Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: fM8jrafUSYJsVXGvcHfNqWApSZbDDO8ROKNg0hWeD1g=
Subject key identifier: CB:8F:DD:EE:27:8A:59:62:77:70:49:DB:A5:20:B8:15:36:0C:D1:AC
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019D9C9A9AC9D0D6C577E1D5C56692E1F0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0FB9
Signing time: Fri 17 Apr 2026 18:01:10 +0000
Manifest this update: Fri 17 Apr 2026 18:01:10 +0000
Manifest next update: Sat 18 Apr 2026 18:01:10 +0000
Files and hashes: 1: 4oS7f5aNMThyZTin7FlnkmNfcnM.roa (hash: Rq3EvqTLDbExRBsoliQM1/05zLN71ScvdftpfuJDfm0=)
2: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: Fkk4YPFXWQ9lm/cbrIC80lj9qbuqt6Vkv+Bn6iAziJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:9a:c9:d0:d6:c5:77:e1:d5:c5:66:92:e1:f0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Apr 17 18:01:10 2026 GMT
Not After : Apr 18 18:01:10 2026 GMT
Subject: CN=cb8fddee278a5962777049dba520b815360cd1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:54:96:55:c6:48:b4:16:5f:3b:03:81:89:
28:20:dd:c7:75:41:e4:5e:58:3f:26:ad:b5:b5:de:
a8:1d:5a:cd:e1:17:67:6b:5d:0f:87:5e:fc:d8:f6:
a4:b3:d6:2c:92:15:49:7d:e7:df:d0:f6:ea:2e:30:
e4:cf:8c:32:9a:0c:ae:d2:49:8e:2b:42:c5:3f:fe:
06:17:38:63:04:27:6d:1a:bf:b2:bf:40:80:c4:3e:
91:f2:0b:94:84:2e:81:2d:06:22:77:fe:91:d8:c5:
40:81:61:d0:03:55:99:da:02:8d:0c:37:fd:84:b8:
1b:ba:3e:74:7c:7b:48:9c:dd:f7:ee:d0:e7:42:07:
8d:3c:62:d9:8c:20:19:58:d4:7d:e3:9d:fd:54:3c:
e8:ac:8b:87:2b:a6:f4:9f:ca:3d:98:34:b8:44:fd:
c8:5a:c5:0a:be:85:07:26:bf:58:c2:bf:c6:06:06:
ce:a9:2b:0a:6f:c5:ac:67:93:2e:df:38:55:ca:c5:
89:6e:42:f5:7e:0b:16:0c:b7:df:f9:32:25:c3:17:
b1:3a:af:75:dd:a7:66:43:7d:fc:33:8a:59:f9:90:
04:b6:cf:52:99:fc:81:03:46:01:23:00:0b:e0:dc:
0b:d2:bf:4d:b0:65:0f:6f:1e:f5:a6:13:7f:67:7a:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:DD:EE:27:8A:59:62:77:70:49:DB:A5:20:B8:15:36:0C:D1:AC
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f3:67:cb:b0:cc:f6:5d:cb:e5:fa:cb:f8:be:ce:13:ab:44:
6c:9c:62:56:a6:c0:63:72:a3:59:28:10:c7:4e:00:c1:e2:9b:
3d:26:2c:eb:71:35:a1:89:28:c1:c6:75:49:97:7c:02:5e:8d:
d7:2c:45:90:96:70:69:d5:b8:a0:88:f4:13:f6:78:46:58:3b:
e2:70:87:ee:78:3a:2b:f4:2f:77:ca:3a:06:28:6f:d4:26:d5:
d3:e8:62:ed:61:d1:75:16:6e:4e:17:bc:87:9a:aa:94:2b:d2:
10:dc:92:5e:85:42:b4:f9:9c:d8:4a:c2:59:12:1d:2e:05:5e:
36:2d:a4:fe:0b:7e:3b:18:5f:22:e7:01:84:ee:c7:a8:5b:31:
8f:62:05:a9:52:64:50:ad:ab:dc:98:31:a8:33:fe:da:17:c6:
25:10:a2:72:b1:b9:87:e5:16:34:27:5d:2e:ec:8b:34:d9:21:
ef:5d:69:20:94:d4:ba:c4:f7:9a:e4:9c:52:c6:6c:79:3e:5d:
77:54:10:33:82:68:ca:64:91:24:3e:11:80:bb:5e:cc:4c:b1:
a2:4c:cd:6e:28:10:2b:62:e1:af:40:42:2c:6a:b0:be:94:05:
fe:4b:28:60:2f:e7:ab:b6:e3:3f:bb:cd:ff:a1:87:30:bd:82:
af:6d:cc:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmprJ0NbFd+HVxWaS4fDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz
NzE1N2MwHhcNMjYwNDE3MTgwMTEwWhcNMjYwNDE4MTgwMTEwWjAzMTEwLwYDVQQD
EyhjYjhmZGRlZTI3OGE1OTYyNzc3MDQ5ZGJhNTIwYjgxNTM2MGNkMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneJUllXGSLQWXzsDgYkoIN3HdUHk
Xlg/Jq21td6oHVrN4Rdna10Ph1782Paks9YskhVJfeff0PbqLjDkz4wymgyu0kmO
K0LFP/4GFzhjBCdtGr+yv0CAxD6R8guUhC6BLQYid/6R2MVAgWHQA1WZ2gKNDDf9
hLgbuj50fHtInN337tDnQgeNPGLZjCAZWNR94539VDzorIuHK6b0n8o9mDS4RP3I
WsUKvoUHJr9Ywr/GBgbOqSsKb8WsZ5Mu3zhVysWJbkL1fgsWDLff+TIlwxexOq91
3admQ338M4pZ+ZAEts9SmfyBA0YBIwAL4NwL0r9NsGUPbx71phN/Z3ryWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuP3e4nillid3BJ26UguBU2DNGsMB8GA1UdIwQY
MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt
Y2JhZGI2NDM0MGUwLzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw
LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfNny7DM
9l3L5frL+L7OE6tEbJxiVqbAY3KjWSgQx04AweKbPSYs63E1oYkowcZ1SZd8Al6N
1yxFkJZwadW4oIj0E/Z4Rlg74nCH7ng6K/Qvd8o6Bihv1CbV0+hi7WHRdRZuThe8
h5qqlCvSENySXoVCtPmc2ErCWRIdLgVeNi2k/gt+OxhfIucBhO7HqFsxj2IFqVJk
UK2r3JgxqDP+2hfGJRCicrG5h+UWNCddLuyLNNkh711pIJTUusT3muScUsZseT5d
d1QQM4JoymSRJD4RgLtezEyxokzNbigQK2Lhr0BCLGqwvpQF/ksoYC/nq7bjP7vN
/6GHML2Cr23MiA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:20 2026 by rpki-client