Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: f93cMCgcrL3uovBXmVMhXOXBLUqjmy+eX0yulvkiZos=
Subject key identifier: D2:EF:F6:E4:FF:22:40:28:FD:5D:8D:2A:2E:D4:F0:6F:3D:D2:7C:00
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019D98869600BCC7A56FF540012C5DD419F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 23:00:50 +0000
Manifest this update: Thu 16 Apr 2026 23:00:50 +0000
Manifest next update: Fri 17 Apr 2026 23:00:50 +0000
Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: hdgeB15uod2CpQ574lzMSC97fpIztDCigADJVEIJxDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:96:00:bc:c7:a5:6f:f5:40:01:2c:5d:d4:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Apr 16 23:00:50 2026 GMT
Not After : Apr 17 23:00:50 2026 GMT
Subject: CN=d2eff6e4ff224028fd5d8d2a2ed4f06f3dd27c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:83:6d:04:25:fa:b2:52:e0:c1:eb:dc:fa:df:
13:5c:a2:ad:bb:71:bd:b7:ec:8f:c5:c4:85:14:5c:
3f:af:94:95:1b:48:f2:cb:4c:30:8a:2a:86:5f:53:
4b:c2:30:34:39:86:8f:a1:56:86:5e:5c:91:1d:e1:
5c:19:29:5d:e3:47:44:58:03:4d:da:20:a9:2a:c4:
6a:46:ef:fc:b7:6d:c8:ef:e9:f7:d7:79:ec:35:6f:
91:93:22:31:e1:4d:29:1a:5c:80:14:82:c7:32:3c:
b6:37:ad:cf:54:f6:c7:86:31:f4:88:26:5a:81:7d:
5b:0c:4e:b8:19:1b:26:90:c5:2c:73:63:43:2e:54:
cd:57:c6:19:d8:7f:ba:ef:25:47:01:59:2e:a6:12:
6a:02:cb:03:36:49:78:b5:49:70:14:3b:e5:e1:72:
c0:b2:35:b6:96:29:09:93:49:40:55:d4:0c:99:ae:
90:52:57:63:49:c4:b1:6d:dd:42:55:73:57:7d:ce:
84:07:d4:b2:ec:d3:f9:7b:8f:e5:3b:d8:ca:c9:a0:
30:ff:47:9a:99:30:ff:14:14:1a:68:50:70:29:bb:
36:5d:53:74:74:8a:5c:86:a5:c6:8e:e9:7b:a1:bd:
31:59:9a:d9:b5:ba:94:e4:02:3b:9e:f1:16:b4:9a:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:F6:E4:FF:22:40:28:FD:5D:8D:2A:2E:D4:F0:6F:3D:D2:7C:00
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:2c:e6:96:9e:db:cf:79:0a:8a:34:b9:50:7a:43:c2:4a:
70:3e:57:a4:3d:23:0e:a3:bf:fb:d3:81:18:20:91:36:5e:d6:
55:29:4f:f4:8e:e3:50:47:59:9b:b4:7c:a4:7a:09:c8:c3:38:
ae:7d:c5:0f:99:95:a4:74:2c:e7:7d:88:9d:61:ef:53:bb:bb:
e7:2c:f6:22:c5:29:1b:3f:a6:63:73:d9:8e:e5:75:76:b1:5e:
85:09:80:6f:08:b9:b4:84:04:8f:0b:3c:9f:8c:e4:7b:31:1d:
87:27:02:e2:dc:84:03:2d:9e:ce:f3:0b:64:c0:86:a8:59:18:
5b:62:f2:b4:64:7e:20:22:c4:74:9e:69:96:5e:30:96:e5:19:
59:46:e6:3d:33:54:12:5f:3a:5b:28:7f:33:fa:ff:3f:e6:3c:
82:8b:90:dd:58:b3:da:ff:ec:ab:c9:a6:33:11:41:3c:34:76:
83:8e:a5:20:4b:b2:ee:15:d2:3d:d8:9e:40:0e:4e:25:60:0b:
09:58:c9:06:34:a7:79:09:47:6e:1f:1b:f6:87:3e:79:66:d2:
41:a7:a6:df:7d:43:e6:ab:0e:d4:00:57:c3:ef:74:f0:f7:7a:
94:17:9f:da:04:a8:3c:8e:ae:e1:51:07:bb:43:3c:0a:fe:dd:
e7:96:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:55:44 2026 by rpki-client