
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: hGA7AHDHqY1DIOhQxxCabiXdKuDir8xX4edsd6cjyW0=
Subject key identifier: DA:C6:FB:14:4E:18:12:DA:C7:13:52:09:91:19:6E:54:A8:D6:86:CD
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 019D98BD234A4F7C64079FE61C86EA6F406E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:00:25 +0000
Manifest this update: Fri 17 Apr 2026 00:00:25 +0000
Manifest next update: Sat 18 Apr 2026 00:00:25 +0000
Files and hashes: 1: 9KLlFthapgZ5ZFUX7xf1OgtLzP0.roa (hash: bPc9RL/nxXwNkSQiJ77/8DCqtYNfD11tx39BrcPmbM4=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: v2v8PQxY7EKh29dgnVKGtSOC4EB8QG0t39g17zh2toQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:23:4a:4f:7c:64:07:9f:e6:1c:86:ea:6f:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Apr 17 00:00:25 2026 GMT
Not After : Apr 18 00:00:25 2026 GMT
Subject: CN=dac6fb144e1812dac713520991196e54a8d686cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:98:1c:21:f9:ed:4d:71:4e:de:74:29:88:
b8:0a:1a:c5:00:dc:ed:f8:9f:a3:e5:1d:bc:00:49:
8e:c6:34:61:26:c6:09:df:25:36:0d:23:65:4f:15:
94:73:9a:0f:3d:fe:9a:f1:c7:ab:57:69:ed:0e:fe:
7d:9b:d1:c9:7b:7d:7d:22:46:5d:97:bd:28:ff:0d:
4c:04:35:3d:f0:b6:5d:ee:ae:fd:f5:c6:35:78:32:
4b:b7:3f:07:45:59:86:0c:a1:db:77:0b:fa:7e:88:
68:2d:b5:f4:b2:d6:18:b7:f4:3b:05:fe:1c:58:a8:
a6:f0:20:7a:38:c0:96:5b:b9:b2:89:49:2c:80:93:
dc:51:5f:94:82:40:10:b4:76:80:61:0e:91:ee:f4:
a7:c4:13:57:e5:72:d0:25:08:67:a9:52:d4:0e:33:
3c:2f:4c:09:7b:71:62:a9:0b:ec:38:ad:84:e7:12:
50:0d:0c:0b:6b:a2:bd:bf:ee:29:03:4c:49:68:08:
d0:bc:4d:2d:d6:cb:86:d7:d1:f8:db:2c:ae:f2:4b:
b8:e1:58:d1:61:9c:37:a8:23:ca:a0:8a:3e:d0:39:
78:5c:5b:bc:a8:a7:bf:5d:7c:4a:8b:69:48:5d:40:
87:b4:03:91:92:ce:de:ae:0a:e1:eb:55:46:7c:9e:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:FB:14:4E:18:12:DA:C7:13:52:09:91:19:6E:54:A8:D6:86:CD
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:a4:08:a3:5e:4a:b6:a1:f8:e4:49:10:44:92:07:22:e3:
59:ea:74:f4:45:82:73:e9:7b:68:87:67:62:84:61:34:e7:4d:
ff:05:ec:87:21:5a:aa:f9:47:52:f7:fe:04:81:2a:cb:6f:73:
1e:a8:8b:78:ec:e3:2f:b2:0c:8e:82:50:59:fc:5d:b8:18:4d:
41:a7:80:ea:f9:e8:3a:8e:16:fe:fe:e5:32:0a:27:35:c4:4d:
aa:01:11:19:39:77:35:81:b7:d3:26:89:2f:f2:2c:1f:7b:df:
bb:1f:90:5e:55:8c:35:c2:33:92:5b:2b:25:cb:01:01:c2:83:
fd:17:72:7d:8e:f7:4f:16:36:c5:dd:35:15:9e:10:8f:c3:cd:
49:4c:7d:d2:44:be:cd:6a:a7:78:e6:c1:b1:ca:16:ff:18:1c:
71:dc:00:42:18:06:11:e2:55:79:42:fc:9f:ac:c3:f5:50:6f:
df:43:18:b5:fc:46:65:81:bf:71:9e:61:da:8c:3b:6f:85:96:
44:dd:4f:06:94:7a:ad:53:b3:69:61:c5:ab:74:5d:3f:3f:d5:
c6:0f:62:66:d7:23:8c:7f:78:00:c2:5a:50:d7:58:38:e5:94:
83:c2:9b:a5:2d:b8:95:df:56:9e:11:e7:03:b5:01:96:8a:89:
2a:da:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:26 2026 by rpki-client