Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: 3c5xSBcP5RMvA+EaPDzYAVlLXSgQ+xnAv7FbLRWmafQ=
Subject key identifier: A3:52:23:86:40:80:07:55:63:7A:1B:E8:59:BB:DC:3F:6B:08:7A:22
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019D97E15AF4AFB0399E64F7734C51FE0C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 18CA
Signing time: Thu 16 Apr 2026 20:00:21 +0000
Manifest this update: Thu 16 Apr 2026 20:00:21 +0000
Manifest next update: Fri 17 Apr 2026 20:00:21 +0000
Files and hashes: 1: 2qzM6x9baKtwfCTVUC_vOHhaD9Q.roa (hash: slF8umIXO8u1xfM7uQvlWuXSbFnPY4ktqm1QtTsVvaw=)
2: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: bvRrnDjSdr4KVjm+aUpdRbK7Yq5fGT81mkFZfensF6U=)
3: qj22xyeLu60pShMzvtnaPDnNQis.roa (hash: Fv9rfv3pioycRBue2RhOjkBOSKLXM7H4+uyv5DM79wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:5a:f4:af:b0:39:9e:64:f7:73:4c:51:fe:0c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Apr 16 20:00:21 2026 GMT
Not After : Apr 17 20:00:21 2026 GMT
Subject: CN=a352238640800755637a1be859bbdc3f6b087a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:00:36:5c:0d:38:c6:08:1e:e6:b0:7f:80:
9f:4c:f0:3b:29:30:57:c3:94:f2:64:02:56:65:7a:
62:51:7a:68:eb:ca:ae:98:b2:0c:e0:ce:d1:09:d5:
e0:3c:06:eb:91:f0:23:3e:eb:cf:82:77:83:11:12:
1b:8e:28:bb:2a:7a:e9:29:83:fa:f4:8e:e3:cf:6c:
a7:5d:ad:a3:d4:fb:cb:ce:a6:f7:cf:cd:56:35:94:
67:7b:b1:3f:83:81:ef:c6:4a:b8:6a:3f:9d:ac:09:
71:08:73:15:80:68:41:a0:07:7a:05:b2:8e:be:76:
d4:45:a4:de:31:bf:5f:1e:99:2d:ab:b3:ce:4e:66:
f3:88:ea:c2:dc:60:f3:e1:a8:d3:5b:31:eb:fa:6b:
22:3d:94:3d:0b:dc:88:b3:ac:0a:49:72:79:3f:85:
77:70:db:6c:85:c1:e6:ba:af:0c:ac:38:0d:e0:39:
87:d7:4b:de:40:7e:9e:40:aa:56:15:5a:de:1d:4f:
da:a0:29:34:6c:0f:74:25:80:42:3c:6c:eb:c1:ba:
d5:c0:c6:19:d5:58:ef:79:fb:1f:c2:d9:89:82:f8:
82:08:c9:af:60:f8:9c:d7:42:38:7f:65:0d:b6:26:
5f:20:28:17:d9:39:a8:46:46:40:b7:1a:b4:20:56:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:52:23:86:40:80:07:55:63:7A:1B:E8:59:BB:DC:3F:6B:08:7A:22
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:eb:03:71:ea:91:47:8a:bc:2e:88:19:40:b3:7f:fe:96:
a0:21:ab:b5:c6:12:f2:06:b9:b3:85:de:68:82:66:b6:b0:75:
b2:5f:14:3e:91:2c:11:ff:c3:62:89:cc:6e:5d:87:94:01:e8:
5b:eb:7c:03:4a:65:6c:54:bf:36:44:f1:20:89:90:db:e4:50:
9f:eb:3e:2d:17:95:f9:96:b8:75:0f:45:2d:33:42:34:e4:a4:
f3:34:c3:a5:41:5e:b4:6f:ce:af:24:ff:a0:11:f0:97:92:2d:
a7:44:be:ea:2d:e3:e4:6f:17:12:06:90:75:f8:06:6c:a3:74:
ab:d6:4d:06:0d:8d:52:2a:8a:f2:63:51:06:56:65:80:df:ba:
83:fd:82:25:ba:f9:b1:f7:2f:c9:e6:c9:45:a0:ed:26:37:a6:
7e:b0:fe:ad:4a:84:25:64:06:0e:f5:03:f2:c9:c7:46:0e:b7:
40:bf:bf:19:23:eb:8f:ed:1c:4a:fe:ce:a8:94:7f:51:60:43:
fd:a9:65:3d:ca:19:7c:e4:55:ea:21:79:9f:fc:94:3b:3b:1b:
0b:6f:e2:36:1a:6f:46:1f:a3:a1:37:d6:fd:e4:a1:32:8b:7b:
1d:af:31:96:f1:0d:f2:27:af:64:47:c3:b1:3b:e3:60:66:cc:
3e:b3:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:36 2026 by rpki-client