Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: 2MOao9dk1FscZWnsyqiMZ2y42l8yWaRHO31T9dKBY/Q=
Subject key identifier: A7:6C:26:F2:CE:47:8B:77:A2:C9:E8:3B:D5:06:00:D6:E0:A5:02:A2
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019D9A7507ADE12B0BE5A1AF9161362CA065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0A73
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: vCOvzyObF1a5f2SaNlsJffIGDpFfouK+O2+lbGU9TZA=)
3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:07:ad:e1:2b:0b:e5:a1:af:91:61:36:2c:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=a76c26f2ce478b77a2c9e83bd50600d6e0a502a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:f8:b0:a4:e4:b1:77:36:22:08:8b:f2:f1:
e8:94:e8:47:a4:db:3d:40:ca:0a:ff:4e:2c:ed:74:
d1:d5:8d:cb:3d:91:a8:15:24:9b:9a:3e:1a:3f:19:
de:b1:8b:7e:d1:29:23:53:96:23:98:1a:e4:87:d4:
3d:fa:fa:bf:c5:1e:3f:20:b7:32:61:e1:c0:80:7c:
1b:78:97:56:b2:0f:06:f0:75:70:33:46:ef:1b:e3:
5c:9b:13:cf:26:03:03:21:1d:d3:c8:ef:44:9e:6c:
d2:f9:fb:52:8f:5a:5c:69:1a:11:24:0e:46:9c:a0:
2c:e2:4c:a2:ac:e8:48:f5:ae:f3:10:80:c6:e0:0a:
cf:19:7d:ad:c3:c2:f6:30:bc:7d:19:73:b9:e2:b4:
d5:ba:7e:28:c9:42:b3:e2:5a:6d:0f:46:d3:28:1e:
24:f8:8c:89:40:79:89:6c:19:37:96:31:41:89:9c:
10:e8:b4:3f:8e:8e:87:ce:cd:a6:6e:e3:9d:fb:19:
41:8b:5d:98:ad:c1:44:fb:fe:b6:53:b8:14:2c:50:
bd:b0:f5:11:5f:6e:b3:22:ca:75:74:a6:4f:f7:37:
7a:cc:d4:f7:ee:13:2e:47:b2:0b:db:71:68:9c:44:
3d:78:ed:8d:27:92:46:c4:58:33:de:23:c8:25:ad:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6C:26:F2:CE:47:8B:77:A2:C9:E8:3B:D5:06:00:D6:E0:A5:02:A2
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6a:b4:7b:91:d0:8f:68:72:00:32:3b:23:9d:ff:92:8d:3f:
2c:5d:f7:e6:69:df:97:af:53:49:fe:59:a9:53:40:65:42:b1:
ee:6c:63:5c:66:d7:7c:92:01:88:34:99:81:91:fc:36:e6:29:
c9:2a:49:5f:54:be:98:5b:90:d6:f5:88:e8:91:b5:af:43:91:
bf:67:57:5f:cf:15:da:f1:d5:fb:4a:91:1a:ad:92:4e:68:ae:
e2:98:27:9e:8b:18:6a:ed:2d:32:94:81:d2:f2:d7:86:e4:cf:
3c:61:00:4a:fe:7e:84:d1:08:78:e7:8f:35:81:30:e7:5d:7c:
72:e8:57:9f:4a:33:68:f3:a2:1e:1a:f7:44:0c:60:00:b3:6f:
8a:61:00:cc:e7:b2:e2:2c:14:b8:f6:99:85:75:85:8c:84:73:
9f:3d:c5:e5:80:20:1f:f1:e1:39:fa:49:e0:c2:1c:6f:04:b9:
e7:d4:45:69:cf:42:1c:8b:36:ab:ae:72:a5:a6:05:29:e7:2f:
78:e4:9d:6e:19:5a:16:ea:b0:ae:87:01:95:3b:55:bd:93:c2:
b2:af:d5:f1:5d:4e:46:e9:42:94:0f:e6:97:0a:bb:cf:5c:82:
a0:60:fe:aa:65:a0:91:e6:1c:34:f6:20:78:25:d8:7e:22:b5:
48:87:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:59 2026 by rpki-client