Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: oxEQHCp/vp3lf/2gB1FOY4SY8yaeR7BBI9l+ShUSBEw=
Subject key identifier: EF:2F:5F:1A:B8:8C:60:61:63:E8:B8:E6:20:55:E6:DA:43:7F:10:87
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019D988648ECC7631BE89D06DE14C806D671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: AOmjrOzPIA+dw0mJKM5J1wQyr5NIUYT8oqWGoXMGHW0=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:48:ec:c7:63:1b:e8:9d:06:de:14:c8:06:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=ef2f5f1ab88c606163e8b8e62055e6da437f1087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:ac:e4:b1:5f:e9:a6:9c:54:0c:a0:1b:0d:
31:2a:46:b6:d1:a7:f7:b6:8c:36:ce:66:d8:41:db:
4e:c3:e6:10:22:06:c7:61:c4:7b:b5:3f:c9:fa:de:
ea:9e:e3:89:5f:8e:bc:60:4d:30:c1:7d:5a:35:85:
f2:95:d9:5e:d4:7a:d2:63:3d:e9:0c:34:0e:6d:fe:
79:b4:01:84:75:87:82:4d:c2:32:37:17:bf:93:66:
bf:4a:31:77:76:49:5f:db:56:84:d9:29:77:a5:f7:
b4:91:b1:9c:7e:c3:5e:cf:75:73:ba:8c:1f:c8:13:
71:c7:2e:9f:93:a7:ef:05:da:c5:6a:2d:3b:f9:e8:
33:10:f0:7c:bf:58:3c:87:c2:ca:41:fc:33:67:b1:
69:15:8f:f2:a1:08:7d:91:9a:dc:7d:a9:6c:57:21:
82:48:f1:17:8e:12:42:3b:e6:3c:df:a6:24:4d:b6:
a8:e7:79:ec:e0:02:3e:08:cf:25:18:f7:f6:8d:f0:
83:de:fd:c1:7f:73:27:c5:3b:1f:71:6a:df:46:e9:
fb:3f:61:e6:01:5a:15:22:63:e7:d5:0b:77:f7:de:
cb:2f:ba:15:49:12:5f:4b:e3:60:2c:6d:42:82:de:
60:bd:ac:51:29:1d:d9:ff:99:d9:16:fc:bc:b6:7f:
53:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:5F:1A:B8:8C:60:61:63:E8:B8:E6:20:55:E6:DA:43:7F:10:87
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:e0:ab:e9:05:c1:b7:4b:49:cf:1f:4b:c7:5c:9b:d0:2f:
47:9b:31:29:fc:22:11:be:60:04:01:b8:4e:37:ff:84:71:f4:
1c:e3:77:32:cf:bc:91:a6:8a:5b:4a:c5:ce:bd:d4:76:5a:cc:
72:73:da:1b:87:84:b7:f5:09:ee:0d:f1:6c:6a:81:e4:cc:57:
20:70:32:3b:36:f8:c2:38:e4:44:05:19:81:e4:63:8b:4e:fd:
f6:fa:0f:aa:8a:9a:4a:1c:06:93:ba:92:0b:89:95:bb:a5:6a:
3c:2b:62:78:22:89:8b:81:fb:6c:ed:09:4c:b8:ce:59:ba:4e:
ad:af:95:04:64:d3:11:62:1b:81:de:5e:4f:9c:8d:1d:29:0a:
cc:85:45:40:df:67:ec:88:15:20:f6:dd:bf:47:00:f7:34:46:
f9:47:d5:64:f2:9c:eb:fb:74:ef:51:30:2c:d6:ed:01:3e:ab:
7e:76:49:b8:ad:15:12:da:cc:7a:02:15:de:4d:22:f4:d5:26:
c0:cd:33:ac:09:79:c1:da:7b:21:4e:cd:70:19:79:69:0d:a2:
3e:50:d6:66:f1:8a:b6:76:bf:81:78:8d:59:dd:13:ab:a4:c0:
3f:8c:66:fc:7d:27:65:61:d7:61:e8:b9:14:9a:55:f8:95:34:
de:f1:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:22 2026 by rpki-client