNKiRnZZh7clR3-Xg7LiNc.roa (hash: BV0YNi+He+COF6H5HCrpqupHZg4YCTyzm94qIT5wJPI=)
2: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: xXUAc8qfkaDS/efpccJNt0kMAKPfN+3dgLIzkiCejxs=)
3: ylHeIsFZMO0gbIKdKEHYveA-bkE.roa (hash: Q+/UUAinchPplGksAEDnZd30sKpg597qJT9SsZ+CONo=)
4: z_rlOiqBiGOKeFdRy89ys_JwXcM.roa (hash: RhetRJ3Zo1CzCaRPPa5jm5tpT048C/tX6ZCch0Ia1N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:28:0e:ab:b3:98:40:43:bf:28:6d:8e:61:1d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Apr 16 23:00:22 2026 GMT
Not After : Apr 17 23:00:22 2026 GMT
Subject: CN=ddc4219faf0f53ede647c107c806fcbe8e52229f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:7e:20:84:2a:79:ab:6f:c0:da:b4:8c:5b:
3c:0f:a8:ef:df:d9:0a:70:70:63:b2:39:ac:16:95:
76:2f:a9:a4:4e:26:2a:65:6d:e6:af:6d:36:1a:fc:
86:f6:a8:ee:39:74:cf:0f:dc:6d:5d:fe:07:dd:f8:
3a:a1:31:57:9c:1b:fc:41:26:50:c0:bf:48:58:20:
ca:fb:93:a1:c8:22:e7:30:1a:43:92:de:50:44:18:
be:6e:1e:6b:10:a0:d3:6c:f4:74:06:84:28:df:be:
00:03:74:fb:a1:1a:78:c5:a4:06:c2:91:50:3a:d9:
88:c3:0e:27:22:82:ae:d5:a9:5b:9e:33:34:db:8b:
64:36:57:48:4d:1b:2a:b4:91:88:d5:73:b3:60:8a:
57:86:30:67:e6:28:60:dd:05:a3:d5:e3:d0:bc:2d:
26:ec:73:30:08:33:1e:16:d8:b9:02:ad:3f:3c:4e:
9c:27:aa:74:0a:f4:6f:2b:8f:0b:35:3e:b3:a1:a5:
79:c0:72:cb:3a:cf:22:c7:23:e3:20:4e:77:c1:0b:
d2:c3:b3:fa:c2:6e:bd:10:77:eb:a7:28:a4:2f:8a:
1f:e5:56:b3:ef:67:7e:aa:44:d8:c0:4d:08:6f:32:
4f:78:9c:f4:3f:f6:a3:07:f0:0d:30:9a:0e:c1:af:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:21:9F:AF:0F:53:ED:E6:47:C1:07:C8:06:FC:BE:8E:52:22:9F
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d8:ad:88:53:45:7c:29:b3:ef:5d:52:9d:bb:f3:e8:cd:2b:
19:cf:ed:72:8f:d9:c6:4c:83:d7:9e:1e:57:b9:ea:62:23:d7:
4a:92:1b:22:e4:17:2d:51:66:55:95:10:a3:1d:b6:3a:66:aa:
4b:74:a4:fb:1b:20:c9:b8:3e:68:d2:c9:35:22:11:5f:58:02:
20:9d:00:cf:cc:0d:77:15:ab:9d:d7:3b:5c:b9:9a:4b:11:06:
b2:e4:dd:eb:5a:ee:11:c6:ba:38:b7:31:16:ad:41:91:cc:7e:
13:f9:ed:52:27:6d:9a:60:1b:70:48:28:7a:11:e8:d7:0a:ab:
3f:9f:8c:b1:dd:a9:87:3a:fa:0b:da:a0:3c:5d:4b:55:46:7a:
e0:1b:80:11:33:d8:4c:f7:aa:61:3d:1d:3f:db:eb:3f:06:46:
2b:f1:81:32:8f:2d:d2:e6:fb:b4:a3:fb:9b:9c:23:ac:a1:33:
31:e5:38:c0:7f:55:b4:d9:21:f7:32:d2:ce:3d:06:a9:9f:3f:
27:72:19:47:c1:1d:ac:c7:bb:2b:dc:44:05:7d:c8:09:8f:50:
1c:3d:db:3c:8e:be:27:9f:cc:5d:41:b5:3c:ef:6e:76:63:de:
97:15:b0:1c:4f:a4:8e:14:48:82:24:16:71:cd:15:0b:5c:bf:
a0:1d:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:52 2026 by rpki-client