Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: mIHSRz+/a9nh0MRPEYBuINBgpxj2d8+7mEyczIdQVlM=
Subject key identifier: CE:8A:06:0C:9E:EA:77:89:6B:D1:9F:39:BF:1F:BF:2B:BF:13:0D:8D
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019DA4543882DEE7EA47A872047D6A3AD2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:01:15 +0000
Manifest this update: Sun 19 Apr 2026 06:01:15 +0000
Manifest next update: Mon 20 Apr 2026 06:01:15 +0000
Files and hashes: 1: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: KxNWd3o7Bxh1S6M+SWkjFSvR/ZMwJ4MDWYHp3y0BA6w=)
2: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (hash: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:38:82:de:e7:ea:47:a8:72:04:7d:6a:3a:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Apr 19 06:01:15 2026 GMT
Not After : Apr 20 06:01:15 2026 GMT
Subject: CN=ce8a060c9eea77896bd19f39bf1fbf2bbf130d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:76:f2:c2:67:48:cb:76:b0:72:df:ce:c2:
f5:cd:aa:06:6e:a6:ac:0f:8f:aa:e4:90:19:6d:8a:
83:09:4b:18:00:23:7c:82:76:df:df:4c:ee:0d:4d:
22:d6:e1:6b:9d:41:09:f2:16:db:de:2b:6d:ba:f0:
5c:93:66:4e:e1:1f:e6:98:25:f3:a6:6b:19:b5:fb:
a7:e1:57:3a:c7:e6:9a:dc:f9:44:c2:28:4a:ec:70:
62:f1:ea:22:0e:a9:b3:d2:c7:c3:a4:d1:5e:8c:05:
6b:64:2a:21:13:35:08:bc:c3:86:0d:8e:ed:d7:52:
fa:db:c9:cd:3a:c3:9b:e1:c3:77:2b:46:df:bc:23:
d4:91:0a:51:42:e3:c0:d2:20:0e:8f:5b:ce:5d:e2:
7b:8c:f6:b8:3a:3d:2f:07:77:a5:fb:d5:79:88:77:
d4:5a:e8:ed:4a:05:df:32:12:c8:e2:f1:90:07:0c:
64:7e:50:1a:8c:7d:4c:5e:7b:87:de:78:22:4b:bb:
bb:72:a9:ac:48:8e:05:ec:c5:51:c6:65:96:9f:a5:
d6:22:89:7a:8a:59:b9:1a:8a:53:3a:4b:f9:ff:df:
b5:22:8c:49:61:ac:52:cb:7f:9f:6e:53:3a:d3:f8:
c6:4e:34:52:79:c9:6a:93:24:02:94:57:29:47:d8:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:06:0C:9E:EA:77:89:6B:D1:9F:39:BF:1F:BF:2B:BF:13:0D:8D
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:f8:03:3b:ea:51:f4:68:42:e2:bb:2b:13:05:6f:56:36:
25:3d:6a:e8:30:db:ac:f9:46:40:f2:84:7b:8b:2e:50:f9:1e:
7c:f3:a2:62:4e:5c:cd:fa:fc:bd:ec:b5:29:89:0e:6e:7c:31:
d3:5c:c8:a7:aa:17:8f:50:79:37:12:37:01:2d:74:ea:28:ef:
4e:86:1f:68:7f:a1:ec:56:0d:ca:2c:d9:aa:ed:73:b2:f7:55:
5f:f4:92:49:e3:78:ab:20:80:8f:1d:df:65:1a:71:c7:3c:09:
f2:76:94:91:cb:f1:2a:52:e0:e0:cb:77:3a:39:40:f4:1c:85:
5f:39:b3:78:02:b1:1e:6c:fc:ce:0a:e6:f3:c6:25:58:31:14:
63:c0:c8:e3:72:dc:b5:56:ba:cb:28:df:7f:13:e3:9e:6a:dd:
4f:70:b3:f0:90:cc:e6:fa:78:68:d0:90:28:98:04:9d:3e:0f:
4c:43:62:19:b5:85:9a:a7:bd:72:1b:a9:39:f4:f3:d4:2c:59:
50:a0:15:68:4c:32:a5:c5:6c:1d:6a:35:36:7f:bf:6f:57:a8:
0c:08:29:73:71:c6:b4:ae:0f:58:53:21:0c:3c:af:5c:a0:3b:
ce:27:48:1f:d9:35:65:ce:93:4b:dc:d3:59:66:44:33:be:a2:
24:12:51:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVDiC3ufqR6hyBH1qOtLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx
NDhiNTQwHhcNMjYwNDE5MDYwMTE1WhcNMjYwNDIwMDYwMTE1WjAzMTEwLwYDVQQD
EyhjZThhMDYwYzllZWE3Nzg5NmJkMTlmMzliZjFmYmYyYmJmMTMwZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3N28sJnSMt2sHLfzsL1zaoGbqas
D4+q5JAZbYqDCUsYACN8gnbf30zuDU0i1uFrnUEJ8hbb3ittuvBck2ZO4R/mmCXz
pmsZtfun4Vc6x+aa3PlEwihK7HBi8eoiDqmz0sfDpNFejAVrZCohEzUIvMOGDY7t
11L628nNOsOb4cN3K0bfvCPUkQpRQuPA0iAOj1vOXeJ7jPa4Oj0vB3el+9V5iHfU
WujtSgXfMhLI4vGQBwxkflAajH1MXnuH3ngiS7u7cqmsSI4F7MVRxmWWn6XWIol6
ilm5GopTOkv5/9+1IoxJYaxSy3+fblM60/jGTjRSeclqkyQClFcpR9gi0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6KBgye6neJa9GfOb8fvyu/Ew2NMB8GA1UdIwQY
MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt
OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz
LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZH4Azvq
UfRoQuK7KxMFb1Y2JT1q6DDbrPlGQPKEe4suUPkefPOiYk5czfr8vey1KYkObnwx
01zIp6oXj1B5NxI3AS106ijvToYfaH+h7FYNyizZqu1zsvdVX/SSSeN4qyCAjx3f
ZRpxxzwJ8naUkcvxKlLg4Mt3OjlA9ByFXzmzeAKxHmz8zgrm88YlWDEUY8DI43Lc
tVa6yyjffxPjnmrdT3Cz8JDM5vp4aNCQKJgEnT4PTENiGbWFmqe9chupOfTz1CxZ
UKAVaEwypcVsHWo1Nn+/b1eoDAgpc3HGtK4PWFMhDDyvXKA7zidIH9k1Zc6TS9zT
WWZEM76iJBJRiw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:42 2026 by rpki-client