Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: JDKd4UmuhIlFzw6ILkrrZ33fAHHe03BxwjzO+JEJK5g=
Subject key identifier: 8C:DE:88:EB:57:F1:59:21:28:8D:B5:90:7F:21:B4:59:89:C7:8A:76
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019D9A3EA5F18767AD4BFC6C641F47F93C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 18DA
Signing time: Fri 17 Apr 2026 07:01:30 +0000
Manifest this update: Fri 17 Apr 2026 07:01:30 +0000
Manifest next update: Sat 18 Apr 2026 07:01:30 +0000
Files and hashes: 1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: 0i0l2fxK2GwjD76ZBocmXbTXHuJ7Cj81OY3vgfR1ws0=)
2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:a5:f1:87:67:ad:4b:fc:6c:64:1f:47:f9:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Apr 17 07:01:30 2026 GMT
Not After : Apr 18 07:01:30 2026 GMT
Subject: CN=8cde88eb57f15921288db5907f21b45989c78a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:4e:7f:cc:1f:19:04:e7:0c:15:5d:b6:c4:
c5:3e:45:fb:b6:74:40:1e:2a:60:33:a3:3e:eb:0a:
9a:28:55:f3:f8:cf:b6:69:25:8b:1c:34:ef:3e:04:
8e:2a:51:93:e4:c0:f3:d5:5e:a1:ea:ce:e4:f8:d6:
a8:93:f5:8b:0d:2e:1f:b9:ee:96:b2:3a:ad:d8:ef:
96:f7:48:4a:02:c8:5e:09:de:64:dd:a5:fe:a1:d8:
d0:26:96:16:5d:50:0c:06:23:cc:ff:42:94:6a:10:
19:5b:e7:4f:84:32:be:49:4f:5c:e0:5f:0c:f0:4a:
6e:8a:b6:7a:a3:1d:32:99:5a:04:8b:ce:c6:13:06:
7c:01:41:70:e3:eb:d5:b1:ae:13:66:aa:ac:31:48:
93:b5:46:92:f6:90:9d:8b:f0:60:88:74:0a:f8:03:
b1:64:24:5e:e9:0e:be:41:9f:81:ce:1e:b3:09:81:
be:74:54:9e:47:43:93:df:bc:b9:3e:1f:07:8a:a1:
2b:7e:b5:2f:8a:5a:5c:d1:9f:0d:8d:32:ab:ad:44:
2a:aa:d4:df:a2:6f:98:95:4c:61:df:d8:9f:11:df:
14:65:c9:09:15:c1:a1:5a:bb:fd:b5:a5:3c:9c:02:
6e:96:14:f0:39:a1:0e:81:19:b7:0a:06:82:5c:ab:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:88:EB:57:F1:59:21:28:8D:B5:90:7F:21:B4:59:89:C7:8A:76
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:bd:a3:2b:74:5d:f7:b9:e6:46:a3:d3:2c:82:6f:1e:c3:
37:90:cd:da:9f:41:b9:4f:a9:b8:2c:39:fb:99:ba:18:6e:08:
0c:ed:ef:34:7d:6c:1d:4c:0f:28:9c:9f:e7:1a:0b:e9:11:4b:
1d:f7:fb:b8:6d:29:45:e4:a5:cd:c6:c7:01:f2:1d:b4:a2:62:
ff:79:9d:6d:f0:51:59:bf:30:cf:cb:33:f1:60:44:2c:f7:24:
38:81:e6:3e:16:70:93:bc:90:9a:ef:1b:c1:8e:37:c4:f8:b2:
08:d8:70:24:e0:7b:87:ba:3c:6e:72:f8:cc:71:9c:81:30:51:
cc:2d:8c:7f:f0:ba:c5:a2:56:e5:d8:62:0c:79:98:44:25:e0:
15:f4:fd:67:da:2c:df:8f:c0:cb:39:f5:3c:2a:b2:db:a4:c0:
3d:2d:08:c1:95:b8:e6:b7:b7:ce:7d:0b:a4:d3:e1:bf:ae:0c:
22:b7:7d:8f:28:1d:ce:4a:a9:27:26:17:33:ec:0a:5a:5f:bf:
4b:53:c2:e4:22:b3:e3:7d:21:67:ad:ae:cf:cc:40:f5:a3:24:
b2:f7:74:5b:b0:7a:de:37:bf:a5:9d:56:8a:cb:78:63:7e:b1:
d0:1a:4b:6b:03:31:6d:86:7e:df:1e:62:35:45:8e:c9:1d:e5:
66:86:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:02 2026 by rpki-client