Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File: jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier: mbRwUf1Th74mtWm05QWlrGDaa4VCIn8H6zaT+zANdDU=
Subject key identifier: DF:EC:7A:98:F5:5B:F7:6A:21:51:34:97:89:96:87:1F:A3:C3:73:20
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer: /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial: 019D9A74A6E76A33860494693F1776AE2B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number: 0649
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: Ev84dzr99BkEprLlsKv-9iCyhPY.asa (hash: A4Hylllyzq6B6OAjJOwRb/t7tAR+6RCdPmT8bW5GCjg=)
2: bILTlSPGWMGMY_1Qfmo1vE-bgOc.roa (hash: t48mqB2NaYieA0CKr3J9wx4iPJRQZqgCszx9KbMiWRM=)
3: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: KAIXHLYlBND8vSKi9e+pAZ1q/OR6mPhtbQPeAtWW7c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a6:e7:6a:33:86:04:94:69:3f:17:76:ae:2b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=dfec7a98f55bf76a215134978996871fa3c37320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:0d:00:3e:d4:de:e9:50:ac:a3:a7:ab:3c:
5e:20:03:cf:01:e7:a2:3c:a1:3d:42:b3:b7:7f:4f:
9c:3b:fc:c6:97:32:81:af:36:ac:8a:b8:4a:e7:bf:
40:50:78:85:da:77:fc:ea:08:bc:7b:ff:f6:86:d2:
f0:18:cc:18:cb:c5:bb:00:d3:61:0b:b5:6d:13:e9:
87:a6:37:76:0b:18:19:19:b2:5d:d9:5c:bf:ec:5b:
bb:61:77:3b:63:7e:de:b2:d9:6a:1f:c7:40:d1:a7:
1e:66:35:6a:a0:64:c9:ab:f6:60:e2:d5:91:ff:de:
8c:f1:1d:ab:9c:cb:54:23:ea:5e:06:be:d6:5c:fa:
0d:1a:52:44:d9:dc:4e:1b:f3:b4:86:1e:0d:4f:da:
e1:ef:b8:da:df:01:2f:af:16:28:a0:03:58:3b:cc:
43:06:e0:61:44:e5:e8:8b:78:7a:0e:5d:42:73:af:
40:ae:a8:d7:dd:ac:64:08:ce:d5:57:34:8c:d6:af:
29:73:e6:fb:15:b3:5f:5a:82:a5:64:cf:55:c5:c4:
de:91:62:cd:71:99:56:53:cc:2f:44:96:b7:d5:66:
87:59:44:05:7c:14:dd:d4:04:91:f9:e2:72:c5:1a:
0a:e9:ff:c9:e4:1f:8e:a6:6f:0f:67:9b:2b:4a:e3:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:7A:98:F5:5B:F7:6A:21:51:34:97:89:96:87:1F:A3:C3:73:20
X509v3 Authority Key Identifier:
keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:b5:75:00:af:f4:50:c7:dd:31:f1:37:d3:7c:d3:b1:c9:
a5:a1:10:15:a5:fc:2c:ec:57:88:95:80:58:71:42:45:dd:21:
11:e1:37:61:6a:41:da:13:3f:ba:18:c5:ff:1a:3d:db:42:b2:
f0:89:12:eb:e3:fd:24:14:0f:3e:5a:28:01:22:1f:9a:f1:ba:
10:0a:91:eb:18:d9:81:fe:9f:10:83:87:3c:e3:36:15:94:d9:
92:80:53:9b:53:c1:1d:be:a3:81:16:5c:46:ba:b9:82:69:f4:
6c:6d:5c:91:06:c9:0b:7c:04:12:b9:4b:96:d8:12:30:1f:28:
6b:94:70:44:5a:82:cd:f9:69:5b:4f:40:2a:94:ae:74:18:bd:
19:fc:f2:0b:aa:91:f0:f3:81:b9:05:c7:36:c0:27:d7:24:05:
9b:28:43:b1:27:0f:14:e5:91:f5:b2:4e:4a:90:8c:b2:24:e7:
07:87:40:3a:59:b2:6e:b2:02:a5:70:d1:1c:60:5e:2b:40:08:
13:93:9a:be:b2:6d:4c:be:ae:b0:82:ff:73:8b:43:02:bb:d0:
3b:d1:69:9b:29:42:1f:38:5f:1d:e3:e6:eb:23:85:41:ba:6c:
0c:0d:82:54:40:ad:be:94:bc:c6:fe:a9:53:95:f3:89:ef:48:
99:75:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:26 2026 by rpki-client