Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: vfmKJV2QhCq6A3Fd2kSn+8i6VVjRmbeOJ6TlJ5B8PNk=
Subject key identifier: F5:B9:D8:69:71:ED:01:5E:66:9E:FC:C0:E8:A9:C4:22:AD:AB:33:B9
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019D9774078A415A4D1A8DDD385E41837004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 18:00:56 +0000
Manifest this update: Thu 16 Apr 2026 18:00:56 +0000
Manifest next update: Fri 17 Apr 2026 18:00:56 +0000
Files and hashes: 1: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: x/ZufaBP8KO3b+53pqCq2mM3HQxaki1eB4egyXjTyR0=)
2: fH7jpTfOw73ogmMvWrEFRq2Avio.roa (hash: PFBzuOPj54GvMEMM5OOIFBp/nYApNQPXPXoK+zClv8U=)
3: uDCd91-kIRTx4Oler7V-1bWJeEE.roa (hash: MPw5XG6tMFKBuwGKWin9/7K5TyzvM+BrLD5tHi46a6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:07:8a:41:5a:4d:1a:8d:dd:38:5e:41:83:70:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Apr 16 18:00:56 2026 GMT
Not After : Apr 17 18:00:56 2026 GMT
Subject: CN=f5b9d86971ed015e669efcc0e8a9c422adab33b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:83:6d:54:ae:a2:89:45:63:d8:9f:86:9b:
90:a3:6b:96:bf:67:15:75:bd:6a:5e:30:76:9a:76:
8e:48:5b:05:98:c5:56:a9:a8:36:87:68:64:a6:fa:
27:53:35:ca:73:f0:6a:a6:0f:2e:88:3c:cc:0a:1a:
31:0e:f2:96:07:d2:6a:1f:cf:4d:c0:63:78:eb:2f:
af:0c:3f:08:db:9a:9b:9d:b0:41:cf:57:15:ee:e6:
fd:ee:0e:74:af:cc:48:d4:70:af:b5:e5:62:b1:f6:
af:9f:65:c2:a5:14:b4:1c:c8:2c:88:e5:cf:3b:e4:
8a:a5:68:fa:45:0e:07:71:e1:1e:84:93:3b:f5:ad:
9a:47:b8:fd:03:76:19:fd:43:bf:b5:3c:83:54:af:
19:97:9a:77:5f:fd:33:36:fe:e3:ef:64:cd:38:57:
59:12:f9:88:10:dc:c6:9c:8b:74:b2:1d:38:55:46:
e4:5e:23:6e:78:31:bf:85:52:69:83:8f:ce:89:1f:
82:75:e8:c6:38:3f:51:c5:dc:cb:54:ef:a3:1a:93:
b4:62:75:3b:14:4d:78:af:18:74:60:dd:78:1d:45:
97:98:a1:5d:be:2d:d4:6a:75:3f:38:8e:32:e0:16:
3d:75:21:32:39:46:3c:2d:cc:4c:31:5e:ef:87:21:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B9:D8:69:71:ED:01:5E:66:9E:FC:C0:E8:A9:C4:22:AD:AB:33:B9
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:8f:0d:23:cd:de:64:f2:93:15:3e:61:22:07:ed:06:41:
c8:cd:50:bd:51:4e:dd:c3:40:7a:d7:54:f9:96:dd:cc:73:3f:
a8:31:a7:9c:75:c9:79:f9:8b:87:9f:ef:96:93:61:b0:81:a1:
6a:5f:07:82:34:b3:93:b0:5e:21:7c:36:c5:59:12:dd:51:cd:
94:b9:0a:30:99:54:65:86:92:e9:76:0f:85:b3:29:ed:29:97:
16:a3:f0:c6:a1:88:d6:52:8d:3f:01:05:8b:47:92:6d:37:e5:
55:d6:b7:ee:14:08:a9:4f:02:ed:0b:50:b3:cd:a5:9d:7d:44:
54:3f:09:77:1d:d3:c3:e8:5d:7e:9d:5e:37:17:fc:0a:e4:e6:
12:c0:b4:c9:b1:8e:c0:27:b1:97:04:19:73:c7:ff:21:33:e8:
e6:8d:03:0a:6f:c1:dd:5a:eb:75:35:ce:c6:46:4b:10:56:09:
1c:71:de:86:68:6a:d4:40:98:02:87:2b:f7:65:42:6e:f8:83:
12:80:5b:94:e3:c2:ca:f5:2c:34:89:79:28:0a:d4:46:5c:83:
a6:13:0e:12:af:e7:45:3b:96:74:54:d3:bc:f8:c6:b7:37:99:
ea:f9:45:b7:aa:38:10:44:a9:0a:af:6d:a6:0e:50:c4:6a:ec:
fa:3a:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:53 2026 by rpki-client