Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File: jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier: 68SiZnSz/qqdscJISzXPVQimBXsLCZgOt5r/i07NOUA=
Subject key identifier: 49:C4:FC:DC:CC:79:28:80:B8:87:7A:13:5F:C8:28:8B:0B:46:4B:3C
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer: /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial: 019D9BBEB44E288E8F53FF87E7D2B8323690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:59 +0000
Manifest this update: Fri 17 Apr 2026 14:00:59 +0000
Manifest next update: Sat 18 Apr 2026 14:00:59 +0000
Files and hashes: 1: AySsPboe2PxrB1Gyq1W06Px76LY.roa (hash: YaBT4lmGzSO4QjZLhswASZb2ScD2t8fau691sPdnGM4=)
2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: ivWy986piyNIbJ5YNfFC60YCMJcqhYd/Bs2/4lrsa44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b4:4e:28:8e:8f:53:ff:87:e7:d2:b8:32:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Validity
Not Before: Apr 17 14:00:59 2026 GMT
Not After : Apr 18 14:00:59 2026 GMT
Subject: CN=49c4fcdccc792880b8877a135fc8288b0b464b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:6d:d9:08:31:73:5d:cd:6e:da:ac:b2:39:
02:66:0c:1c:1c:81:07:85:47:2c:b5:a6:93:c3:1b:
ac:68:9a:cd:30:97:2a:68:10:42:aa:ec:34:ca:1c:
36:f4:fe:33:dd:fc:26:26:54:db:61:d0:60:fd:d4:
50:e8:a1:90:75:d9:b9:9f:50:72:35:6e:b1:50:45:
4a:10:c3:94:65:80:bb:bf:6c:58:0c:b5:ed:14:ff:
19:fb:e8:02:c7:87:f2:14:fc:17:1a:bb:94:40:66:
dd:c8:4a:07:5b:ba:cc:60:81:0b:1c:f0:3e:c2:df:
d3:ad:3b:07:5d:6c:f8:27:22:93:63:85:6f:57:99:
f1:ab:f5:88:a2:54:61:30:8d:33:51:e7:36:5c:43:
47:b3:5c:bf:ff:77:a0:24:f7:01:37:b6:56:89:f4:
19:09:1f:ea:75:a6:04:fa:60:5e:8b:44:4d:3b:c7:
af:62:84:14:5f:7f:3f:b6:4a:6e:10:62:b8:8c:c2:
75:cc:0e:79:e9:fb:e0:17:3e:3b:4f:26:36:75:17:
4a:90:fd:f1:d9:59:73:4c:9e:c4:62:6e:00:c9:10:
da:2c:92:e0:d5:0d:07:76:20:7f:cc:91:00:6f:54:
5a:3f:59:33:03:f5:13:3d:58:90:3f:98:68:48:be:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:FC:DC:CC:79:28:80:B8:87:7A:13:5F:C8:28:8B:0B:46:4B:3C
X509v3 Authority Key Identifier:
keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:04:d7:0c:8f:1a:f9:f7:4c:04:a6:c0:12:01:b2:c8:ba:
fe:d2:03:a6:3e:43:53:ab:18:f1:45:cf:39:d0:0c:86:62:61:
7d:af:38:68:14:99:87:ce:23:7c:4e:0f:dc:1a:ad:d1:a1:33:
ae:24:13:69:49:0c:3e:b0:1c:b8:dd:07:7b:6f:f9:b6:49:1b:
34:a7:fa:67:d3:d4:85:f5:09:e9:ed:60:ef:f9:c3:48:35:7f:
7a:92:83:c0:94:e5:4b:a7:c9:f0:61:7f:a4:be:fa:93:01:4d:
70:ea:f8:1f:05:53:55:da:3f:cd:d3:58:17:e7:94:f3:2d:44:
fd:74:a4:70:7d:c5:6e:58:2f:81:c3:ad:cb:a7:d0:fe:ea:3e:
27:2b:5a:41:ae:d9:61:b2:ca:59:c4:0f:35:86:87:66:a2:72:
ea:c8:4a:63:f6:c5:92:05:73:6a:94:05:a6:d1:39:3e:4a:1f:
0a:6b:ad:1a:f7:f4:aa:fc:ef:13:91:7c:dc:13:31:5c:c7:c8:
bd:e3:49:be:71:9e:9c:c5:ab:44:13:a3:41:33:fb:3d:fc:d7:
b2:f3:9d:50:a1:26:b0:74:8a:b1:f0:8c:77:7a:4d:84:c5:a5:
d4:3b:1e:c6:05:64:7d:66:65:58:e2:9a:19:64:e4:4a:8c:25:
4b:cb:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:43:01 2026 by rpki-client