Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: b6BQLkYDdgEqQKINL+4BFp/uIDDF89ddatevD9hE61k=
Subject key identifier: A4:2E:4D:46:CD:A8:22:8E:8B:E7:C1:9A:8E:67:5F:83:BF:82:94:D3
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 019D97E16199443FC15881B8FB120BC46D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:23 +0000
Manifest this update: Thu 16 Apr 2026 20:00:23 +0000
Manifest next update: Fri 17 Apr 2026 20:00:23 +0000
Files and hashes: 1: 7OTQnzrbHyXo119EfPUpBJCKYHw.roa (hash: 2rynQETuFSP28J9DNP84gVl8Pw/3bThUsvE7hH2G5gw=)
2: MsTpS_9Ef3SDy2PLq6WfNUkYizQ.roa (hash: Ea2AJU7gEy/xVP6HsAboTHLHs8TQfaChyqKqx20NTwM=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: BZ+fmN17393Mffdm+77M0YalxX7xqcXInLjXzEXyzpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:61:99:44:3f:c1:58:81:b8:fb:12:0b:c4:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Apr 16 20:00:23 2026 GMT
Not After : Apr 17 20:00:23 2026 GMT
Subject: CN=a42e4d46cda8228e8be7c19a8e675f83bf8294d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:86:32:ed:5d:d7:15:61:7f:a4:e5:d0:f8:
a5:c2:a6:dd:1e:3a:c5:21:3d:e1:bc:18:49:04:7b:
a5:ce:05:b3:52:a7:f2:88:7e:af:05:16:b8:00:08:
e3:f7:c1:72:bf:bf:5f:44:fd:e9:eb:b1:55:02:2e:
88:91:b8:f0:2d:33:39:ef:59:fb:16:1e:5a:be:a7:
77:c7:82:56:7a:08:e4:97:d6:4c:9a:ba:fb:82:4e:
82:a2:cd:c0:86:6b:3e:65:c1:7f:07:59:c3:58:06:
a2:fe:87:b3:1d:7d:8c:8f:95:a3:09:bd:f1:fb:ee:
d8:8f:2b:98:6e:5d:cc:92:ca:d0:a5:2b:99:cf:e4:
0e:25:7b:b8:09:9c:8a:68:0c:eb:af:d0:5a:14:38:
18:cf:73:da:cd:bd:0b:06:b6:b7:0f:86:cf:95:59:
65:c5:16:d7:5b:73:c4:3d:50:6f:ea:cd:3f:e9:fd:
09:11:a0:24:ec:4b:25:90:32:ac:35:f9:b7:fc:ff:
b3:8b:56:02:82:c9:5b:2b:0c:12:93:f4:c3:87:3b:
b8:43:db:38:36:4d:62:cb:c7:3a:d2:64:f9:fb:7b:
d8:02:01:d3:16:38:ca:e5:42:51:be:46:06:4c:8c:
1c:b7:da:7e:35:5b:07:51:9d:b3:ba:23:b7:d8:04:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2E:4D:46:CD:A8:22:8E:8B:E7:C1:9A:8E:67:5F:83:BF:82:94:D3
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6d:c8:01:c8:1d:8a:3d:d0:fa:1d:12:e2:51:bd:91:76:6c:
5d:89:32:42:a6:39:8c:7a:fd:13:c8:2f:f7:6c:4c:ac:6c:89:
1e:f1:9b:4a:e8:a5:67:86:54:a0:d4:cb:5a:bb:d4:12:3d:b2:
2d:0b:ff:1b:08:ed:da:e5:fe:5a:be:4b:df:36:3d:cd:47:92:
99:ab:38:94:9b:e5:dc:22:79:16:82:10:7e:cd:87:14:97:e2:
7d:49:17:c4:8a:72:f8:29:10:9a:95:10:90:1a:f8:b8:62:ee:
8f:fe:bd:a9:11:bb:c7:d3:fb:e9:d3:69:6f:28:bf:e2:fe:c2:
e0:60:39:81:15:e1:cc:55:5c:dc:13:a3:62:d6:66:e8:56:73:
14:01:03:c1:df:c2:6e:d3:31:77:bb:15:1e:92:89:3b:3a:3c:
cb:cb:bb:a5:d4:95:85:11:26:21:ba:4d:68:4d:a6:90:f6:7b:
c6:e9:97:47:aa:4c:6a:f0:e0:7d:2d:2b:78:4a:d5:ef:cd:db:
9c:ea:c6:a0:fe:33:dd:b7:61:d5:0e:18:71:2a:8e:18:d3:e1:
23:66:9e:48:f2:21:24:c0:42:1d:03:c5:62:c6:29:68:a1:81:
a2:38:fc:38:7c:9d:af:0b:1c:4f:23:dd:7e:4e:54:c6:28:33:
ed:f2:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:45 2026 by rpki-client