Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: Oh+iUScNVV0CvE79lhzbBY/NfdWMTOLBlWEy4QTQ8Sk=
Subject key identifier: E5:E7:FF:F1:CC:C2:A1:58:E1:01:51:35:23:A6:C2:A0:3F:84:73:07
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019DA3E5D393D74F0FDDB2ADD5260834A5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 1A
Signing time: Sun 19 Apr 2026 04:00:41 +0000
Manifest this update: Sun 19 Apr 2026 04:00:41 +0000
Manifest next update: Mon 20 Apr 2026 04:00:41 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: 2O5aNuxrU6RgMMVNgsGOq9Hw/bIqWxq+Q7BDS6uYSf0=)
2: Jhd8dVo4qeXLNKgQxWEaEIThO1U.roa (hash: Kzdyj7wpQhhcqBAlT0S5dvR8EKgyhHXnHpsN0XUZRx4=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:d3:93:d7:4f:0f:dd:b2:ad:d5:26:08:34:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Apr 19 04:00:41 2026 GMT
Not After : Apr 20 04:00:41 2026 GMT
Subject: CN=e5e7fff1ccc2a158e101513523a6c2a03f847307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:71:dc:09:52:c7:38:3d:b8:84:66:a8:1a:
8c:cf:eb:71:e8:32:4d:0c:a9:eb:43:6a:5e:88:91:
0e:1d:2a:00:31:03:31:c8:c3:9d:d8:86:8e:d4:82:
7c:4b:33:40:dd:2e:b8:aa:31:bd:7e:2b:10:33:85:
db:cc:10:a5:90:95:c1:09:14:25:69:33:a1:e3:d3:
f6:73:c5:ca:bf:89:d2:08:ab:e1:f4:43:21:94:0c:
97:36:aa:ef:f7:25:cd:9f:aa:8b:ee:22:03:f5:0c:
88:63:9d:bb:a9:35:39:96:00:fd:9b:18:d3:1c:31:
3a:43:ac:5c:b0:1c:ec:6f:80:fd:ee:83:58:94:77:
0c:1f:5b:8f:f8:d0:5b:c3:bb:87:8f:73:a0:7c:27:
ff:f3:a1:e3:40:92:50:5c:02:91:b3:9c:93:06:8b:
ba:6b:2c:9d:0f:db:a7:1f:a3:2b:ef:c2:8f:b4:09:
8b:20:51:3e:f8:27:ee:97:f4:a1:12:6a:78:0e:64:
9c:b7:5c:a5:bc:00:bd:88:42:00:14:21:7e:3a:3a:
1e:fc:ad:34:a7:ab:0c:46:2b:10:34:91:5f:4f:8c:
05:1a:36:c2:76:5a:8e:cf:8e:61:ec:e3:c7:d4:48:
22:7b:f1:e1:b8:58:ad:be:70:4a:bd:ec:16:ca:21:
f4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E7:FF:F1:CC:C2:A1:58:E1:01:51:35:23:A6:C2:A0:3F:84:73:07
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e8:ab:61:2e:8a:e8:37:7b:9c:dc:13:be:f0:14:37:06:96:
07:23:b5:24:af:e4:e9:04:3c:d2:22:5d:2a:63:37:f9:e0:04:
9b:9e:d8:6d:ce:79:1f:c2:cc:0c:3b:6f:ab:ed:a6:2e:b0:25:
4f:b7:f1:4f:fa:e5:65:22:86:ad:57:f3:18:bb:cb:6d:1a:fc:
5c:64:19:a6:cf:0e:d4:a6:ae:bb:48:42:0c:07:9b:3e:89:d5:
c1:bb:c0:88:d5:5b:8d:2e:25:b7:b2:85:1d:7f:07:ca:29:2c:
c3:c0:28:f7:bb:89:96:fc:c5:ce:06:a3:b1:3f:1e:fd:16:48:
29:99:38:b3:26:cc:1d:04:c7:54:85:92:e9:f0:ea:2b:5b:c6:
ed:a6:48:b8:bd:0f:8e:67:09:00:a1:1d:01:5d:54:ac:87:03:
5a:c1:0d:93:1b:5d:84:b1:19:25:35:df:87:cb:ce:19:e0:a4:
6d:28:73:5d:2b:3c:96:ed:b9:64:a3:32:79:af:90:b0:ee:ad:
4c:05:d1:8c:e1:5a:f5:f7:63:60:09:77:db:48:3f:c8:71:fc:
25:09:43:27:1b:03:5b:69:c2:86:91:73:55:84:fa:26:ef:18:
61:9e:91:7b:76:f5:d5:5c:d4:cb:ab:25:a0:5d:a3:97:57:b3:
16:e8:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:39:25 2026 by rpki-client