Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
File: Jd2bhJwNr644b0cBI7CSYa41VRc.mft (raw, json)
Hash identifier: TUJbPvv3u5NqvHG+9BBJH9r6EskMHA5ySL+Kn6p9kXE=
Subject key identifier: AC:CA:CC:FC:C7:6A:49:D7:74:56:B8:67:EA:EC:12:C7:E1:DC:54:B5
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 019D99622AEFBDEA2352A3CD9A29C27CEFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: GHTdayMiWDlw-FficQL48lxhZOg.roa (hash: FsnkdiClv5Pq5UfPSWarTRIqcdA96NlEZ5WqhhR+uB4=)
2: Jd2bhJwNr644b0cBI7CSYa41VRc.crl (hash: 9MqRv+rmxd5WXmvzGZZX1zjXk6P5/yfUzo81GnDHmAo=)
3: YoG-FSIwZG75jmbunNKK5iNqjxI.roa (hash: 4W4AIOU7bTCXgAo+Q56kCjhAV3Ite04SA4ttlsHvgNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2a:ef:bd:ea:23:52:a3:cd:9a:29:c2:7c:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=accaccfcc76a49d77456b867eaec12c7e1dc54b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:10:c7:27:03:40:16:f2:b7:7a:6c:3f:28:
44:c0:00:e0:3a:ae:01:a6:f9:81:43:3d:6c:4b:e8:
e2:d5:2b:1d:e1:e2:6d:18:2b:4f:51:10:99:89:06:
ea:9b:98:17:af:8b:d0:8a:82:76:67:e7:60:0c:80:
0d:85:f8:7c:f5:bf:91:f5:42:05:b6:02:52:7a:fe:
d3:66:cd:37:7e:dd:57:d6:ad:a5:9f:c6:34:56:9a:
aa:5a:37:9f:a0:05:9c:d7:1a:ae:21:e9:1a:38:f3:
f7:a2:28:bc:26:dd:f2:71:0f:72:b9:20:1c:e5:49:
48:4f:17:7b:f1:ab:6b:23:06:a7:a4:bf:20:78:a6:
88:67:f3:fc:44:35:71:1f:28:a0:61:22:c0:f0:0d:
bd:27:76:54:95:29:56:0a:8d:bc:4c:54:1a:63:9f:
2f:bb:74:12:a0:90:3f:7f:46:4f:c8:fc:56:de:8a:
5d:2d:f5:cc:bc:3b:07:6f:3c:be:c0:69:d3:85:5a:
33:a6:a9:6d:04:e0:5d:ca:91:f1:2a:23:9b:ab:26:
b2:06:27:14:64:e7:c5:a5:8a:cc:dd:8b:04:1a:98:
9a:07:1e:f8:97:9b:c0:ab:80:22:5c:78:2a:a7:c5:
b4:e7:c9:9b:bd:d2:21:f4:2d:51:03:49:25:e6:12:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CA:CC:FC:C7:6A:49:D7:74:56:B8:67:EA:EC:12:C7:E1:DC:54:B5
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:90:ef:2b:3c:1f:40:39:75:5e:a0:b4:1a:05:72:20:ba:2c:
d6:52:2c:85:e6:9d:58:01:c0:49:40:43:22:36:78:98:a5:31:
bb:ad:f5:6c:ca:99:81:2e:15:55:ae:b5:52:43:49:29:0b:0f:
5b:7f:42:9d:c5:ce:96:9f:cc:7c:c6:17:4c:0c:79:00:20:21:
47:3d:f4:72:be:60:38:43:6f:b4:54:19:ad:04:62:3d:f8:36:
87:a7:6d:2b:fa:be:44:8b:1d:76:79:ae:8a:8b:f3:24:a7:2e:
79:f5:4a:3a:99:a4:ab:fa:f3:fa:13:8c:f3:2e:b7:4b:24:d6:
e1:91:9f:0d:bc:2b:a9:18:34:59:11:08:98:64:53:35:56:09:
b8:7c:2b:ee:d5:e2:9e:8f:b5:6d:bb:3f:d6:53:01:04:d9:16:
35:df:69:fa:14:05:d9:87:5a:20:ff:47:42:98:cf:c8:49:07:
4b:72:ea:90:bc:cc:68:9b:c3:89:12:e8:5e:4c:fc:4a:95:2f:
b2:e2:2f:6a:e8:ad:61:9c:71:27:00:1d:38:b5:01:db:bf:4e:
6c:38:c6:98:93:f6:08:c1:04:fc:ce:7b:92:20:82:3f:2e:36:
22:fc:f1:48:14:54:3a:98:1b:bd:4d:45:be:6c:ba:8d:b9:6a:
83:95:e7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:27 2026 by rpki-client