Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: YIa99A3vV+JVm/MbuzKBuhBLKAPBfamq/X2+YipvNqY=
Subject key identifier: 65:31:9B:05:0F:C1:8B:3D:66:08:DA:F8:DD:0A:0C:1F:9C:88:50:AA
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019D9A74D68A89B9C51234AC4DD355ADDE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0CB6
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: yAth0lRWj3ZjqBKnnRS5kEE7q88uGxKOy36T8lO4Jl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d6:8a:89:b9:c5:12:34:ac:4d:d3:55:ad:de:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=65319b050fc18b3d6608daf8dd0a0c1f9c8850aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:9b:b9:95:c2:63:bc:02:56:f7:bf:b2:a3:
c4:d8:6d:f0:91:b4:c9:3f:41:4d:67:b8:07:9e:99:
e7:f9:08:cd:89:dd:df:bf:c8:ba:18:ee:99:ee:33:
51:ab:54:7b:fe:62:62:9c:d7:d7:1b:b0:d8:f0:ef:
61:92:5d:20:b4:b1:0d:83:1e:a3:a6:11:a4:52:20:
11:74:26:d7:9f:35:f8:26:e9:39:a0:58:43:45:a9:
44:cc:4b:29:80:14:0e:d7:fb:99:0e:d2:6a:dc:69:
43:0f:8c:1d:62:07:02:b4:c7:fb:f8:f3:7f:1d:e3:
8b:9e:36:0d:9e:d6:85:26:96:69:18:81:e2:0a:ec:
5b:b1:48:80:72:98:af:a9:4b:17:06:1a:10:bf:bc:
b9:20:97:8d:be:fc:81:be:b4:22:ed:1c:64:9d:8c:
cc:15:15:57:f8:ca:b4:c6:e2:23:8d:fa:70:1f:a6:
6a:64:78:54:87:8b:b6:7c:7b:98:4b:c0:d4:76:0e:
9e:a5:53:40:a3:b3:3c:c2:34:f9:a8:40:9b:1c:4d:
11:c9:43:a2:e5:06:fb:15:ba:55:45:fc:4e:a8:ad:
55:37:ab:3e:d7:b3:60:f7:c7:b2:d1:02:3a:d7:3f:
21:00:e8:79:5b:de:4c:06:5a:38:49:6c:e9:58:b6:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:9B:05:0F:C1:8B:3D:66:08:DA:F8:DD:0A:0C:1F:9C:88:50:AA
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:64:97:05:a7:e3:21:cb:85:ae:a2:48:f7:e1:7c:6e:14:
23:77:cf:84:9b:8f:a4:75:fa:d9:91:6a:f9:7a:aa:c5:16:17:
93:75:75:1a:42:f9:d1:98:5f:bc:ac:e5:a6:11:eb:57:c5:1e:
26:8b:40:b3:6a:c6:7a:3d:69:fd:ba:bc:a3:ba:3d:81:7b:f1:
57:2a:f7:73:43:8a:b0:96:e9:cc:34:4f:2d:80:44:e4:e4:02:
53:dd:5e:dc:19:01:e4:43:ba:a4:fc:d7:fb:ba:0d:e4:16:b9:
2a:7b:e4:34:2d:1f:fb:b4:0b:eb:c3:b1:c7:21:57:3c:bd:4c:
d4:bc:b9:34:e7:ac:8a:27:c6:a4:91:fc:29:00:be:e7:f0:18:
58:ce:d0:77:02:ce:7f:db:4b:39:b4:0c:23:22:b6:e4:18:3b:
e6:6f:14:10:3a:03:6e:71:7f:32:3c:11:c6:d6:50:12:1e:be:
ec:fa:87:af:89:c5:58:4f:96:5a:e8:b3:83:45:5a:92:b1:22:
59:2f:e8:1f:cf:87:65:b2:9b:fd:8c:fa:04:f5:b0:d7:31:6c:
b5:77:61:bc:d6:35:2b:e0:04:21:51:fc:f3:fd:80:16:ba:39:
d9:0e:64:ec:3b:5b:dc:df:c0:ae:49:58:d6:95:d0:14:5f:b9:
bb:9a:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:20 2026 by rpki-client