Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: lt98DMq94026/xFfQvLjs4Drxd4034NoQ606Q5Dnjjg=
Subject key identifier: E8:69:DC:26:17:43:39:F5:A5:00:DD:55:EA:E9:16:06:E0:07:37:E0
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 019DA378A7D2A66739DB2BF17FA41FF2B42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 02:01:26 +0000
Manifest this update: Sun 19 Apr 2026 02:01:26 +0000
Manifest next update: Mon 20 Apr 2026 02:01:26 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: sJ8lP9Cmt2IKW23ZRm5rXJwC0iK5QPAoqhCbxlMOfYQ=)
2: jrzLdp-DroztQ5yesperw0S2sxI.roa (hash: fM5zeQtq1zhKIrIjHXbNjUQhcEhAHLAsHH7/oZggY6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a7:d2:a6:67:39:db:2b:f1:7f:a4:1f:f2:b4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Apr 19 02:01:26 2026 GMT
Not After : Apr 20 02:01:26 2026 GMT
Subject: CN=e869dc26174339f5a500dd55eae91606e00737e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:2f:bf:2c:6d:c6:4e:1b:2d:f5:3c:22:8c:
d8:7c:07:76:31:85:00:5c:8a:79:82:df:98:62:c5:
90:c2:3f:d4:99:f3:d7:a3:57:2c:91:f9:b1:15:fc:
dc:a3:ef:fa:7c:67:e4:09:9b:4e:60:1b:81:db:55:
a5:dd:af:06:f8:d8:45:b3:ca:80:77:9f:55:bb:c1:
3f:5a:18:4b:e8:5f:02:01:63:5f:da:e6:6f:1a:05:
31:2f:3e:72:9d:d4:88:37:e7:19:71:c6:16:40:d9:
ef:aa:fe:ca:21:f1:79:fc:21:ac:0c:ca:63:67:d3:
3f:d3:0c:a5:d8:9f:59:cd:04:90:43:4d:42:09:5e:
f1:54:bd:14:52:43:dc:1f:54:2d:52:4d:68:0c:4f:
72:57:a3:c5:f8:95:f1:97:5b:e1:44:6e:79:80:28:
e7:13:68:3f:b7:d5:cc:67:d2:54:c6:a8:12:bd:84:
fe:d5:e1:58:ea:16:a3:ba:00:21:59:1e:8d:b5:9e:
6b:fb:e7:2c:2c:74:a1:c7:70:7b:a7:d8:69:79:28:
9a:76:d9:51:9a:a4:33:59:f7:1d:5d:ff:89:08:76:
7d:16:82:a7:37:b4:aa:b3:e2:1e:f1:3a:60:f3:77:
68:9b:b2:29:5d:5d:59:7e:9e:16:ca:a2:d1:b0:b2:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:69:DC:26:17:43:39:F5:A5:00:DD:55:EA:E9:16:06:E0:07:37:E0
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ab:75:50:04:56:ab:fd:f5:ea:6e:b1:a2:a6:88:96:47:75:
a7:2f:7a:e7:e5:ee:61:80:6b:94:1c:a7:19:e6:af:c3:62:fc:
50:48:cc:4b:da:ba:a5:1c:51:a5:6d:ea:53:6d:f6:97:6b:43:
12:19:f4:86:e5:9f:67:98:cb:bf:9b:21:70:2e:d5:97:6d:95:
d4:08:da:da:55:b4:e8:89:80:49:af:7e:df:70:d2:29:26:6f:
e6:45:63:0e:0c:b2:83:d3:8d:90:84:6a:ac:75:18:82:59:9b:
97:d8:ec:ed:67:82:1f:1b:06:d6:c0:d4:07:17:d3:71:aa:12:
3a:1a:04:60:58:ed:8a:2d:5e:3c:e8:a7:c6:82:d6:79:92:1f:
21:86:d7:86:79:53:69:fd:48:06:dd:ec:25:49:37:6c:f5:d7:
bc:37:e5:de:b4:ed:32:20:4a:e2:46:75:a5:ff:4a:66:55:71:
ff:ee:f4:f5:8a:27:eb:40:4e:e3:90:eb:87:52:47:eb:6c:af:
eb:e5:4e:4c:82:7e:a2:fe:33:dd:3d:85:bc:9c:73:f2:45:21:
6e:32:eb:0b:8f:34:25:6e:89:ca:fb:23:bb:f0:bd:27:12:08:
d2:d5:8a:0c:86:8f:dc:ec:3f:25:1e:89:71:31:89:a4:da:97:
9f:c7:d5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeKfSpmc52yvxf6Qf8rQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzAzY2MyYWY4Mzg3ODk2NTI3NzFjMzQ1ZTA3ZGYzZTgw
ZDU0NGYwHhcNMjYwNDE5MDIwMTI2WhcNMjYwNDIwMDIwMTI2WjAzMTEwLwYDVQQD
EyhlODY5ZGMyNjE3NDMzOWY1YTUwMGRkNTVlYWU5MTYwNmUwMDczN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tgvvyxtxk4bLfU8IozYfAd2MYUA
XIp5gt+YYsWQwj/UmfPXo1cskfmxFfzco+/6fGfkCZtOYBuB21Wl3a8G+NhFs8qA
d59Vu8E/WhhL6F8CAWNf2uZvGgUxLz5yndSIN+cZccYWQNnvqv7KIfF5/CGsDMpj
Z9M/0wyl2J9ZzQSQQ01CCV7xVL0UUkPcH1QtUk1oDE9yV6PF+JXxl1vhRG55gCjn
E2g/t9XMZ9JUxqgSvYT+1eFY6hajugAhWR6NtZ5r++csLHShx3B7p9hpeSiadtlR
mqQzWfcdXf+JCHZ9FoKnN7Sqs+Ie8Tpg83dom7IpXV1Zfp4WyqLRsLL2uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhp3CYXQzn1pQDdVerpFgbgBzfgMB8GA1UdIwQY
MBaAFI4wPMKvg4eJZSdxw0XgffPoDVRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5Mzct
ZDBhZGIxMWRlZDM0LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85ZDFhNGItNTA5YS00OTEzLWI5MzctZDBhZGIxMWRlZDM0
LzEvampBOHdxLURoNGxsSjNIRFJlQjk4LWdOVkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbat1UARW
q/316m6xoqaIlkd1py965+XuYYBrlBynGeavw2L8UEjMS9q6pRxRpW3qU232l2tD
Ehn0huWfZ5jLv5shcC7Vl22V1Aja2lW06ImASa9+33DSKSZv5kVjDgyyg9ONkIRq
rHUYglmbl9js7WeCHxsG1sDUBxfTcaoSOhoEYFjtii1ePOinxoLWeZIfIYbXhnlT
af1IBt3sJUk3bPXXvDfl3rTtMiBK4kZ1pf9KZlVx/+709Yon60BO45Drh1JH62yv
6+VOTIJ+ov4z3T2FvJxz8kUhbjLrC480JW6Jyvsju/C9JxII0tWKDIaP3Ow/JR6J
cTGJpNqXn8fVAw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:00:11 2026 by rpki-client