Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
File: jcayOVFjzkewNvrgKnH5SIBL9V8.mft (raw, json)
Hash identifier: ggCEuczDlBReM9mtOApx6lX6S49BBCIMcOblN2p2sc0=
Subject key identifier: AF:4B:B7:90:09:7A:4B:DE:D6:40:CE:97:B6:29:EB:23:60:F7:17:48
Authority key identifier: 8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
Certificate issuer: /CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Certificate serial: 019D9A74B37A4F12FB71A23D3149B7158B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
Manifest number: 2D
Signing time: Fri 17 Apr 2026 08:00:32 +0000
Manifest this update: Fri 17 Apr 2026 08:00:32 +0000
Manifest next update: Sat 18 Apr 2026 08:00:32 +0000
Files and hashes: 1: UqSLybQPqtyf12w058GGJrCrwlE.roa (hash: ay496TJzckN/WV79yGM4pv+K/GRv47GhhBgHEduwC9o=)
2: jcayOVFjzkewNvrgKnH5SIBL9V8.crl (hash: iFTKh6NAC9j1W44ZEzg/eaSuTMJiy28EHL+90gNducU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b3:7a:4f:12:fb:71:a2:3d:31:49:b7:15:8b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc6b2395163ce47b036fae02a71f948804bf55f
Validity
Not Before: Apr 17 08:00:32 2026 GMT
Not After : Apr 18 08:00:32 2026 GMT
Subject: CN=af4bb790097a4bded640ce97b629eb2360f71748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:8c:9c:44:94:1e:ce:1f:60:59:e7:0a:33:
89:10:e6:aa:48:b3:f2:17:24:cc:1e:cb:90:f4:4a:
34:c8:36:b3:f2:63:e4:6b:84:d5:e1:e2:2c:33:fe:
af:6f:38:2e:a8:3c:d1:63:cf:6a:8d:a7:79:75:e3:
59:1f:8f:8f:08:a8:c7:cb:17:c4:da:12:9d:32:06:
52:66:13:5f:0f:b3:86:43:1b:ea:0f:b0:ef:fe:53:
2f:47:51:7b:b1:34:a0:2a:cb:0f:0c:ca:e8:42:bb:
58:c6:3f:4c:c3:2e:48:43:70:d7:7c:a7:8e:36:c9:
9f:66:48:72:18:70:70:1c:d9:e9:19:31:ac:db:dc:
e7:4b:17:97:47:ea:7e:f7:cf:15:1e:be:72:2c:a4:
77:3c:96:6c:18:54:9f:39:74:a8:11:f8:25:8a:99:
7a:c8:e1:00:1d:60:72:1f:96:35:a1:d9:14:3e:fc:
ac:e2:79:2f:d9:87:18:11:a7:db:c8:b5:09:d7:99:
fd:9e:83:fa:43:90:85:61:82:94:95:4c:45:f5:e4:
82:b8:33:3b:93:c5:49:32:96:bb:89:cd:8a:4e:f5:
e5:c6:6a:48:b2:18:b3:b9:55:d3:6a:87:bf:62:c1:
db:3f:8b:98:44:8f:8a:cb:ae:6f:c0:b4:e4:75:aa:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:B7:90:09:7A:4B:DE:D6:40:CE:97:B6:29:EB:23:60:F7:17:48
X509v3 Authority Key Identifier:
keyid:8D:C6:B2:39:51:63:CE:47:B0:36:FA:E0:2A:71:F9:48:80:4B:F5:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcayOVFjzkewNvrgKnH5SIBL9V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8a4bd2-fd0b-4f2e-afdb-9f8f83f82228/1/jcayOVFjzkewNvrgKnH5SIBL9V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:36:ad:60:5c:24:7c:8f:4f:2e:67:ad:d8:74:db:8b:b6:e1:
c5:6e:64:47:5d:54:db:a3:df:b5:c4:ab:45:37:90:e2:73:87:
81:7f:af:2a:39:83:cb:31:4c:27:51:85:91:18:48:af:8d:f9:
01:dd:51:af:27:eb:76:8f:60:1e:83:43:eb:90:6f:f0:6c:ca:
a3:17:5e:1c:aa:1e:95:2c:af:fe:50:49:5f:d8:5e:d4:0b:97:
cd:b5:2a:0c:cf:78:cd:25:d5:96:d9:92:39:2a:00:33:25:0a:
a1:f4:85:9b:d9:d8:10:57:f1:a6:d6:69:91:e2:61:7d:db:23:
b6:47:8c:45:f0:d2:bb:10:bf:e9:3a:7c:35:84:9b:2e:9d:a7:
d1:e1:6a:32:82:fe:c3:ec:1e:b9:59:02:e8:66:9c:f4:51:ba:
ef:77:07:2f:9a:2f:87:37:cb:0a:59:8d:f5:d6:f8:e6:06:b7:
15:54:4b:95:12:3f:2e:6d:91:eb:b4:ca:f9:2a:c4:75:a2:99:
c6:1c:a0:41:1c:50:b6:ef:bc:de:20:57:fd:05:75:78:2f:de:
57:80:c2:69:4b:ce:d2:83:e6:17:52:b1:48:09:9a:ed:3b:2d:
ed:1b:29:97:07:b9:4c:74:75:99:d1:9a:98:1a:a7:d1:2e:d3:
11:f3:03:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:08 2026 by rpki-client