Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: AwSc0scQEyk957poiKzoeTMB8qiYEvGK1fTT5Nx8cXw=
Subject key identifier: D8:B5:73:94:80:AB:84:8F:02:59:71:F1:7B:33:AE:99:AC:F1:3F:CB
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019D97740D260B43B5F53079DC5F7EF8FA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0F7F
Signing time: Thu 16 Apr 2026 18:00:58 +0000
Manifest this update: Thu 16 Apr 2026 18:00:58 +0000
Manifest next update: Fri 17 Apr 2026 18:00:58 +0000
Files and hashes: 1: dsLdJMOUiI7q_-APyIwy34yOW5E.roa (hash: POXZCn3rwMGKOplLlMfSl2cF5aSp/HWGstxXZUZFABo=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: NF2WthGJtknBJEqeEBI2eMVlzyffHWnEOMCyHOzZxdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:0d:26:0b:43:b5:f5:30:79:dc:5f:7e:f8:fa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Apr 16 18:00:58 2026 GMT
Not After : Apr 17 18:00:58 2026 GMT
Subject: CN=d8b5739480ab848f025971f17b33ae99acf13fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:5c:98:f1:95:16:f0:95:0a:e2:84:4a:fa:
62:53:f3:9c:5b:02:9e:61:0c:f4:3b:51:5d:31:13:
c5:90:70:06:91:61:1d:3b:f8:05:b1:91:ba:06:b3:
92:b4:02:44:3d:1f:fe:a3:63:75:e6:fd:74:7f:17:
14:4f:2d:3f:13:31:bd:4d:60:0d:a1:5f:e5:c5:3f:
8e:f6:5d:e0:54:a6:22:95:60:d0:59:26:6f:ca:28:
82:d5:5b:90:3d:17:0a:8b:6c:25:1a:77:9b:31:c6:
d7:90:a4:16:11:44:94:bb:aa:c5:51:24:49:a1:d0:
f2:d1:c0:51:fb:b5:46:de:17:cb:b7:55:c0:ad:76:
88:f6:d9:cc:07:ca:87:78:19:42:9a:65:6e:70:7d:
56:16:b7:4d:d0:8e:ce:e1:db:53:c5:98:55:d0:6b:
93:28:3b:a9:d5:a3:7f:ab:a4:e1:56:35:69:f3:15:
64:35:fc:63:c1:bc:8a:80:81:76:c7:68:53:6e:3f:
0a:79:23:57:43:f9:da:ef:28:97:12:60:6a:74:cf:
67:6d:78:40:f8:b9:9a:3f:1c:b6:0c:39:ba:af:08:
dd:e7:dd:df:81:46:16:ff:8c:a3:4c:85:75:db:2d:
6e:c6:a4:be:8b:fc:93:b9:71:98:ea:e8:43:63:f5:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:73:94:80:AB:84:8F:02:59:71:F1:7B:33:AE:99:AC:F1:3F:CB
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6d:92:c7:a4:96:99:71:ba:7a:fd:b3:fe:a6:d5:df:e1:ea:
9b:d8:52:b8:56:9b:de:50:05:be:32:d6:36:49:9a:27:7a:53:
7d:7d:a6:24:b1:ee:35:92:5a:66:0b:79:7a:22:b5:dd:5c:38:
cc:b7:21:59:ca:e6:ec:fe:6a:4d:44:c6:fa:7f:45:7a:8e:20:
be:36:17:db:e9:3f:bf:7d:04:2c:1e:23:86:54:e9:51:16:93:
07:62:0f:33:04:bb:db:ee:86:dd:8d:98:63:4a:95:34:bd:e6:
9e:ff:1b:7f:dd:1c:f7:c6:23:2c:b6:3b:0e:b1:9c:d2:ae:ba:
57:29:84:db:7e:bb:57:6e:48:b4:67:36:82:75:90:5d:0f:02:
53:30:2b:62:37:83:92:19:2f:a2:45:90:55:60:eb:26:7a:ab:
4b:fc:19:a3:ff:6a:83:b7:2c:b3:0b:01:a0:a9:56:f0:43:a0:
08:52:17:32:13:ce:df:f3:0e:05:37:23:56:22:57:cf:a7:cc:
71:f5:2b:1f:85:5b:42:3f:51:6c:69:70:da:05:75:96:4c:95:
f4:1c:19:5c:a8:75:cf:ce:56:6a:9c:1a:22:8d:cb:79:67:5c:
8b:fa:c7:a7:b9:0b:40:27:9f:77:ab:fd:20:46:08:87:f7:18:
7b:3e:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:22 2026 by rpki-client