Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: agrfyYl2XHr2IPaldX9s6IOmo/FdAKOddMyt06xOR0s=
Subject key identifier: 52:75:60:62:D0:2F:33:70:49:91:37:82:50:A2:6E:E1:B9:2D:F5:29
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019D97AAA0B4DA4DB1FE4DD6B321291A83AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 19:00:35 +0000
Manifest this update: Thu 16 Apr 2026 19:00:35 +0000
Manifest next update: Fri 17 Apr 2026 19:00:35 +0000
Files and hashes: 1: DW0L4TMX0k7NIxwBqURjmrgnl7k.roa (hash: 9bpHxyEG2FowJ+5wF/MX0mk7jznSAQlzUuYCWXpTFQM=)
2: fdMO8uKSbPAwkZWz81kW00ikw90.roa (hash: bDzUzfVEg3uUN6Y1DlBJvXf2YCZXufjYUiQMDPh+1vc=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: JqRdZr/oaBXn4t1CXbHIzqIDPINWvQjOnmLoVuBAH3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a0:b4:da:4d:b1:fe:4d:d6:b3:21:29:1a:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Apr 16 19:00:35 2026 GMT
Not After : Apr 17 19:00:35 2026 GMT
Subject: CN=52756062d02f33704991378250a26ee1b92df529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:c3:dd:38:ee:eb:6a:e5:a6:86:a3:3d:de:
ae:c1:2e:d5:5b:c6:51:7c:d7:35:85:83:05:80:24:
e2:74:e7:72:a4:e7:a6:a1:1d:25:17:19:d2:57:8e:
da:20:62:0e:ca:23:71:f9:82:97:d1:44:89:3b:71:
49:df:6e:7c:e0:e4:44:cd:f1:3a:75:cc:87:52:df:
79:d8:17:53:33:32:c1:e9:ac:f9:6a:dc:53:9e:fc:
4b:5a:d2:07:b2:d3:fa:12:19:64:eb:c9:5d:04:fc:
31:bf:97:c0:9b:8e:6f:38:48:86:2c:1b:d7:cb:c6:
ac:2a:94:0f:21:7d:22:e8:e1:59:67:40:23:a9:44:
54:4c:7e:38:c2:5e:7e:90:7e:23:2b:b4:54:3c:41:
59:cf:39:02:4c:69:49:b9:f9:f0:46:bd:e3:1f:d9:
de:50:08:dc:97:11:33:a6:46:e9:2e:c3:67:5e:d3:
39:07:e5:a5:95:f8:e8:fb:a9:b7:c6:8e:de:40:3d:
36:9f:3c:de:b8:b1:4d:c9:91:35:1f:05:05:cb:37:
74:a8:bf:50:6c:76:48:50:3b:68:06:2b:bd:28:19:
07:ea:7f:d5:cf:89:5b:3f:c8:b3:59:3a:73:ba:70:
94:74:cc:8c:6a:51:99:0d:28:8a:88:08:58:81:97:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:75:60:62:D0:2F:33:70:49:91:37:82:50:A2:6E:E1:B9:2D:F5:29
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:68:a8:82:5d:f9:28:f7:fb:75:30:95:6f:17:05:38:a3:
0c:11:01:84:a1:d8:dd:c5:c8:26:98:ad:8a:28:24:eb:24:73:
27:4d:fe:53:95:b3:64:b9:71:b6:54:21:b6:f0:25:46:8f:0b:
0c:93:1b:7f:85:02:2e:34:24:b7:b7:10:6d:03:fb:19:44:6c:
ef:58:36:1c:d7:0f:51:f4:e2:f0:95:0d:3e:88:45:3f:06:3b:
25:f6:c8:65:4b:cc:c2:f0:16:62:d0:71:57:80:51:7a:e8:47:
3e:76:53:86:c4:e1:59:e8:16:8f:a5:3e:21:65:59:45:9f:11:
98:fe:d1:8d:94:f4:b9:79:0a:fe:4a:0e:be:83:a7:43:60:ee:
80:b3:07:9a:84:1b:06:4f:85:d9:57:0b:23:4d:ab:ff:89:7c:
42:fb:83:fb:2d:b2:7a:66:bb:4a:d3:51:f1:8e:41:43:22:49:
48:94:1a:56:f6:55:85:84:ff:4b:d5:a5:bb:fb:19:fd:3e:1d:
9e:f8:e0:6a:9c:55:a3:71:85:3e:69:35:b1:55:bd:84:94:ef:
bc:52:7d:36:b6:35:f5:f3:ef:52:be:5a:44:5e:8e:56:19:c3:
e7:8f:27:23:a9:a7:36:f3:ed:89:48:e5:f3:c4:35:60:48:16:
5b:f7:e0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:01 2026 by rpki-client