Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: mGdo9t3z3DDoF2EL0PEdEogYraIKxT4qST84o5KpQD4=
Subject key identifier: 55:33:DC:79:01:4A:C6:EF:0A:9E:DE:A3:06:54:12:12:4C:5F:A1:BC
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 019D984FE21F135FB899012ABC9B06B72A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 1464
Signing time: Thu 16 Apr 2026 22:01:05 +0000
Manifest this update: Thu 16 Apr 2026 22:01:05 +0000
Manifest next update: Fri 17 Apr 2026 22:01:05 +0000
Files and hashes: 1: IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa (hash: gTefC/kLKJlQRjCqhwo1qEZQvhe2YWlgNO1XB76+Uz8=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: m9zGUKDt22PL37WKkicPDUsQDZQK+1idt31KrAg1fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:e2:1f:13:5f:b8:99:01:2a:bc:9b:06:b7:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Apr 16 22:01:05 2026 GMT
Not After : Apr 17 22:01:05 2026 GMT
Subject: CN=5533dc79014ac6ef0a9edea3065412124c5fa1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:e3:50:cb:08:25:e1:60:19:94:52:87:c4:
4a:94:e2:3c:65:db:f1:5f:1c:e6:ea:7d:f0:5b:f4:
7b:13:98:7a:11:c1:4f:67:7d:c8:7c:50:00:6a:c5:
dc:f2:b7:06:35:2e:6b:24:30:1c:be:62:fb:d3:03:
62:f5:00:30:d1:17:f6:6f:9d:6c:59:62:99:13:2e:
ce:4c:5a:43:65:55:72:fc:14:b5:1b:05:14:c3:57:
3c:74:e5:70:90:02:f8:a7:d7:b1:ca:6d:84:d1:a1:
6d:c7:04:9f:f8:b7:c6:96:36:e0:c4:43:54:1a:b3:
43:6b:54:0a:f0:55:da:9e:c9:29:d7:6a:97:6d:f8:
17:4e:94:24:2f:07:c8:c3:d8:2f:c0:a9:e2:51:42:
23:ed:5a:c1:86:4a:a2:4f:0b:8c:51:97:51:c5:21:
f9:5a:f5:94:b0:b0:e3:95:08:2e:fb:73:59:f4:43:
01:e9:60:c5:04:9d:9d:ce:10:9a:53:d0:f0:87:2a:
9e:d5:56:2d:8f:b5:bf:f6:72:44:35:9e:68:1a:c6:
f8:cd:a8:54:19:b7:c6:62:1f:84:b2:9a:7c:f0:81:
43:6d:7a:4c:cb:fc:19:1c:f3:42:6d:1b:6b:20:1e:
8a:55:1a:4e:7d:e7:5f:12:98:10:84:6d:9e:6c:fa:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:DC:79:01:4A:C6:EF:0A:9E:DE:A3:06:54:12:12:4C:5F:A1:BC
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:70:8f:25:e1:37:ce:0a:de:c2:44:d2:1e:7e:c5:26:60:cb:
c7:4e:2e:8c:39:06:5e:f4:62:25:65:7c:0a:3a:d8:2b:f3:27:
bf:e9:02:bb:6e:69:cb:f6:52:e6:27:6f:ec:0e:9e:7c:7e:01:
27:a9:48:9c:51:32:d4:4a:ea:62:9e:4c:3e:c2:25:53:16:32:
ec:9e:4f:20:ba:9c:8a:1e:ef:c2:57:71:b2:d8:37:91:1c:58:
0b:5a:1a:99:7c:e0:30:3f:9e:fc:0c:27:c8:14:54:3e:b8:59:
ad:39:16:27:8c:90:14:d9:12:67:43:07:c9:cb:40:16:74:1f:
f8:d0:2e:94:53:45:6e:95:90:c9:31:a5:6d:4b:0d:a8:0b:32:
57:85:c8:61:62:40:60:25:8c:ef:86:e7:69:ba:fa:30:a3:78:
82:62:a1:11:60:75:ed:ae:db:08:a6:a3:69:da:c4:22:41:46:
9d:8b:3a:92:61:1d:10:7d:29:13:4b:ed:ca:af:7a:b2:68:9e:
d8:f6:66:1b:24:d2:56:df:3c:a9:d0:aa:8b:2d:26:a0:97:1c:
7e:0c:fd:ef:9c:3c:0b:81:2f:c0:67:cb:41:f2:e5:9b:e7:a6:
ae:99:e1:7a:25:3a:15:4a:87:50:eb:a9:d0:fc:18:18:e9:12:
42:df:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:45 2026 by rpki-client