Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: HrV3rBJ5MRFkorlLlsysxM7p2t2QHlZAoWnYWoya1Fk=
Subject key identifier: C4:2E:E9:A5:28:02:CB:0D:87:01:6D:32:0E:80:DA:AC:54:46:6A:E0
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 019D98BDF493F13B94089CDA337929CEEC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0642
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: CWNF4a7mLYbKSGXj37QsRs18EPc.roa (hash: YsCfFIceaBejyXvZZ5Ucl+3/y81JerhJsxljYX0B06A=)
2: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: 90ZXXnZy1+MhOuQgFTa25NSIny3CyavCwcWnZgAj4HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f4:93:f1:3b:94:08:9c:da:33:79:29:ce:ec:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=c42ee9a52802cb0d87016d320e80daac54466ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:00:5e:6c:10:3d:80:47:6d:c8:68:2e:0d:
69:e1:f1:9a:5f:09:27:df:67:d3:22:a2:aa:b8:69:
ce:c7:47:a6:14:fc:55:28:5f:75:9a:0f:45:30:88:
18:47:6a:de:75:02:1a:f6:b8:0b:c4:4a:0c:d3:2a:
3d:55:3a:e2:3c:a9:2b:4c:f0:4f:9e:4f:b4:d9:4a:
f9:e9:bb:4d:61:b2:6e:71:de:e7:d8:e4:ff:a1:13:
f1:2b:f2:84:8f:83:11:74:31:2b:c1:fa:80:fe:b4:
ce:d8:b9:a6:21:73:6d:49:0a:16:ee:42:92:21:c0:
82:c5:6d:76:6e:f0:10:7b:ae:b8:0a:55:89:c4:25:
39:2f:e6:4b:32:12:f5:cd:54:83:b6:96:a2:0d:5f:
de:1e:81:d4:59:cc:b9:cc:3f:84:9c:8a:8a:98:75:
6a:ce:4d:31:ca:25:2a:27:47:c6:9a:d5:20:67:db:
dd:4b:ec:30:4e:e3:35:6b:de:89:fb:15:ed:29:98:
74:54:e1:02:61:0a:9e:ad:4f:26:ad:2c:4d:14:b6:
c8:5d:bd:e1:b7:59:f9:64:83:58:0f:33:a7:37:f0:
34:10:55:e5:16:42:9e:cc:1e:08:4b:c2:64:05:bb:
1b:68:8a:d6:5f:f6:10:74:5c:32:ef:7b:cb:ca:eb:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:E9:A5:28:02:CB:0D:87:01:6D:32:0E:80:DA:AC:54:46:6A:E0
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:10:9e:88:b7:08:fe:28:3d:0e:ad:d0:35:10:60:4b:8c:
cd:97:70:ac:45:df:cb:9a:66:8f:0f:6b:65:fc:b1:98:22:a2:
74:96:20:78:2b:67:49:cc:76:d3:5d:71:76:7b:16:f0:dd:ba:
ae:e6:d1:ea:01:96:e0:d9:45:b0:b0:0d:e8:a4:37:8d:91:52:
b5:2c:dc:cf:64:03:32:76:fa:fc:ee:1b:45:19:bc:c8:44:49:
a7:1c:ea:13:3d:09:37:98:d9:f3:c7:ca:80:5a:1f:08:b3:8f:
05:de:80:18:fa:ee:7e:dd:ba:92:0f:23:66:c1:45:05:81:a3:
89:52:ae:0e:63:3b:39:03:9c:3f:68:13:db:a5:ae:d1:36:c5:
fb:90:8a:a3:8f:f5:96:e3:a2:c0:71:4f:e5:4b:c5:28:3c:33:
be:71:bd:97:0e:8c:c9:e3:f8:4b:72:55:9a:d6:58:6d:c4:81:
90:79:6a:37:3b:71:ee:09:3f:41:2b:2b:b8:ee:5c:e8:0a:8d:
bd:45:b6:ab:05:46:f4:3d:0a:c0:11:b3:5b:1d:64:48:9c:90:
bd:e3:c2:65:af:07:a3:af:91:4d:4f:03:59:b7:06:ea:14:b7:
70:36:da:a1:1d:0f:ad:b1:0a:17:dc:ed:98:65:d9:e2:05:23:
60:5a:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:38 2026 by rpki-client