Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File: jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier: q9ubC4QDqDKlHpp5NGbiD2eZjL5nFA8kx9qLPe9eU9E=
Subject key identifier: FD:8E:F3:B9:54:B9:1E:6A:C0:A4:99:0F:2D:14:9E:21:18:08:99:D7
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 019D9AE34A616BC7BD4BF1971EF37A528966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 10:01:20 +0000
Manifest this update: Fri 17 Apr 2026 10:01:20 +0000
Manifest next update: Sat 18 Apr 2026 10:01:20 +0000
Files and hashes: 1: HRoz101M-lrveZcnNZV2uhsvCkc.roa (hash: +IbJA51Ocg1tdb7H8y8jxMvadpEzbmCyGmXt8WGHMKk=)
2: O0FS0XMv6ih-2O0cYgo04uq_WqA.roa (hash: GwCmjRKr0uO3lcpx8t6r1Z062xMPZHx+8iaQcQfTG/U=)
3: UlPebmu1c40UOSCL-ly4OscZCUI.roa (hash: h0gF33577TsfLaBIuEPgAJQ2oPdZpB3QfyyzokMxY64=)
4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: h9a4+4HWxZMufdBYD4kC0ZyUILDk797PsGVCbhkfw/w=)
5: kpdwiZivq0KQEXRziSN4kbLcuPo.roa (hash: uvaVyntvMy6IR5dawncMlQjbQOllUj983tNXqJNMrIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4a:61:6b:c7:bd:4b:f1:97:1e:f3:7a:52:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Apr 17 10:01:20 2026 GMT
Not After : Apr 18 10:01:20 2026 GMT
Subject: CN=fd8ef3b954b91e6ac0a4990f2d149e21180899d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:33:e6:82:bb:b3:88:f0:17:7d:e6:92:89:
da:cb:96:3c:c4:cc:63:e8:c5:c0:71:d5:5a:c3:5d:
5f:79:fc:ed:e5:5f:f1:96:5d:eb:c8:67:14:9e:63:
05:ee:df:94:d0:9f:cd:4f:c6:6c:1b:12:a9:bf:15:
86:64:9f:5b:8e:ae:a0:ba:aa:7f:f1:de:9c:e6:00:
3c:0e:75:7d:7a:70:48:43:29:da:db:25:2d:23:a8:
97:f4:d7:91:0d:11:4e:e1:35:d7:7a:9f:c2:57:f5:
0f:3f:25:77:56:da:64:a0:9d:22:d0:4a:93:02:bf:
51:1f:ff:be:a5:d5:50:e5:94:76:a3:42:7e:11:ec:
d1:4e:2e:de:4f:78:e9:1b:e0:6f:3b:f4:ee:d1:ad:
2a:fd:e2:07:01:c1:d0:66:2f:d7:03:a1:73:62:b0:
74:96:dd:84:de:d1:30:bc:a6:0f:45:cd:0e:1b:11:
0b:da:d8:d0:91:d1:cf:2e:5e:10:3a:e6:b7:b6:37:
b7:dc:94:33:25:54:f4:2f:a4:ab:ac:29:7b:5a:a6:
4d:91:bb:dc:7e:3d:87:d8:0c:71:06:db:6e:8b:30:
8a:53:3b:de:95:ae:e8:cb:9a:03:23:1a:a2:39:f5:
74:0b:2e:53:52:ad:c6:72:e8:2f:fd:e4:06:6a:69:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:F3:B9:54:B9:1E:6A:C0:A4:99:0F:2D:14:9E:21:18:08:99:D7
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2a:52:f2:3b:65:c7:f4:aa:f2:39:bf:f2:dd:a5:2c:e5:eb:
13:dc:8d:ac:c7:c4:38:ee:7a:94:5e:40:90:18:42:c7:ea:f7:
2b:c2:54:2a:c6:61:8a:87:0d:e1:53:af:56:e2:fa:70:8d:2d:
1d:f4:da:ec:f1:c7:07:1f:e9:df:1c:25:a2:d3:aa:c3:0a:df:
4c:59:69:0b:a2:23:6f:40:a8:8a:43:01:0a:37:b4:8c:81:9b:
5c:b1:09:7e:0f:91:82:d9:da:01:51:e9:e7:9e:6a:50:02:d5:
43:9c:1e:7c:fa:fb:2d:c7:da:2f:5d:cc:f1:ce:99:50:74:d5:
d3:10:93:35:93:53:d1:5b:a5:7c:14:5d:c4:11:73:c8:bf:89:
54:c0:31:d5:29:5a:58:24:0e:bb:07:28:fd:85:3c:0f:00:85:
67:3a:7a:51:b7:2c:5f:86:46:41:90:20:b7:c6:04:fc:e9:ec:
47:92:53:c4:b6:c7:a6:8a:84:f4:92:cd:b1:b0:93:fa:1e:6b:
f5:84:0f:c2:89:22:9f:c7:c1:92:8a:71:8c:9f:80:ce:a2:63:
1f:1a:60:88:ad:d1:8e:2d:d2:66:e9:c6:81:2b:76:2b:4d:13:
de:9a:ee:a6:88:93:85:c8:92:a4:5a:c0:d5:e5:5e:c5:cd:0a:
c3:18:1d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a40pha8e9S/GXHvN6UolmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQyNjU2MTc3YjQyNjdhYjU1ZTRiYTE2NWE1ZWMwMGY1
MDg0YmMwHhcNMjYwNDE3MTAwMTIwWhcNMjYwNDE4MTAwMTIwWjAzMTEwLwYDVQQD
EyhmZDhlZjNiOTU0YjkxZTZhYzBhNDk5MGYyZDE0OWUyMTE4MDg5OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoz5oK7s4jwF33mkonay5Y8xMxj
6MXAcdVaw11fefzt5V/xll3ryGcUnmMF7t+U0J/NT8ZsGxKpvxWGZJ9bjq6guqp/
8d6c5gA8DnV9enBIQyna2yUtI6iX9NeRDRFO4TXXep/CV/UPPyV3VtpkoJ0i0EqT
Ar9RH/++pdVQ5ZR2o0J+EezRTi7eT3jpG+BvO/Tu0a0q/eIHAcHQZi/XA6FzYrB0
lt2E3tEwvKYPRc0OGxEL2tjQkdHPLl4QOua3tje33JQzJVT0L6SrrCl7WqZNkbvc
fj2H2AxxBttuizCKUzvela7oy5oDIxqiOfV0Cy5TUq3Gcugv/eQGamnekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2O87lUuR5qwKSZDy0UniEYCJnXMB8GA1UdIwQY
MBaAFI2EJlYXe0Jnq1XkuhZaXsAPUIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2Njgt
OTRjMmY4MjY5ZTljLzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2NjgtOTRjMmY4MjY5ZTlj
LzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCpS8jtl
x/Sq8jm/8t2lLOXrE9yNrMfEOO56lF5AkBhCx+r3K8JUKsZhiocN4VOvVuL6cI0t
HfTa7PHHBx/p3xwlotOqwwrfTFlpC6Ijb0CoikMBCje0jIGbXLEJfg+RgtnaAVHp
555qUALVQ5wefPr7LcfaL13M8c6ZUHTV0xCTNZNT0VulfBRdxBFzyL+JVMAx1Sla
WCQOuwco/YU8DwCFZzp6UbcsX4ZGQZAgt8YE/OnsR5JTxLbHpoqE9JLNsbCT+h5r
9YQPwokin8fBkopxjJ+AzqJjHxpgiK3Rji3SZunGgSt2K00T3prupoiThciSpFrA
1eVexc0KwxgdAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:04 2026 by rpki-client