Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File: _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier: bWs7K8h6RHIMdccxJvdgt2bkIHBUWV45MmJ4OXMSYzY=
Subject key identifier: 4B:F4:F8:62:D4:93:05:89:E7:6D:4B:5C:46:AE:A7:D0:DD:D1:60:F2
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 019DA4C19A18B1D2017F7A7517498DEA4DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 08:00:44 +0000
Manifest this update: Sun 19 Apr 2026 08:00:44 +0000
Manifest next update: Mon 20 Apr 2026 08:00:44 +0000
Files and hashes: 1: U8t2JW_kjuRPOEEcuD5OXG8vU5s.roa (hash: AonXRXVRx1Opw2zNQQjpzxeB1MfNANDEV8Jlm8F8xC8=)
2: WrfLi6B4C5n8KYb3aO5hiWyqrQw.roa (hash: l450E1VbjWMP09lLWfXBdFYDcmgMKFdvyz3EAYHxkx4=)
3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: DYaGJKT6MzWI/tZ5cEZ9N7+E4q9pIFRhkM+ntyr97vU=)
4: oj9oX7VOpSpHPa8jC4mFQUNG32g.roa (hash: Hw7z02cVTJ9+JSdnwOvxaUFM6zH/Yq09kWqzPwdi4Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:9a:18:b1:d2:01:7f:7a:75:17:49:8d:ea:4d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Apr 19 08:00:44 2026 GMT
Not After : Apr 20 08:00:44 2026 GMT
Subject: CN=4bf4f862d4930589e76d4b5c46aea7d0ddd160f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:ae:24:43:93:77:21:d4:24:83:10:7d:7b:
bb:ee:98:2b:8a:e6:40:17:1b:d4:6f:b4:47:7f:05:
86:e9:7a:a3:17:67:1a:9f:73:a3:cb:e1:a0:2e:71:
14:01:3c:dd:0e:da:23:9e:87:9a:78:b6:75:7d:4d:
3e:a8:ae:d7:f4:57:62:7e:22:7b:e8:18:38:7c:48:
fc:d3:ff:bc:1a:ce:25:b5:08:bc:46:ac:02:73:4a:
72:5f:f6:0d:0d:1e:82:9c:ec:c2:a5:e3:ea:b9:76:
e0:9e:ba:ca:6f:85:1a:d8:58:c7:c8:80:6e:6a:19:
61:13:97:2c:6d:85:e6:e6:a7:33:54:fd:c8:2e:86:
13:6d:b0:5d:24:0b:7b:0f:ca:87:0c:7c:e9:db:7b:
85:b9:4e:37:64:cf:3f:75:12:17:7d:15:18:99:aa:
b9:4b:fb:43:93:43:df:3e:00:f5:32:cb:ef:31:de:
a3:e6:80:12:cc:95:15:19:30:73:d6:05:98:34:9d:
b5:b8:c6:4e:cc:65:49:47:39:18:93:c6:36:a7:13:
22:e9:98:0d:58:03:f9:c2:0a:47:a7:b3:67:dc:e2:
23:03:3d:1c:60:57:1f:5e:88:3e:9b:9f:30:b7:15:
6c:29:be:80:da:b8:9d:1f:8f:b1:40:85:d8:49:6b:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:F8:62:D4:93:05:89:E7:6D:4B:5C:46:AE:A7:D0:DD:D1:60:F2
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:62:31:68:6c:77:5a:77:88:05:5d:31:5a:e4:a3:69:24:df:
0b:73:8b:89:09:2a:35:53:d9:f3:a2:4e:d5:70:f1:65:27:05:
88:8b:92:c9:0a:7e:81:c0:45:5e:28:69:f2:4b:36:5c:f2:50:
c2:4e:0b:98:8c:b6:13:06:64:22:64:b0:e0:9e:3e:70:77:b5:
15:cf:25:52:42:0c:e9:19:aa:e8:33:5e:82:b9:06:6f:40:d2:
97:ed:64:73:f6:3f:ec:33:aa:30:8c:62:af:13:fa:f8:a8:41:
2e:96:25:5d:46:c3:a9:fc:40:3b:fc:2a:fc:d5:ec:05:24:75:
4f:d1:57:8a:9c:37:e0:e2:52:46:2d:95:89:a1:56:25:9b:66:
15:ea:b3:f1:34:ac:16:63:1e:70:4e:f7:e2:23:99:ae:bd:99:
3d:c4:57:42:e5:7f:8d:c6:30:3d:d9:63:be:84:fe:bc:0e:b8:
c0:f3:12:f6:70:45:e4:fb:87:1e:ae:8f:e9:62:0e:82:cf:65:
ad:8d:c9:bc:05:d9:ab:14:02:a1:47:88:66:05:4f:91:c2:9d:
2a:c1:e5:47:c3:62:78:e9:e4:50:25:33:be:b8:40:02:f3:80:
d1:bb:76:14:2c:96:15:66:23:f7:5c:cd:68:15:56:cd:d7:51:
8f:71:ff:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwZoYsdIBf3p1F0mN6k2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjYwNDE5MDgwMDQ0WhcNMjYwNDIwMDgwMDQ0WjAzMTEwLwYDVQQD
Eyg0YmY0Zjg2MmQ0OTMwNTg5ZTc2ZDRiNWM0NmFlYTdkMGRkZDE2MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6CuJEOTdyHUJIMQfXu77pgriuZA
FxvUb7RHfwWG6XqjF2can3Ojy+GgLnEUATzdDtojnoeaeLZ1fU0+qK7X9FdifiJ7
6Bg4fEj80/+8Gs4ltQi8RqwCc0pyX/YNDR6CnOzCpePquXbgnrrKb4Ua2FjHyIBu
ahlhE5csbYXm5qczVP3ILoYTbbBdJAt7D8qHDHzp23uFuU43ZM8/dRIXfRUYmaq5
S/tDk0PfPgD1MsvvMd6j5oASzJUVGTBz1gWYNJ21uMZOzGVJRzkYk8Y2pxMi6ZgN
WAP5wgpHp7Nn3OIjAz0cYFcfXog+m58wtxVsKb6A2ridH4+xQIXYSWunIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEv0+GLUkwWJ521LXEaup9Dd0WDyMB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWIxaGx3
WneIBV0xWuSjaSTfC3OLiQkqNVPZ86JO1XDxZScFiIuSyQp+gcBFXihp8ks2XPJQ
wk4LmIy2EwZkImSw4J4+cHe1Fc8lUkIM6Rmq6DNegrkGb0DSl+1kc/Y/7DOqMIxi
rxP6+KhBLpYlXUbDqfxAO/wq/NXsBSR1T9FXipw34OJSRi2ViaFWJZtmFeqz8TSs
FmMecE734iOZrr2ZPcRXQuV/jcYwPdljvoT+vA64wPMS9nBF5PuHHq6P6WIOgs9l
rY3JvAXZqxQCoUeIZgVPkcKdKsHlR8NieOnkUCUzvrhAAvOA0bt2FCyWFWYj91zN
aBVWzddRj3H/dA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:52:34 2026 by rpki-client