Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: nHl2A7jQe/ESSpiCxVUIoCi50m1GF8WBRXi8MNnA2+k=
Subject key identifier: 36:83:DB:67:56:E1:70:8A:66:6F:6D:C1:E6:22:43:56:1D:CB:18:2E
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019D9AE32A0C365DF6D6ED1C8C661F379DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 18A8
Signing time: Fri 17 Apr 2026 10:01:11 +0000
Manifest this update: Fri 17 Apr 2026 10:01:11 +0000
Manifest next update: Sat 18 Apr 2026 10:01:11 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: 8X/UdJoqbOGXPrT9SyM/ol7Evnz/8kf+C4QrO3te/bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2a:0c:36:5d:f6:d6:ed:1c:8c:66:1f:37:9d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Apr 17 10:01:11 2026 GMT
Not After : Apr 18 10:01:11 2026 GMT
Subject: CN=3683db6756e1708a666f6dc1e62243561dcb182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:8b:b2:c5:40:55:82:85:99:d4:d1:5b:fc:
ac:51:97:99:96:9b:5b:ee:d3:f8:f5:89:69:3c:37:
ff:53:34:41:40:ed:18:7a:2e:8a:ee:e7:9a:ae:92:
d1:ea:3f:d5:7d:ed:20:af:41:84:31:82:50:1a:76:
e8:e2:b8:4d:58:1f:97:e3:50:e4:3d:c5:a0:50:08:
f1:51:50:d5:f5:6e:be:8c:d4:c5:ac:d2:94:32:9b:
7c:cc:fe:95:f5:15:1e:97:f6:52:44:37:b7:40:56:
33:3e:10:28:da:29:91:c4:f8:3c:12:ca:dd:fd:ee:
a9:2a:b1:a4:9e:78:ca:fa:f0:da:55:7a:24:20:34:
25:00:4b:95:89:ee:cc:ce:11:bf:a5:44:10:36:35:
ea:00:57:07:97:7e:03:f6:b9:11:13:60:ad:a1:9a:
3f:0c:91:55:1e:87:96:d2:74:dc:8d:3e:bf:79:d2:
f1:5b:8e:a2:75:d1:51:1b:fc:7e:ca:7b:d5:4f:e2:
46:1a:12:d9:15:35:79:f2:ea:11:75:de:36:7e:83:
f7:bb:a4:48:96:01:8d:c3:32:f0:cd:19:68:7a:5f:
8d:71:61:b9:d9:71:c2:1b:58:14:1f:47:21:22:8c:
0c:43:88:70:7b:48:22:2c:c4:da:a8:e4:e0:81:0e:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:83:DB:67:56:E1:70:8A:66:6F:6D:C1:E6:22:43:56:1D:CB:18:2E
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:09:d7:09:0f:33:a3:5a:b9:2e:3a:5d:5e:e2:e2:1f:6c:b3:
51:de:fd:eb:8e:31:c2:df:c7:77:4a:44:58:1a:65:e9:9c:8e:
32:30:54:ba:c3:46:e7:1d:bc:d7:18:20:5b:a6:ce:7f:31:2f:
aa:34:6a:bb:7a:ea:c8:b9:78:b2:54:e9:49:46:a9:9c:70:f3:
8d:22:b6:c2:86:4f:a5:11:f1:53:a9:e5:2b:22:a6:26:f6:87:
16:b5:66:63:96:aa:54:1c:95:fb:11:57:3f:6c:93:12:49:57:
47:e8:95:e6:eb:07:2c:42:9f:d9:78:7d:02:ca:70:a0:97:28:
60:64:aa:d4:f2:7e:b9:55:6f:25:40:58:93:a1:69:52:0e:59:
dd:f2:77:46:d5:a3:b5:d4:35:15:c1:d5:21:51:04:19:fd:ef:
3e:a7:86:75:86:4c:b1:1d:63:7e:eb:83:17:52:fc:e5:fd:e8:
9d:1a:3b:2e:59:6a:cd:88:48:d0:7c:a3:c0:a1:d2:ef:b2:57:
6b:1f:41:2b:3f:8d:0a:0c:d1:5d:b4:a9:3a:46:0c:f8:24:24:
71:5e:32:16:07:4b:c7:ed:7c:f9:ad:7f:a9:4e:91:ba:d7:03:
40:55:06:5f:61:38:2a:96:41:49:bf:d7:42:45:c6:fe:01:de:
63:38:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:06 2026 by rpki-client