Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: 9RVuFFRg6hNRv08boNoMd6KxfAWkY4XIKUPQhbk0NFQ=
Subject key identifier: 9C:86:A0:9D:02:6C:8C:9D:45:28:21:B8:DB:84:0D:AA:31:80:EB:2D
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019D9A3EFB68AAF7CAF18A8F2C8723CF5AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:52 +0000
Manifest this update: Fri 17 Apr 2026 07:01:52 +0000
Manifest next update: Sat 18 Apr 2026 07:01:52 +0000
Files and hashes: 1: DMom3rPUm8HweXvQ4-Q9jSK3W5A.roa (hash: LnHplGcwbJiDTN78KXR+EeXnQF5rJq6ndATkaGyGt6Y=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: LTx2zaWmTMC7mK1gV/20gFd0do2MNWB3zYlUN0AB1J8=)
3: zo3coJXTyvhldkMVh9gvp4uyZ_c.roa (hash: XrJ9G8/whLu/oZmZ7d5+aY/tS2aPDpwbEqSKZTYhu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:fb:68:aa:f7:ca:f1:8a:8f:2c:87:23:cf:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Apr 17 07:01:52 2026 GMT
Not After : Apr 18 07:01:52 2026 GMT
Subject: CN=9c86a09d026c8c9d452821b8db840daa3180eb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:fd:11:1d:9b:bb:a1:d0:a6:3a:ae:f1:3f:
3c:2d:1b:a0:a6:35:8d:94:29:2e:c6:5c:54:e8:ba:
b7:ce:88:6a:a9:b2:9f:20:7d:45:18:e6:ab:dd:93:
31:0e:bf:b4:33:89:21:82:4f:82:da:c9:92:4e:2e:
a3:16:c9:0f:73:34:dc:e3:df:16:e3:5a:6a:dc:67:
28:40:6b:9f:1f:7b:0e:6d:9c:b9:11:f8:8a:c1:b7:
91:e2:0e:b2:d7:df:51:9b:40:1f:66:73:96:8e:b5:
50:3b:c3:65:95:6d:24:e2:c8:a6:2f:9a:7e:7d:5b:
15:32:36:c5:53:b0:af:de:1c:58:39:61:4e:49:ec:
8a:0b:6d:ed:82:5d:d2:0f:f3:81:9f:b7:3b:21:d7:
9c:1b:97:b9:ee:73:7a:a4:9f:ab:3b:55:b5:2f:5f:
0e:31:2d:08:62:12:c0:2a:6d:58:e7:4f:aa:70:c2:
6f:fe:c7:c6:a2:e6:9c:74:34:03:8d:6b:64:ad:2a:
02:a2:16:75:79:bf:f0:87:e2:20:7e:4b:4b:cf:34:
6e:94:14:e7:42:ef:9f:d4:58:4f:d0:92:8f:03:d0:
f8:4d:8a:39:2a:5f:59:d2:4e:13:ff:86:04:19:39:
f1:b4:5b:82:36:ab:da:c9:f4:f3:98:57:70:f5:05:
46:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:86:A0:9D:02:6C:8C:9D:45:28:21:B8:DB:84:0D:AA:31:80:EB:2D
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a1:0a:d9:1e:8c:80:4d:c9:45:f1:16:7d:f0:63:0d:88:f5:
c3:7f:24:be:5a:76:5f:a5:a9:7b:e9:7b:e6:97:f4:4a:97:15:
69:ba:76:4d:fb:8b:ef:f8:8d:02:6d:f2:48:f6:90:b7:9f:21:
6c:3e:a0:e5:da:87:c9:e9:a2:d9:cd:ea:55:b0:df:57:5f:35:
39:96:c2:3a:9b:3e:ff:31:eb:52:24:30:b3:38:00:11:8d:29:
6c:16:5a:ce:d9:46:ec:4c:e8:3b:43:9c:49:c4:84:21:8f:43:
07:a9:bf:65:0d:e1:67:c7:8b:8b:43:82:e3:00:6e:7f:ef:13:
43:40:4a:c8:cf:3b:d5:49:04:44:77:cd:62:9b:d2:f5:fe:9f:
61:aa:95:a2:11:fd:68:8d:d4:a7:19:da:3a:e0:85:91:33:2e:
90:78:51:d4:c6:0a:bf:77:41:02:0c:ac:e5:91:84:36:d2:bb:
19:6f:4b:d3:02:bf:89:33:eb:05:d1:14:ec:27:66:42:39:38:
33:2e:04:71:78:61:84:0d:50:7d:7c:8d:49:d5:3a:85:c3:33:
4a:3c:ab:1d:54:2c:0a:20:cf:45:c4:b1:92:84:2f:cb:39:00:
09:a0:79:09:37:8d:4e:13:b1:58:bb:2e:f6:24:d8:8f:66:1d:
d6:c1:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:58 2026 by rpki-client