Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: wskRUhaDBjy2a4sGuCsJMMiI8kunntzPKTsISAQM4PE=
Subject key identifier: 46:B0:90:E8:BC:20:CB:72:98:DE:F0:3B:47:BF:D1:A8:3A:D8:E9:1A
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 019D9B513DDD4F2067CD8A33C8694F794569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:25 +0000
Manifest this update: Fri 17 Apr 2026 12:01:25 +0000
Manifest next update: Sat 18 Apr 2026 12:01:25 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: FB2dAOlNZ+p3fr6BX8NYIooeGWXfMT58w0f4sBKx9Jw=)
2: DLBww-zqIhQllewFuiQa1fvj4RM.roa (hash: O1Alk3RK+8x7vbkqLEwNAkJ0vv3sx/hGXGgnO73ZNcA=)
3: jpaX1eyUa61M1zUPWJaz-yxNJGQ.roa (hash: 2Zm1F358Ktx90HgZPnWlbKxHuyZ65L4VlWk0sdk1YM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3d:dd:4f:20:67:cd:8a:33:c8:69:4f:79:45:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Apr 17 12:01:25 2026 GMT
Not After : Apr 18 12:01:25 2026 GMT
Subject: CN=46b090e8bc20cb7298def03b47bfd1a83ad8e91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:2a:fc:ba:53:0e:23:76:a3:38:0c:04:11:
1e:31:de:fc:9b:2a:14:aa:b0:fd:6b:e7:0f:f4:29:
bc:ea:c0:3f:76:99:e1:d6:0d:12:ad:33:2b:e3:09:
70:ad:2e:80:e3:14:55:9a:e8:c0:5f:35:2f:3c:11:
f5:2a:51:99:11:56:90:57:d4:29:1f:6b:17:df:03:
aa:74:d4:11:76:77:fa:27:cc:2a:f5:73:00:3d:bc:
60:2a:73:82:2d:fb:46:68:2d:ce:92:e4:11:13:b0:
43:44:94:49:30:52:4e:f5:f5:1e:9c:a3:40:e1:32:
1e:89:b9:2b:fc:ab:6b:23:1f:09:ec:5c:2f:5a:21:
19:5d:64:51:8e:dd:6e:9f:59:c9:07:d7:9c:be:d6:
b9:b0:b6:ad:b5:83:e3:c7:37:89:10:45:7a:fe:3a:
ce:80:d5:d3:e0:d1:8c:ac:c3:ff:3e:4b:d7:3a:33:
b1:a7:9c:2c:93:f1:fd:f0:8b:46:be:97:a4:b8:b3:
f3:96:db:bf:56:e4:5e:3a:a3:cb:b8:d5:95:1d:cd:
bc:01:36:1e:29:f6:c0:6e:bb:dd:3e:01:e1:d5:29:
d7:f6:0b:1c:6f:e1:51:43:1b:f8:9f:fe:f9:83:d8:
cf:d2:41:88:b7:ec:39:6b:bb:13:2f:9f:0e:2c:25:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B0:90:E8:BC:20:CB:72:98:DE:F0:3B:47:BF:D1:A8:3A:D8:E9:1A
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:cf:ab:b5:8c:9e:30:66:ad:22:10:4f:09:82:7f:9e:82:
c2:94:bc:e2:c7:a0:49:55:5d:82:6e:e0:f2:2b:74:0c:c1:b4:
62:d5:1b:d5:e6:75:12:9b:08:83:4c:5e:09:2c:e4:31:4e:4a:
70:36:20:45:69:00:70:a2:3d:38:4f:c7:3f:90:b2:ba:3d:33:
5f:75:21:9c:d7:55:11:68:76:11:6d:72:25:76:2f:88:d6:ca:
8e:0f:f6:ae:d1:2e:af:4b:25:f7:9e:ff:f4:35:8b:34:f7:c6:
74:3c:c7:b1:86:03:54:08:0f:32:8b:67:ea:10:52:6f:13:b5:
94:b0:86:1b:88:b2:d7:25:ca:56:a9:7f:f2:0f:77:28:39:33:
15:45:5c:e9:86:d6:6b:15:eb:88:85:e0:29:ba:5b:12:9c:a9:
7e:81:3e:60:02:18:44:08:da:b1:a8:f6:7d:36:3e:e8:f0:83:
56:52:05:95:4b:b0:68:cc:36:e0:1f:02:6f:dd:de:ad:5c:08:
9d:ab:ce:01:15:ad:72:92:50:07:ee:53:c8:53:0d:07:b2:59:
71:25:43:04:0a:2b:26:17:29:8e:63:6b:d2:d9:2b:95:cf:e9:
c0:d5:24:dc:78:df:28:07:d2:0d:a4:fc:ce:2b:3f:7e:f1:19:
ff:a5:fc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:26:46 2026 by rpki-client