Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
File: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft (raw, json)
Hash identifier: 7zyFWlBTtzQbMxAUPOoLSHfcejTdwP7vRojLhfYf7/A=
Subject key identifier: BF:51:5E:C5:A0:3C:DA:3C:91:7F:13:E5:CB:06:BA:E2:3D:AE:1B:B4
Authority key identifier: 26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
Certificate issuer: /CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Certificate serial: 019D9B87C1C4848884AEA1DA864648A1CF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl (hash: D3xulXq6ENtQT2jfJppS9IYtjV56riV5IVGiu4Hv+40=)
2: b7PnGwkHoYONbOXWGIYl79niYLE.roa (hash: St4yEXp9JdHRtTcY6I3db8+uCdXOV22vIrFtZfg9uY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c1:c4:84:88:84:ae:a1:da:86:46:48:a1:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f538e7916dc64cd6100cc10f6faa6bcba1874
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=bf515ec5a03cda3c917f13e5cb06bae23dae1bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:94:a3:9f:36:47:19:44:a4:ad:31:1a:5c:
de:9f:18:6f:b1:aa:67:fc:a4:9c:cd:5a:2e:71:be:
3c:ea:95:5e:09:59:35:f8:2e:e4:40:c1:b8:78:a6:
e5:c8:cb:b2:51:dd:e8:fe:89:f7:3f:be:66:f1:4d:
8a:30:c8:8b:f1:94:2e:3c:6b:84:4c:85:99:0c:c9:
24:fb:57:ef:ff:18:fd:73:2e:a3:1a:d2:24:a3:60:
e1:41:f7:d5:c5:06:4c:c1:d4:b5:f5:c1:e4:7b:f5:
b7:17:e6:15:fb:15:c1:93:c3:c0:30:e3:6e:44:d0:
ba:6a:0d:6e:99:53:a1:40:f6:89:2c:a8:d6:d0:9b:
17:88:c1:46:9d:92:18:55:f2:f2:d1:4f:2c:61:7c:
88:3c:6e:45:c2:1b:2e:3c:e6:ed:b6:60:fe:1f:1d:
20:2e:66:40:66:b4:c9:03:b0:f5:8b:ec:94:73:dc:
2e:c9:93:20:69:34:0e:6f:05:a7:7f:10:51:aa:71:
3b:ce:1b:82:5d:a2:be:66:e8:b9:27:e7:b6:28:22:
65:27:a5:ae:f5:b6:74:b2:54:c1:96:e7:73:04:3a:
11:ab:9f:2b:8d:95:6f:e7:89:fa:98:3b:b2:0e:a8:
38:81:2e:d3:e3:2a:79:4f:3d:66:0c:e1:b6:14:d3:
32:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:5E:C5:A0:3C:DA:3C:91:7F:13:E5:CB:06:BA:E2:3D:AE:1B:B4
X509v3 Authority Key Identifier:
keyid:26:8F:53:8E:79:16:DC:64:CD:61:00:CC:10:F6:FA:A6:BC:BA:18:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e80849-069e-4966-be2c-60db3f5efd9e/1/Jo9TjnkW3GTNYQDMEPb6pry6GHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:b2:50:69:4c:6b:79:9b:3e:aa:9f:89:60:14:ee:e3:ef:
b5:6c:45:a9:33:6b:72:20:f9:ee:7c:ec:70:2a:f3:ff:7e:95:
e2:82:89:56:cf:59:75:b6:1c:36:86:f7:a7:45:73:7f:fb:32:
e5:ed:39:8b:b3:b1:b6:d1:ea:d4:d2:77:09:ba:6c:a1:74:bd:
7b:2e:1f:58:02:9e:31:bd:84:03:ac:cf:e9:fd:bc:aa:b0:0e:
1d:ea:95:1b:a0:ce:94:b1:8f:31:fa:18:f1:c4:98:6c:bc:af:
0c:3f:56:a2:b5:2f:d8:86:8f:df:42:ac:c3:77:a6:1e:4a:bf:
e4:0e:1e:ac:8e:9f:de:4b:f7:86:e2:98:69:54:ec:f3:d2:c2:
03:df:0b:db:88:a9:bb:a2:0f:72:d7:ed:2e:43:3b:91:87:c7:
26:9a:bb:a9:e3:cf:a9:4a:11:d6:bc:4a:ad:4a:0b:81:1c:dc:
7c:6e:69:1c:c2:ba:70:95:38:32:73:ec:be:e5:c6:bb:7b:d1:
2a:9c:0f:6d:48:db:d8:93:e6:7c:b5:40:83:1d:67:05:d9:a7:
d5:6c:3e:31:d9:1e:9c:15:d8:8e:4f:4c:52:86:d9:a8:cc:29:
0c:3a:d4:a5:ca:73:95:11:3f:9f:9c:75:7f:29:16:41:93:29:
e9:4b:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:48 2026 by rpki-client