Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: 4zL9NXzQFIrJ5YvHwwMrCKc44Q16s0iMz2dltBGDLj0=
Subject key identifier: EC:43:E2:57:8D:C0:7A:62:74:B1:4F:A5:39:3E:94:BB:2D:41:3E:78
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019DA3E63CF04A550E356327B07C1CD250D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 15E0
Signing time: Sun 19 Apr 2026 04:01:08 +0000
Manifest this update: Sun 19 Apr 2026 04:01:08 +0000
Manifest next update: Mon 20 Apr 2026 04:01:08 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: ddAPV3Jv43hnrVM5sMgPqD+u+PWLP4fWKpd2oOW8MMc=)
2: ax6eIjHYuyl0QBv51Atz3wWcyoE.roa (hash: VeATSBlllh5K01G1TOhorfGAawwB+xV+zgL6EEsH3z0=)
3: ky99BlOPlH5O6f7O36UwCkNpB5c.roa (hash: tyITeyFzQukDFtq+qQfcsC7Kui3xVMsWGSDU3eA4x4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:3c:f0:4a:55:0e:35:63:27:b0:7c:1c:d2:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Apr 19 04:01:08 2026 GMT
Not After : Apr 20 04:01:08 2026 GMT
Subject: CN=ec43e2578dc07a6274b14fa5393e94bb2d413e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:48:ad:88:8a:3b:d9:59:29:83:a5:5c:1d:
9f:41:b3:d1:89:51:c2:8a:21:22:9c:14:6f:5b:6d:
df:72:80:aa:60:f0:1c:73:14:3e:82:c6:83:6a:0b:
40:72:dd:1c:0a:cf:c3:8a:72:d4:f4:90:97:db:94:
76:e1:13:83:1d:80:87:c4:74:26:8e:d4:08:08:8d:
4a:42:f9:85:a4:26:a9:24:b2:d9:d1:6f:21:39:dc:
88:57:d3:ad:53:03:79:10:fb:07:cc:86:99:8f:8d:
af:6e:37:fd:d1:7a:41:f2:0a:c3:42:ec:78:cf:76:
3c:eb:27:f8:53:a3:1b:f9:b8:c0:a0:3d:74:52:72:
d3:23:03:cb:2c:d9:c8:c6:c9:d2:24:49:7b:36:dd:
69:3c:87:01:09:42:87:8d:59:54:e4:a6:f2:8e:02:
d0:b2:b1:16:05:95:bd:3b:cb:a2:64:30:bd:ff:8a:
93:6f:ca:0d:d2:1a:e2:fa:e7:48:25:3e:85:fe:5e:
ad:5b:96:ad:97:58:74:54:4e:1e:e6:99:ff:12:a2:
50:5d:8b:c1:7a:21:7a:14:a4:39:ea:36:8d:13:db:
05:9e:c6:9a:a6:34:98:98:c5:dc:aa:0a:ae:bb:b3:
98:c6:29:c4:f5:cc:e7:3b:56:a8:2b:f7:0e:f8:1e:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:E2:57:8D:C0:7A:62:74:B1:4F:A5:39:3E:94:BB:2D:41:3E:78
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5a:e8:95:1b:3e:c2:84:e2:26:b4:25:8f:f6:f4:a2:fc:9c:
4f:19:08:da:ee:1e:ce:07:8a:37:e5:f4:c9:fe:1f:cc:45:e0:
88:d2:a4:51:75:8c:a1:f7:2c:cc:4b:15:2a:64:39:89:a8:5e:
d7:7d:cd:8e:3d:1a:a5:3d:9f:6f:17:a4:8e:78:c4:1b:c3:07:
80:b3:36:97:b1:4f:c3:e0:dd:d9:2c:84:0e:7f:68:f3:91:c9:
11:03:eb:ea:33:4b:50:f5:ff:ec:65:73:d2:af:1a:10:ba:f5:
46:1e:1a:67:1d:ea:0c:dd:15:e0:75:dc:b2:b1:61:02:7f:ed:
b1:63:01:ec:78:5c:b5:64:c1:6c:02:18:e7:bc:98:e8:ab:53:
24:37:10:ff:89:98:a2:d0:38:68:09:d7:6d:33:8c:a3:0e:a7:
d4:f7:1d:c6:28:6e:82:fb:a7:48:43:f6:97:f8:5b:36:86:99:
f8:59:31:ef:a5:e3:49:67:1f:76:d0:d5:f4:9e:01:0c:96:17:
21:82:27:0c:45:25:89:0e:5f:b5:b5:db:d7:99:cc:13:85:64:
3e:a7:d9:89:36:a6:67:8b:36:e5:d6:b7:d6:9a:99:0d:b4:8d:
3e:02:70:aa:d1:f6:e6:55:0a:17:c9:6d:50:d0:94:45:ef:6b:
ee:8e:b5:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5jzwSlUONWMnsHwc0lDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODAyNjg1ZGE3MzRiMTU3YTJkYjljY2ZmNzZkZDRlNDg5
MTE5MjgwHhcNMjYwNDE5MDQwMTA4WhcNMjYwNDIwMDQwMTA4WjAzMTEwLwYDVQQD
EyhlYzQzZTI1NzhkYzA3YTYyNzRiMTRmYTUzOTNlOTRiYjJkNDEzZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3dIrYiKO9lZKYOlXB2fQbPRiVHC
iiEinBRvW23fcoCqYPAccxQ+gsaDagtAct0cCs/DinLU9JCX25R24RODHYCHxHQm
jtQICI1KQvmFpCapJLLZ0W8hOdyIV9OtUwN5EPsHzIaZj42vbjf90XpB8grDQux4
z3Y86yf4U6Mb+bjAoD10UnLTIwPLLNnIxsnSJEl7Nt1pPIcBCUKHjVlU5KbyjgLQ
srEWBZW9O8uiZDC9/4qTb8oN0hri+udIJT6F/l6tW5atl1h0VE4e5pn/EqJQXYvB
eiF6FKQ56jaNE9sFnsaapjSYmMXcqgquu7OYxinE9cznO1aoK/cO+B5WswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxD4leNwHpidLFPpTk+lLstQT54MB8GA1UdIwQY
MBaAFCeAJoXac0sVei25zP923U5IkRkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEt
MTIzYTg2ZDk0ODE4LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ZTVkNjUtNTkxMi00MThlLTljMDEtMTIzYTg2ZDk0ODE4
LzEvSjRBbWhkcHpTeFY2TGJuTV8zYmRUa2lSR1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlrolRs+
woTiJrQlj/b0ovycTxkI2u4ezgeKN+X0yf4fzEXgiNKkUXWMofcszEsVKmQ5iahe
133Njj0apT2fbxekjnjEG8MHgLM2l7FPw+Dd2SyEDn9o85HJEQPr6jNLUPX/7GVz
0q8aELr1Rh4aZx3qDN0V4HXcsrFhAn/tsWMB7HhctWTBbAIY57yY6KtTJDcQ/4mY
otA4aAnXbTOMow6n1PcdxihugvunSEP2l/hbNoaZ+Fkx76XjSWcfdtDV9J4BDJYX
IYInDEUliQ5ftbXb15nME4VkPqfZiTamZ4s25da31pqZDbSNPgJwqtH25lUKF8lt
UNCURe9r7o61mQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:23 2026 by rpki-client