Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: 9x7/24+7ZNu5/yN9hWyn6PuSs21c+aoMIFXn9Uec0zE=
Subject key identifier: B6:DC:FE:16:28:D3:2E:64:81:D8:47:A0:5F:1F:9B:A3:47:77:2F:04
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019D98BD8A69ADBE16ED4F2C6AF966B525BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:51 +0000
Manifest this update: Fri 17 Apr 2026 00:00:51 +0000
Manifest next update: Sat 18 Apr 2026 00:00:51 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: ExBzAYfnPkm/FkskSH7ofoy+SSbpeNgZcrNS5bnWquk=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8a:69:ad:be:16:ed:4f:2c:6a:f9:66:b5:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Apr 17 00:00:51 2026 GMT
Not After : Apr 18 00:00:51 2026 GMT
Subject: CN=b6dcfe1628d32e6481d847a05f1f9ba347772f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:b4:e1:3b:55:66:a7:54:0c:ee:88:6a:a5:
bc:22:ad:22:ce:58:a7:6a:9d:01:4c:d3:eb:9a:5c:
a9:2a:45:cf:95:e9:5f:9c:f3:cd:b8:4d:36:b7:64:
17:a1:12:be:a5:bf:0e:d1:62:b3:9f:1e:9a:91:4e:
2c:06:ba:93:8d:dc:08:ab:fc:06:e5:ce:69:d2:bc:
28:30:ff:64:d3:31:27:d8:c2:10:ed:82:ae:c6:f3:
71:ef:c7:75:f5:c5:08:f9:60:55:ae:02:ed:17:15:
a6:b3:4d:1d:f8:c9:48:2b:17:a3:27:c4:5d:a4:0d:
f4:8b:c9:1d:2d:dc:2c:af:69:fe:7f:c9:ac:84:e8:
b4:c2:d6:fb:fb:a7:aa:05:00:ef:8a:80:b1:81:43:
bb:b8:2b:48:64:8b:d8:a6:c1:34:9a:d2:58:0a:0f:
e4:85:6e:e0:53:ef:be:16:a2:21:70:88:42:76:a4:
83:f5:8c:fe:3c:c8:f2:74:a2:75:81:9f:cc:52:bf:
9e:35:e2:77:d5:7d:c9:e9:c7:22:eb:3e:f8:92:4a:
1a:f0:fe:75:54:05:0e:b0:17:12:c7:74:1e:63:72:
58:b6:60:81:3e:c2:20:d4:dc:17:cc:58:6c:81:d7:
9f:b5:2f:e9:63:72:fe:d3:6d:eb:89:6b:70:99:90:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DC:FE:16:28:D3:2E:64:81:D8:47:A0:5F:1F:9B:A3:47:77:2F:04
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:a0:17:17:4d:89:60:7d:20:0f:d3:42:6c:9f:72:30:e2:
a0:00:d6:da:36:83:71:c0:57:40:80:ac:c2:04:09:05:c0:7f:
59:d4:31:e8:b7:bd:b6:58:c8:76:b1:c4:b7:74:4a:31:2c:47:
6a:85:7d:9f:bf:20:7f:98:3a:77:0e:e6:da:db:66:ac:93:a8:
b1:dc:18:56:c4:ac:f0:58:69:e1:e1:78:fa:c6:48:01:e9:7c:
e2:99:ce:e0:78:12:8a:dd:6b:1d:46:bb:a0:37:fd:41:21:0d:
5d:d3:00:62:2d:cc:b8:43:7e:54:b1:a7:66:46:4b:c2:14:af:
35:ad:4e:62:0c:cd:2f:b2:9c:ab:0a:3e:e3:54:6b:0a:30:82:
e8:35:3c:f7:18:1e:72:89:c4:c7:ff:2f:c6:3d:67:c7:e9:01:
84:39:fd:ef:d0:31:5a:57:17:b4:62:b7:09:73:10:5d:38:a3:
c4:2b:4f:24:bb:9d:24:3f:d1:38:a0:4c:3b:23:2b:e7:fe:76:
7c:86:f3:ff:bd:40:56:92:28:26:5d:82:c8:98:83:b7:a1:f9:
b0:f2:1e:e9:63:ca:8e:fc:43:fe:99:ec:3f:30:e9:ad:3a:29:
5c:9b:3b:f7:8e:19:42:ee:d8:4c:9f:76:2b:07:f0:85:69:30:
21:35:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:26 2026 by rpki-client