Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier: 81LTOS5e3bDAZrbqTQFO1hhxcgLVQ3ziIyZsSBLDcRI=
Subject key identifier: 9C:2D:C4:59:0D:F5:5F:75:F8:57:0E:A2:5B:D2:47:61:3B:D1:ED:29
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 019D9A3EB109688D53029C6514D50E49162D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:32 +0000
Manifest this update: Fri 17 Apr 2026 07:01:32 +0000
Manifest next update: Sat 18 Apr 2026 07:01:32 +0000
Files and hashes: 1: _QFYHtLUd5PrTEx3ytqrTgZXY4A.roa (hash: IMcdfSBLxJMlJLL2pxyXtKfsGbWAEaXixakUAiVwCV8=)
2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: ERR3Hni/0RNe4mn6W+mbgra2yr369zquT2DXS8XXlTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b1:09:68:8d:53:02:9c:65:14:d5:0e:49:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Apr 17 07:01:32 2026 GMT
Not After : Apr 18 07:01:32 2026 GMT
Subject: CN=9c2dc4590df55f75f8570ea25bd247613bd1ed29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:7b:a0:68:01:93:5b:2d:3d:c3:10:cc:9c:
2f:61:be:50:ae:ad:ac:b6:70:15:ff:91:ce:95:4d:
cb:0c:3a:47:2b:70:62:f7:b4:dd:ba:2f:ff:5b:fa:
75:d5:df:49:44:2d:1e:e0:37:88:36:99:34:35:98:
cc:89:83:04:f9:eb:c1:12:ef:89:c3:27:af:d2:0e:
97:1d:77:a6:8d:09:e5:99:fb:71:53:25:f9:ee:92:
78:f7:df:17:d9:b4:ce:37:a4:a6:4f:91:93:a8:18:
b8:9b:b5:74:b3:26:66:ad:1f:e4:a8:90:fe:69:4b:
7d:83:21:44:8c:e9:61:f8:27:3a:6f:5c:b3:82:85:
5e:7c:c0:8a:22:99:f9:44:0c:f5:da:65:72:7f:cf:
59:d5:25:61:fb:cd:d3:2d:e2:88:4d:8d:9c:45:0d:
85:8b:a7:58:d2:4e:50:65:14:fe:cc:16:9d:c4:22:
b2:7f:95:9b:be:12:5a:98:65:e0:5f:2c:54:e7:46:
0c:08:75:dd:6a:58:c4:2f:f3:97:a8:70:be:04:99:
3f:93:9c:f2:e3:53:e7:6a:a1:61:82:a0:8f:92:f8:
ea:46:32:97:96:25:dc:71:31:b5:e8:8f:75:6f:af:
9c:78:9d:ec:f9:99:d8:e5:b4:32:15:c5:10:5b:ef:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2D:C4:59:0D:F5:5F:75:F8:57:0E:A2:5B:D2:47:61:3B:D1:ED:29
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:42:97:f5:61:c0:39:ad:d8:eb:b4:07:27:07:05:6b:e9:cf:
a9:e9:0f:60:af:e0:56:73:6b:3b:89:83:94:2d:26:7f:09:ea:
c6:c2:fd:5f:24:6a:b0:5a:af:7a:08:98:9c:ca:c4:59:33:cb:
9e:89:ae:34:66:4b:af:0f:98:37:3b:d6:e5:33:e7:b0:d5:00:
ce:ef:07:a4:a4:9a:0f:6a:80:2b:77:26:4f:51:29:27:e9:86:
c3:b3:ef:21:a6:de:8a:1e:ce:ed:1f:12:3c:3b:7c:11:d5:5c:
72:b2:af:e5:f7:3b:04:0f:a7:e2:c0:5e:99:e5:07:8f:82:55:
fb:82:3c:cc:a3:c7:bb:9c:13:4d:87:02:32:04:9a:e0:0f:8c:
7c:b3:2d:57:3f:75:e0:f3:8b:3b:41:b5:46:cb:ad:49:50:78:
17:da:13:ac:dc:60:e9:2d:3a:e6:f2:4c:21:59:84:3e:e0:ac:
c2:7e:25:9b:3e:7f:d5:c0:28:93:4b:14:a4:e6:e1:53:f7:de:
56:0c:ef:eb:4a:f6:be:59:c1:72:8c:f4:88:1f:57:d3:44:0d:
d3:ae:94:cb:f2:c7:5c:07:fe:b9:32:70:82:f1:54:48:38:bf:
ea:44:6d:0b:79:ca:b2:6e:c2:9e:18:03:56:ba:9a:54:b0:a3:
4e:37:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:20:39 2026 by rpki-client