Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
File: J8XzZBPnr0coE_46cU4uzaoh8ug.mft (raw, json)
Hash identifier: 5HXI1bIVvgCDJwE97tG3Rv2qgoBQ4NlKYuk764BeGfQ=
Subject key identifier: 5B:16:84:D5:97:02:E0:5F:5E:F5:46:69:4E:F7:FF:70:0E:9A:99:69
Authority key identifier: 27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
Certificate issuer: /CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Certificate serial: 019D9AE33AAE76238BFA926B39B62F7455A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
Manifest number: 0949
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: J8XzZBPnr0coE_46cU4uzaoh8ug.crl (hash: QsluDBdAK7G+gxMTte8FV1n9LEU4FDuGKZ1tcbgxqWg=)
2: ZvSntlMRiI0KhwgM99Sp3FJTmvs.roa (hash: 0fCY8nksAFxmuBH0voIaK/wx1tefrnct7WFNbFomHtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3a:ae:76:23:8b:fa:92:6b:39:b6:2f:74:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c5f36413e7af472813fe3a714e2ecdaa21f2e8
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=5b1684d59702e05f5ef546694ef7ff700e9a9969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:90:f0:70:e1:1f:ee:2f:e5:ba:c0:2d:93:
79:4c:0f:f3:3d:69:27:3f:8a:c2:f5:88:4b:10:8d:
7e:77:46:ac:30:20:0c:e0:ec:2d:ee:10:96:8a:cd:
21:30:92:ad:89:a2:cc:34:dd:93:2e:96:95:d1:42:
db:1f:23:99:d4:d1:24:55:f2:d9:45:19:27:32:15:
13:b5:f0:e9:98:d0:18:a2:27:10:f6:8f:e2:a8:f8:
04:23:f8:da:4f:0a:bc:f1:e7:19:ba:ff:7b:0f:69:
86:88:a0:f1:b5:b9:ee:9b:9e:1e:fc:85:ce:82:50:
ac:6a:8b:d3:f3:92:14:51:97:0d:bc:bb:bd:a7:47:
ff:3d:f3:6a:88:fb:e0:f6:b7:83:ec:3a:50:3c:0f:
c0:8a:dc:f5:9e:30:88:f3:cb:45:0c:05:12:d1:af:
7e:1c:e6:fb:ef:d4:d5:68:81:0d:49:fc:8b:53:8e:
09:9a:a3:15:25:4c:bd:7a:c9:53:a3:f7:9c:d1:5e:
66:9d:c2:f5:cd:5a:77:db:93:f6:60:dd:54:8c:bc:
61:95:6f:55:4c:8b:21:2e:0b:01:4d:c0:7b:cc:a9:
eb:64:b7:25:df:0e:2d:77:dd:b0:3e:03:60:cc:54:
52:96:04:c3:9f:de:9e:83:ea:07:37:c8:bd:f2:88:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:16:84:D5:97:02:E0:5F:5E:F5:46:69:4E:F7:FF:70:0E:9A:99:69
X509v3 Authority Key Identifier:
keyid:27:C5:F3:64:13:E7:AF:47:28:13:FE:3A:71:4E:2E:CD:AA:21:F2:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8XzZBPnr0coE_46cU4uzaoh8ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/188fc9-b9b5-4072-bc93-79132946b699/1/J8XzZBPnr0coE_46cU4uzaoh8ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3e:5f:85:50:9e:75:9e:66:e8:58:a8:26:7f:fd:f7:c8:15:
f1:26:3e:a4:20:e8:17:2c:24:21:5e:30:a7:ee:de:3e:56:7a:
da:72:9f:f0:36:5c:87:cc:be:b2:ca:d8:6f:26:ed:37:2f:83:
6e:b3:3b:d6:f9:43:03:a3:4b:7f:b9:29:03:d4:86:a6:c0:27:
30:da:9e:e6:f6:78:05:c4:9f:31:7a:cf:b4:7a:d6:68:b4:44:
17:8b:f0:16:e0:40:96:c6:8d:c6:c9:6a:81:50:cd:3c:13:19:
7c:4c:63:b4:78:ca:d6:c2:81:64:a6:ed:02:a1:d1:26:f6:9d:
46:19:c6:c9:1d:8a:34:ee:03:ba:81:8a:67:7b:1a:ef:f3:af:
b7:57:66:b9:37:bf:ba:5b:af:41:81:c4:fb:1c:8c:89:72:7e:
31:09:4c:b2:b5:6c:81:f5:ae:ef:23:f2:0b:44:75:36:90:4b:
88:6e:11:4c:23:e2:c2:21:f6:bb:7c:14:10:36:cb:2c:5e:57:
75:66:d1:5c:c4:8a:ee:aa:72:ce:7f:77:64:cf:d9:d1:aa:c3:
6c:bb:e6:62:d4:e8:c4:ce:95:6f:ce:1b:b9:6b:c0:38:bd:00:
4f:a0:47:f0:22:21:c4:ca:d6:01:7c:4e:cb:6f:42:19:c0:7c:
3d:e6:18:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:50 2026 by rpki-client