Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: nucQpukJwgFAAlT8XdfSdfo55SqWN/bdC1kXr2XrbaE=
Subject key identifier: 6A:84:AB:FC:CB:CD:60:15:E5:93:E7:53:F5:55:0C:FB:30:DB:8B:AF
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019DA29CBE1A605DCF08F12D2E1FA291E55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 1396
Signing time: Sat 18 Apr 2026 22:01:14 +0000
Manifest this update: Sat 18 Apr 2026 22:01:14 +0000
Manifest next update: Sun 19 Apr 2026 22:01:14 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: JCI4DbUk3pOcL53fYR9Cfzs57DOoZNYqFPxZEDlIeYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:be:1a:60:5d:cf:08:f1:2d:2e:1f:a2:91:e5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Apr 18 22:01:14 2026 GMT
Not After : Apr 19 22:01:14 2026 GMT
Subject: CN=6a84abfccbcd6015e593e753f5550cfb30db8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:46:a4:58:2c:71:b6:cb:66:5b:83:72:46:
6c:98:b6:7d:83:5e:0a:0e:4e:93:9b:10:42:50:e5:
fd:20:89:59:ef:6b:82:cb:95:74:59:74:4a:85:1e:
9b:e2:60:3a:42:fd:4b:30:01:89:be:2e:93:9a:6d:
fe:65:7c:23:66:90:6e:83:f5:53:7c:dd:e5:89:45:
cd:71:5a:40:22:16:64:8f:eb:7f:79:2e:95:84:1b:
54:33:8e:0c:85:df:32:60:e3:bf:f8:ba:1c:f0:7a:
6f:48:46:5d:e7:ea:16:82:cf:1b:ea:5a:2f:a1:3b:
3c:59:5b:1b:4c:6f:0a:22:e0:4b:60:5d:4b:d0:8f:
5c:b3:6f:12:1a:f2:27:8f:76:e3:27:48:3e:f3:34:
09:33:0c:c4:51:65:69:aa:97:67:21:27:f6:43:e9:
1e:2d:86:b0:c0:ab:08:75:f0:31:06:bf:d6:2f:14:
5b:0d:8b:a2:ad:c8:59:59:61:0a:89:9c:19:ca:65:
14:51:b4:93:8c:3f:c8:01:d6:e7:52:cd:b7:59:44:
08:1d:cb:8d:3b:65:03:69:40:3e:1e:be:94:5f:6d:
d7:34:bd:e5:cb:af:2e:b1:38:b0:a5:47:1f:66:73:
15:96:10:56:98:d9:14:2d:bb:b9:b3:24:d7:8a:04:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:84:AB:FC:CB:CD:60:15:E5:93:E7:53:F5:55:0C:FB:30:DB:8B:AF
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7b:fb:d5:75:c0:86:44:99:1c:0d:51:05:72:dc:6f:43:de:
5b:1a:bb:94:3c:56:3c:ea:83:ef:c8:a6:b2:70:f5:ed:52:9d:
09:13:6d:d9:3e:b5:6f:99:78:c7:73:4a:0c:58:0d:ec:2e:9c:
c2:c8:f7:10:6c:eb:18:a8:70:b3:cf:72:dd:65:40:f4:67:02:
50:45:07:e9:f2:99:47:99:1e:89:7b:12:84:51:86:87:df:f5:
4c:47:40:7a:37:6b:45:97:cf:e5:9f:15:cc:da:b5:5b:44:00:
75:88:71:11:c9:3c:a2:8c:4e:d2:4b:65:76:8f:d3:58:46:e7:
d9:31:2a:fe:63:b6:6d:bf:24:0d:c5:17:f1:19:a4:2d:37:1f:
4e:ca:84:e5:4a:91:df:e6:42:31:c8:a5:19:55:70:46:a2:64:
7d:e3:9d:70:8e:01:d8:b3:10:86:b0:1a:27:0a:ba:e5:81:a2:
88:f5:83:ca:d1:b3:2e:5d:99:73:68:0f:32:93:d8:45:38:18:
95:70:53:c1:08:2e:af:f1:ee:bb:dc:d7:5d:0e:ed:b7:46:e9:
12:9c:85:d2:3c:f8:05:3f:9c:ca:ce:6d:1b:89:1b:37:54:3c:
82:d4:10:86:f2:60:a6:e9:e0:cf:fc:e7:46:c6:20:14:f3:86:
fd:82:23:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:35 2026 by rpki-client