Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: NZPaS/9wOX1O7KxD6EnhquKda/15ZKtY8LLjEEpZ2JY=
Subject key identifier: 0A:E5:C0:54:B9:C3:23:66:4A:D1:7C:FD:13:68:5B:D2:2B:7C:32:C3
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019D99D05F1BA67EF16EE945A417D480E8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: Knk4VYHDcIiBaCF1Fb23lu5Bxhc.roa (hash: 92P0sRZzCNI5Tycv/hRZey2LUOQu+EgEzREqInMSicw=)
2: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: ZelgB3JniPF0+p82dq+Iw1fbfcHTO+6P+sIoB4lmVNY=)
3: tEF7W8QAASjmD3ZJv31PpbtJPmE.roa (hash: +pnJPXwKfh/vR28pIs9jPAqM5aVgozefoHrHe0Y59Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5f:1b:a6:7e:f1:6e:e9:45:a4:17:d4:80:e8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=0ae5c054b9c323664ad17cfd13685bd22b7c32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:be:e0:14:19:6e:2a:e5:09:bb:3b:c8:76:
56:2c:af:3d:91:c4:8e:58:10:84:fa:e9:1c:2f:36:
b1:1a:9b:a1:05:8e:cc:7f:76:15:df:82:e3:e1:5c:
4e:f2:37:fb:09:6d:28:73:cb:a0:66:02:7d:c9:62:
e5:69:42:5c:d7:08:f3:bf:36:61:54:05:1c:98:52:
4a:ad:e9:b0:14:1c:40:be:2d:71:46:19:80:3e:aa:
0a:0e:b8:3b:ef:15:cf:07:bd:2e:bf:60:04:a2:b9:
23:c7:ef:02:d4:10:18:fd:5d:25:27:39:3b:bf:e5:
98:77:88:00:60:3e:3d:0f:36:39:a2:e7:be:bf:eb:
f0:5d:bd:7e:db:4c:20:cc:c0:16:3c:06:ba:1e:24:
79:49:02:0e:fa:03:90:e8:d8:ad:0c:3c:3e:af:0e:
74:8e:bf:ce:5b:0d:f4:a5:88:ef:6f:fb:1a:06:14:
36:b4:e9:ee:bd:11:1c:ad:95:e9:13:1b:1f:8f:0e:
b2:3c:ca:c5:6f:19:86:87:f9:31:24:0a:5e:d1:69:
7c:ec:54:7c:d4:ec:33:04:43:9a:a3:ce:3a:d0:a8:
27:f9:2d:bb:22:14:68:c3:ee:9d:5a:ff:a0:4c:b5:
af:2c:8a:d8:71:f1:e4:93:65:eb:c8:39:76:ed:76:
16:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E5:C0:54:B9:C3:23:66:4A:D1:7C:FD:13:68:5B:D2:2B:7C:32:C3
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:87:5d:5a:50:97:dc:28:f0:09:8c:1d:9b:16:a6:8f:6e:cc:
d5:67:37:82:45:1d:2e:7b:76:c3:80:57:f6:f3:9e:f0:c3:bb:
a5:1f:39:e4:ce:d7:c2:35:ea:81:c0:b1:bd:5d:7f:e3:83:ad:
5f:ae:5d:e0:a4:57:08:59:25:04:41:9b:ee:85:c4:53:ce:49:
66:10:bf:b6:76:34:5f:35:5e:29:49:fa:e8:95:f0:e9:70:57:
6e:ef:ce:08:19:d0:27:ad:f5:a5:a2:5c:e2:b9:50:32:ef:c7:
d1:9d:22:2e:b3:0e:d4:86:e3:2e:76:42:88:02:e7:35:8d:a8:
f3:d6:41:46:9d:b3:47:cc:30:34:10:5d:03:55:5b:93:5a:17:
ee:eb:88:e3:98:c3:48:0e:ff:ba:5d:ca:99:10:cf:29:f7:29:
d4:28:20:39:9f:b1:dd:43:97:e6:3b:57:f4:62:91:0e:72:fc:
57:a7:88:65:dd:5a:60:a5:89:1d:7b:8f:6d:a3:59:2b:f0:39:
f7:ae:d6:ce:1c:fc:dc:ac:4d:89:75:ee:ff:02:e1:19:0b:cd:
0f:00:ef:65:7a:f6:56:71:5a:04:70:bb:3e:56:04:bd:27:37:
2b:39:2d:31:76:39:6e:3a:c1:c9:d9:cb:cb:28:9f:4e:ac:62:
46:ff:f5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0F8bpn7xbulFpBfUgOjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1
Nzk2MGUwHhcNMjYwNDE3MDUwMTAyWhcNMjYwNDE4MDUwMTAyWjAzMTEwLwYDVQQD
EygwYWU1YzA1NGI5YzMyMzY2NGFkMTdjZmQxMzY4NWJkMjJiN2MzMmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQ++4BQZbirlCbs7yHZWLK89kcSO
WBCE+ukcLzaxGpuhBY7Mf3YV34Lj4VxO8jf7CW0oc8ugZgJ9yWLlaUJc1wjzvzZh
VAUcmFJKremwFBxAvi1xRhmAPqoKDrg77xXPB70uv2AEorkjx+8C1BAY/V0lJzk7
v+WYd4gAYD49DzY5oue+v+vwXb1+20wgzMAWPAa6HiR5SQIO+gOQ6NitDDw+rw50
jr/OWw30pYjvb/saBhQ2tOnuvREcrZXpExsfjw6yPMrFbxmGh/kxJApe0Wl87FR8
1OwzBEOao8460Kgn+S27IhRow+6dWv+gTLWvLIrYcfHkk2XryDl27XYW6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArlwFS5wyNmStF8/RNoW9IrfDLDMB8GA1UdIwQY
MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt
M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw
LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIddWlCX
3CjwCYwdmxamj27M1Wc3gkUdLnt2w4BX9vOe8MO7pR855M7XwjXqgcCxvV1/44Ot
X65d4KRXCFklBEGb7oXEU85JZhC/tnY0XzVeKUn66JXw6XBXbu/OCBnQJ631paJc
4rlQMu/H0Z0iLrMO1IbjLnZCiALnNY2o89ZBRp2zR8wwNBBdA1Vbk1oX7uuI45jD
SA7/ul3KmRDPKfcp1CggOZ+x3UOX5jtX9GKRDnL8V6eIZd1aYKWJHXuPbaNZK/A5
967Wzhz83KxNiXXu/wLhGQvNDwDvZXr2VnFaBHC7PlYEvSc3KzktMXY5bjrBydnL
yyifTqxiRv/19Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:01:49 2026 by rpki-client