Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: d5tgH26iS0EOoHcVEssR6RWeCA+Iv+HkJs8WOXGRW9s=
Subject key identifier: 1E:E7:C0:38:D9:B6:10:07:57:0D:F2:5D:D1:DA:4E:96:52:B8:3A:80
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 019D9A3E12D45AB02CAE65543650BDC9ACD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: UnTOjQEZ4O0L5YaWb-Giu8CUXKA.roa (hash: s7GA4eqf5DoRRiNJRrEX+zAJuNz9IR335s9XPM6efIU=)
2: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: yIEoY/q1Yc8HqvzXGyHPVmI25OO45xNdd193ieMH2zc=)
3: uh159NPLsutfBxTfVmBXo6jRKfI.roa (hash: cuRJ8cZbX6qurWVTG+A5l4bJsxobrXuPMyOmp4NalQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:12:d4:5a:b0:2c:ae:65:54:36:50:bd:c9:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=1ee7c038d9b61007570df25dd1da4e9652b83a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:1c:ca:0c:8d:2c:e6:67:74:4c:59:9e:ff:
5f:b4:ff:dd:ab:0a:35:46:ac:7a:4a:ab:60:26:39:
66:c8:2f:12:72:9c:5f:3a:58:58:16:bf:1a:45:04:
35:73:ad:48:bc:38:0c:f4:10:57:4f:ea:26:14:64:
63:74:03:c8:bb:24:08:a8:e4:1e:31:a1:8d:db:78:
87:a0:b8:9e:c6:87:86:13:95:26:b4:9d:cc:83:82:
6d:a7:29:4e:d7:a3:11:c7:86:11:84:38:e4:1b:70:
66:f1:9a:44:b6:e7:f3:80:f1:a7:12:89:8c:43:c9:
12:d3:f5:7d:60:e9:ef:80:59:eb:db:93:03:84:06:
c6:8d:f1:40:49:91:e4:6f:31:3b:21:2e:c6:f3:ed:
42:27:97:1f:3d:34:c2:6b:ed:11:5c:78:56:b3:85:
f3:e7:c9:69:f5:29:5e:41:d8:33:01:f9:14:3e:da:
5f:03:c5:83:73:14:a9:ca:7e:11:ec:fc:45:2c:db:
24:3b:39:9b:07:90:e1:70:5a:84:09:fc:d9:c9:aa:
cb:88:fd:8f:f7:a7:31:a3:66:7c:96:a7:c1:20:34:
be:5a:44:07:66:ed:a1:90:e3:13:ef:ad:90:29:f4:
38:e3:ae:0f:5b:22:cb:04:55:d3:da:d1:67:68:fd:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:C0:38:D9:B6:10:07:57:0D:F2:5D:D1:DA:4E:96:52:B8:3A:80
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5d:51:3f:a9:28:9e:9f:5d:5f:4d:6a:c0:3b:e4:4b:a3:df:
a3:ff:70:7c:09:aa:95:f9:f8:00:8c:8f:75:c8:78:70:c7:48:
b7:c0:5a:ce:76:bc:8b:ed:c7:d7:77:88:62:99:67:f1:dc:32:
25:ab:6d:48:29:17:80:05:9d:22:0f:81:17:27:30:76:e2:13:
60:44:05:2b:99:2b:55:a9:09:c5:41:68:19:ca:81:64:94:b9:
3d:ee:49:5c:10:15:85:9b:f1:e5:eb:47:30:4d:c3:1c:01:89:
36:e2:6a:74:a9:4e:d1:d4:81:15:ee:a5:9f:94:db:4b:93:fe:
61:94:eb:9c:37:d4:cc:a4:a3:80:6f:50:8c:75:58:4e:f0:00:
2b:b4:c9:4e:e6:b4:2a:b9:be:0a:7f:f5:f1:e2:77:34:1c:d1:
52:ad:e8:fe:b5:11:56:19:c6:c4:76:68:32:12:1f:19:f4:1f:
6f:4f:df:44:34:16:a1:5b:82:aa:82:71:4c:a0:85:cf:05:6f:
53:e2:5a:6e:48:fb:86:28:88:d7:a9:ea:f5:f7:24:8a:0e:5e:
43:98:cf:67:5f:4e:b8:3b:ab:6c:dd:dc:f2:ea:24:12:84:f9:
e7:94:c3:28:3b:47:04:e7:c4:48:b7:2c:97:b5:da:45:0c:c1:
d9:ce:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:57 2026 by rpki-client