Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: 4xE6OGjoGLQFI8hh4fFCOx96mCV5bi/zfFHikO8cPBw=
Subject key identifier: 86:5B:E6:6E:45:DB:F3:88:66:46:58:5E:7E:C6:82:70:D8:41:68:18
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019D98BD23F2ECBAA9321F95E622635F147C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 14DB
Signing time: Fri 17 Apr 2026 00:00:25 +0000
Manifest this update: Fri 17 Apr 2026 00:00:25 +0000
Manifest next update: Sat 18 Apr 2026 00:00:25 +0000
Files and hashes: 1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: Xlp/+ATZFn4+B0rKRAyeFY8cMaezwvD2iaGxja7b3Ek=)
7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:23:f2:ec:ba:a9:32:1f:95:e6:22:63:5f:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Apr 17 00:00:25 2026 GMT
Not After : Apr 18 00:00:25 2026 GMT
Subject: CN=865be66e45dbf3886646585e7ec68270d8416818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:24:98:ab:5a:c9:39:a9:b3:cb:f2:16:a7:
a6:b7:e4:8b:8d:5d:e1:17:ab:4a:de:a3:63:82:ea:
f1:23:98:90:a7:6b:ee:6a:e3:1c:3c:f8:e1:f1:08:
84:78:5e:57:04:c4:f5:e7:75:ca:b3:3a:67:ab:ec:
bb:66:47:c3:7b:a0:34:a9:06:aa:c6:c4:47:11:27:
f2:8f:2d:83:25:74:4e:38:aa:03:23:b0:1f:8d:2f:
f9:20:d5:a7:87:c9:9b:09:1c:1b:00:51:d3:50:2f:
3d:b3:6c:6d:1b:c8:53:19:26:35:c9:bd:3b:47:90:
80:d9:e9:ff:9c:65:ab:c2:f8:41:91:17:6f:90:6a:
3d:01:84:10:90:4c:50:94:e5:da:d6:49:fe:f5:6f:
43:a6:51:6f:b9:bd:e7:8f:f5:60:7e:1e:d2:d9:60:
b0:0c:f2:6c:40:cf:b4:ec:a5:bf:17:d7:15:98:78:
43:b8:73:d0:ed:2c:4d:a1:ad:10:26:51:3e:9c:4e:
2e:aa:c8:40:88:26:c1:81:47:88:52:7f:6c:41:6e:
9c:65:c1:ea:bd:2f:0a:1a:99:ab:bb:4a:ab:54:68:
d5:ac:24:7c:b3:f1:56:1c:ef:23:2c:08:a5:e8:43:
ac:cc:3f:91:2e:81:cd:60:81:42:7a:e4:fe:4f:63:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:E6:6E:45:DB:F3:88:66:46:58:5E:7E:C6:82:70:D8:41:68:18
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6e:f4:fd:46:b9:24:60:b5:63:22:1d:e4:ed:07:48:86:d3:
4d:3f:ac:5c:c2:94:3a:a7:70:95:1f:0d:69:6d:31:15:0d:d5:
9b:91:d6:fb:9e:82:32:7e:50:9a:7f:b5:09:fa:be:43:26:5c:
84:f7:9f:1b:6c:ad:92:c9:ce:3d:1c:07:ac:cd:58:60:6b:b3:
d2:fa:f4:1d:11:34:0e:d1:9d:5c:60:90:04:21:12:5b:29:ff:
3c:90:64:e8:64:2e:1e:b9:55:d6:66:50:a9:3a:49:a1:24:80:
8e:ec:f8:de:1f:03:36:c2:40:08:f2:69:03:1d:0c:6d:67:a4:
63:2b:91:d7:c5:11:76:19:e1:de:84:27:03:f7:64:a2:1f:5b:
5c:c4:50:92:9e:73:4b:f3:e9:5a:44:8d:f8:9c:ab:56:fe:ee:
0a:c0:62:62:68:be:36:23:32:6b:90:f5:bb:73:52:a3:b1:3e:
d7:58:45:32:c0:f3:06:1e:c8:f7:13:6c:03:d1:ef:ce:70:c8:
d0:f5:49:2f:cf:60:25:55:36:27:1c:2c:ab:f1:83:29:95:91:
60:2f:80:05:e0:0c:d5:5b:c7:f7:3a:9c:c5:4b:ed:44:d0:f5:
bd:68:ac:e2:6c:1f:5e:22:59:0d:71:d4:c7:43:fc:36:9b:77:
70:e2:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:34 2026 by rpki-client