Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: 2OEPlHrD18esr3VjRNDA9/D+1cHoizI9cxvsZxJ1TQY=
Subject key identifier: 2B:E1:B0:18:04:E2:28:57:EE:B5:A3:AC:37:03:D3:BB:C9:07:E6:13
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 019D99993AAFCBA52D04E1F284E1B898C3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 081E
Signing time: Fri 17 Apr 2026 04:00:49 +0000
Manifest this update: Fri 17 Apr 2026 04:00:49 +0000
Manifest next update: Sat 18 Apr 2026 04:00:49 +0000
Files and hashes: 1: AN3xpl22PaRyPEelcwTSWgg5W5A.roa (hash: re4tuXpQRY9PMdfHT4O4lemkMyHNhEqfGaE5zniD/ZM=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: neiXlVeeJqkYMDC1SOEkbkuuYU5fIvRFN/uDX8RU6Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3a:af:cb:a5:2d:04:e1:f2:84:e1:b8:98:c3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Apr 17 04:00:49 2026 GMT
Not After : Apr 18 04:00:49 2026 GMT
Subject: CN=2be1b01804e22857eeb5a3ac3703d3bbc907e613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:2d:0a:ce:5c:b8:c8:6d:44:29:c3:f7:7d:
d8:3f:b4:20:d2:9b:8c:e5:3b:f2:3d:26:37:55:5e:
97:cb:e6:fd:b5:64:d5:65:0f:f3:cb:6a:c1:94:07:
3c:97:f6:40:8b:d7:0d:c7:93:d5:ae:c6:a7:56:94:
aa:58:f7:70:4f:1b:06:8f:9a:f0:c3:f4:72:03:f5:
1d:7b:37:92:c8:b9:0a:09:f0:de:b3:73:83:9a:3b:
30:f1:7a:84:b3:b6:55:3c:d4:c6:98:29:b5:39:f3:
a7:b6:25:d0:99:c3:b3:5a:51:b5:f5:5b:2c:59:36:
65:01:4a:5c:3d:20:e6:63:4b:18:77:76:e4:49:9a:
40:33:3b:bf:f5:37:40:18:03:9c:1b:39:38:f3:b1:
18:0e:59:50:c2:69:6b:09:59:aa:d5:1c:1b:d6:e0:
23:ed:d0:9b:c2:c6:5c:b4:b5:cc:ac:b3:c9:49:45:
46:dc:8f:11:6f:35:cc:f7:9f:f0:54:db:90:3a:92:
02:0a:ab:45:7c:70:d0:de:12:d7:13:1b:be:9d:20:
7e:3f:34:7b:d2:a6:71:49:8e:77:b2:76:56:f7:d2:
db:41:63:da:e1:45:46:d8:9a:97:90:0d:32:0f:62:
86:5c:ad:79:f5:80:38:c5:0d:04:33:5d:16:72:25:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:B0:18:04:E2:28:57:EE:B5:A3:AC:37:03:D3:BB:C9:07:E6:13
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ad:27:98:b8:a9:05:ad:9b:34:64:4d:c0:9e:b8:9f:5e:61:
5f:69:9d:67:4c:1a:e0:bf:32:cd:ec:bb:37:a4:c3:38:f1:16:
09:63:d0:4a:45:c8:8b:c7:a3:30:47:85:70:8a:76:a9:5b:59:
ad:2b:b4:81:c9:c1:8c:62:06:12:32:99:98:84:ed:92:3b:f4:
45:af:d9:9f:fd:34:db:dd:69:97:38:b1:9b:30:25:aa:f2:84:
f3:ca:f5:08:fc:3b:53:61:c6:e2:7e:bc:ec:a3:36:a3:be:13:
ef:b7:f8:df:e9:0d:af:0b:c2:ba:87:3e:86:e3:27:98:6c:42:
b2:65:c6:d0:3e:37:03:47:1f:b0:92:bf:37:e3:76:f7:47:59:
96:f5:71:04:d0:3c:e4:3b:58:b6:8f:38:ca:e5:59:18:57:f3:
f3:5c:8c:fb:ed:db:a9:1b:fb:61:f9:2b:41:94:ae:4d:40:d2:
55:6e:b0:de:c5:05:5f:11:4f:21:d6:7d:ca:a2:76:e9:1f:54:
43:26:04:26:61:34:46:f9:d1:f1:c9:8d:66:dc:67:b9:56:a3:
40:82:bf:e5:3c:13:ea:b1:69:fb:c7:97:6e:9e:59:fc:11:d8:
68:5d:d2:5d:3f:17:85:0e:4b:7c:d2:70:13:8b:f8:f4:5d:d1:
05:a3:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:55 2026 by rpki-client