Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: FKDGaQkujBG0wX8IJmtVx6ZZUVwi6pX0EjaNbhCGl6k=
Subject key identifier: EA:26:A7:40:B3:D8:7B:9E:83:BC:54:75:64:D4:9F:8A:55:A6:50:D6
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019D9B87B3032BB49BDCA828EBF2D9CF5B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 13:00:54 +0000
Manifest this update: Fri 17 Apr 2026 13:00:54 +0000
Manifest next update: Sat 18 Apr 2026 13:00:54 +0000
Files and hashes: 1: 6tyXfV2-VjQvcpv87Kt9vE6HFzw.roa (hash: A154uIVBWW18JX5P8xttoUSBJ4YcDPO4IGCdrwKK67Q=)
2: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
3: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
4: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
5: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
6: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
7: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: Wla0T5+nzhsJ4FcraYx/HEzsKdgCmJziMMmBOyUwPFY=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b3:03:2b:b4:9b:dc:a8:28:eb:f2:d9:cf:5b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Apr 17 13:00:54 2026 GMT
Not After : Apr 18 13:00:54 2026 GMT
Subject: CN=ea26a740b3d87b9e83bc547564d49f8a55a650d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:89:e8:b4:2f:35:8e:c8:c3:6d:28:f8:0b:
a9:c3:d3:fb:03:69:04:74:99:d5:a4:61:5b:eb:aa:
d7:41:fc:b7:8d:3c:aa:a3:98:a7:3d:91:46:27:cd:
f8:b6:f8:06:eb:b8:a7:f1:9b:71:af:7c:aa:cc:ce:
0b:a7:00:f7:c0:85:86:c3:e6:62:47:4e:9c:ca:c8:
c1:d2:b2:24:62:c5:17:06:70:4f:a4:22:55:04:e4:
f5:59:e8:79:01:bc:b7:28:5d:85:c5:9c:02:66:bd:
70:22:2b:cc:22:d1:67:df:e5:cd:1e:19:d9:d6:1f:
51:1a:92:30:9a:35:d2:e3:f5:9f:33:bc:60:33:dc:
ac:2f:c1:3c:7d:72:f7:9b:55:79:af:0d:b4:69:ac:
01:6e:86:aa:3b:45:83:21:68:e1:06:d6:54:b4:0d:
c4:2b:9d:36:bb:eb:ea:f0:db:1f:cf:3e:84:78:b8:
26:ec:a9:b5:c8:c4:da:a6:af:cc:18:99:aa:2e:3f:
48:02:e4:6a:f5:97:3d:fe:f3:87:52:1a:41:fc:74:
0d:4c:f8:3a:f4:a5:28:3c:1b:35:f0:31:9b:3c:f4:
02:6b:df:e3:e5:fc:b2:e8:c5:fa:36:28:96:99:0c:
ef:38:7a:19:7b:9d:17:a8:92:07:2c:85:0d:2f:9a:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:A7:40:B3:D8:7B:9E:83:BC:54:75:64:D4:9F:8A:55:A6:50:D6
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2c:ae:1e:6d:61:c7:79:6a:ca:07:95:dd:85:b0:50:9d:ec:
42:77:3b:cc:67:d6:37:b2:12:a7:01:41:2a:3c:64:74:0c:c2:
93:c9:a6:ce:99:4b:8b:c8:10:13:f0:9a:53:e0:ac:3f:9e:8a:
63:b2:d9:e9:dc:62:8c:dc:65:e4:85:cf:d8:20:03:38:04:61:
45:c1:c2:22:16:32:d1:80:57:94:b8:1f:5a:ed:54:c8:1c:99:
b5:17:c9:1b:a4:7e:e9:3e:29:d4:41:61:33:b4:a4:6e:62:34:
5b:c8:10:dc:47:1a:73:5f:3f:b0:79:58:a6:58:a0:b4:96:31:
df:7a:b6:85:7a:7e:f0:e6:71:65:a7:27:96:88:29:f3:84:61:
90:a0:91:49:65:fc:19:40:cb:fa:6c:6b:c7:0d:5d:a1:a4:9e:
f9:42:eb:8e:50:ab:b5:8a:17:79:3e:0b:7e:1e:62:2b:d2:4e:
21:6e:ac:c2:6d:e1:b0:f3:92:64:76:fa:40:fc:9f:fe:c3:0c:
44:68:13:6b:eb:c2:fe:1d:75:3f:3c:40:49:34:d5:ac:db:f7:
63:ca:66:e5:72:ae:81:53:1a:8f:d2:07:11:aa:b7:55:39:cc:
0b:19:f1:21:d6:a6:cd:1c:09:23:29:30:a9:48:56:53:8a:f0:
50:4b:61:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7MDK7Sb3Kgo6/LZz1sXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh
ZjU3YzQwHhcNMjYwNDE3MTMwMDU0WhcNMjYwNDE4MTMwMDU0WjAzMTEwLwYDVQQD
EyhlYTI2YTc0MGIzZDg3YjllODNiYzU0NzU2NGQ0OWY4YTU1YTY1MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D6J6LQvNY7Iw20o+Aupw9P7A2kE
dJnVpGFb66rXQfy3jTyqo5inPZFGJ834tvgG67in8Ztxr3yqzM4LpwD3wIWGw+Zi
R06cysjB0rIkYsUXBnBPpCJVBOT1Weh5Aby3KF2FxZwCZr1wIivMItFn3+XNHhnZ
1h9RGpIwmjXS4/WfM7xgM9ysL8E8fXL3m1V5rw20aawBboaqO0WDIWjhBtZUtA3E
K502u+vq8Nsfzz6EeLgm7Km1yMTapq/MGJmqLj9IAuRq9Zc9/vOHUhpB/HQNTPg6
9KUoPBs18DGbPPQCa9/j5fyy6MX6NiiWmQzvOHoZe50XqJIHLIUNL5qJSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOomp0Cz2Hueg7xUdWTUn4pVplDWMB8GA1UdIwQY
MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt
NTdlYzEyZTg2NDFlLzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl
LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiyuHm1h
x3lqygeV3YWwUJ3sQnc7zGfWN7ISpwFBKjxkdAzCk8mmzplLi8gQE/CaU+CsP56K
Y7LZ6dxijNxl5IXP2CADOARhRcHCIhYy0YBXlLgfWu1UyByZtRfJG6R+6T4p1EFh
M7SkbmI0W8gQ3Ecac18/sHlYpligtJYx33q2hXp+8OZxZacnlogp84RhkKCRSWX8
GUDL+mxrxw1doaSe+ULrjlCrtYoXeT4Lfh5iK9JOIW6swm3hsPOSZHb6QPyf/sMM
RGgTa+vC/h11PzxASTTVrNv3Y8pm5XKugVMaj9IHEaq3VTnMCxnxIdamzRwJIykw
qUhWU4rwUEthug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:11 2026 by rpki-client