Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
File: JeG2WYYtFaUctf803nIjxp5IEmo.mft (raw, json)
Hash identifier: /xpnzlbgJ27vPlax/UXiuyGNWkucwqV+7+9ydzkIoAM=
Subject key identifier: 1D:D4:8A:84:1F:47:2C:F2:1D:4F:46:33:24:F0:A3:70:45:6A:87:7A
Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Certificate serial: 019D984FD94A178B58D1BB7CF09E12EA25A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:01:02 +0000
Manifest this update: Thu 16 Apr 2026 22:01:02 +0000
Manifest next update: Fri 17 Apr 2026 22:01:02 +0000
Files and hashes: 1: E9IB3sYZ-oc7-YPITpGQaihn-so.roa (hash: 5jPfUKrdbwudGJGlNuuaExPB1D+OPBNCB1dk0F5dGxU=)
2: JeG2WYYtFaUctf803nIjxp5IEmo.crl (hash: qr5G5fltYyFUif/OGPU5y6456AsPfhxj+BXD3pD+ohk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d9:4a:17:8b:58:d1:bb:7c:f0:9e:12:ea:25:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a
Validity
Not Before: Apr 16 22:01:02 2026 GMT
Not After : Apr 17 22:01:02 2026 GMT
Subject: CN=1dd48a841f472cf21d4f463324f0a370456a877a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:42:19:38:12:8b:ed:0a:a9:e1:17:a1:dd:
da:f7:c0:0c:b8:a9:a1:dc:52:36:20:c1:c2:ec:85:
c5:79:fd:13:79:04:bb:63:94:5d:c7:02:9a:44:22:
89:39:77:e5:17:e1:58:21:5e:90:4d:fb:87:07:51:
98:e4:ab:70:ee:ca:d2:79:c9:8f:8c:71:3c:b4:b3:
c3:41:dd:c9:6b:6e:3c:89:5b:d6:00:14:29:1e:7d:
31:f8:58:67:3e:da:4c:75:6a:71:98:29:37:99:ed:
31:d6:f2:85:23:11:1f:68:92:10:23:fd:9f:d1:43:
90:c8:cd:19:5c:0a:eb:f0:95:1b:83:8b:7f:45:dc:
19:6d:3e:5d:21:83:18:1a:a1:47:c3:ff:ef:78:42:
6a:91:4e:9b:44:26:85:33:3a:6b:d8:73:b8:0d:09:
a0:77:76:ea:a2:b6:86:84:ff:97:48:32:91:1c:ef:
31:6f:94:94:39:e5:97:c8:1c:94:b3:ac:ba:a1:9b:
6c:e2:74:40:2b:19:50:a3:0b:c2:b7:db:7a:a7:7f:
dc:e4:4f:e8:b6:0b:12:64:99:81:47:cc:3f:e0:2f:
68:80:70:4a:90:f4:db:96:5e:ac:e3:a3:57:00:a0:
be:60:fa:8d:69:ff:8f:fb:72:0f:7d:00:13:7a:30:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:8A:84:1F:47:2C:F2:1D:4F:46:33:24:F0:A3:70:45:6A:87:7A
X509v3 Authority Key Identifier:
keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9d:1d:89:c8:5b:bc:58:3d:65:43:d8:ae:f4:aa:d1:68:4b:
ba:75:6e:38:e9:83:d5:06:e0:91:ae:ea:4a:bf:ed:b7:f4:c5:
58:fd:e4:0b:36:2f:e4:b6:e6:55:a4:df:cc:78:fd:52:cc:15:
5f:aa:36:8e:4a:91:be:0a:03:19:a2:34:6e:6b:8a:9e:27:e5:
e0:df:6c:11:4c:1b:85:0b:c6:a4:b6:4f:64:24:21:0f:f8:5f:
e6:ae:a5:7a:31:51:5e:32:16:ad:a1:5c:85:c9:16:f2:99:d1:
8c:e9:cf:5e:c3:d4:bc:14:b7:87:be:73:ea:8c:92:f6:ed:5e:
7e:22:09:6b:bd:b7:f5:0b:a7:e3:20:85:e7:91:a5:ed:6d:f2:
30:22:0a:15:dc:95:b9:54:1e:c1:ca:6f:d7:b8:8d:24:3b:ba:
7b:be:e5:a4:d5:d9:e3:40:50:0c:9d:d3:14:81:95:96:2e:f2:
4d:0a:e9:d1:13:7e:aa:e5:e6:bb:66:96:25:23:47:d6:53:c1:
9e:46:f2:95:04:b3:df:a9:38:64:4b:2e:9e:1f:18:35:5e:0c:
f7:53:fc:39:fb:62:c7:b5:ef:36:9e:64:bb:1d:ef:47:cf:26:
bf:b9:c0:8e:df:47:6a:2a:fb:4a:d3:22:a4:6d:17:1f:37:9b:
c4:bc:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:34 2026 by rpki-client