Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: EQqPPRFgcDTQFJ0YwWbrlx1abdN6/VFRZBHakMHdnBI=
Subject key identifier: A8:25:93:93:57:B7:C9:E2:4B:CE:EB:B2:6F:48:86:FF:47:AE:C7:4B
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019D9AAB84D8DF462BDB4469CAEE888ABA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 015F
Signing time: Fri 17 Apr 2026 09:00:25 +0000
Manifest this update: Fri 17 Apr 2026 09:00:25 +0000
Manifest next update: Sat 18 Apr 2026 09:00:25 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: dOdJEEn3svzW1/bLYvIU+WLHxD8v9p4TtB/ReKmDwLU=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:84:d8:df:46:2b:db:44:69:ca:ee:88:8a:ba:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Apr 17 09:00:25 2026 GMT
Not After : Apr 18 09:00:25 2026 GMT
Subject: CN=a825939357b7c9e24bceebb26f4886ff47aec74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:07:42:49:b0:00:c7:91:e8:05:2f:fd:d1:
30:87:89:5f:a4:ca:2d:67:d6:d1:27:27:0b:87:1e:
23:02:97:ce:33:f0:dc:fe:ef:2a:19:24:ec:15:8c:
b0:a6:e4:e1:e7:5e:ef:f7:00:d5:25:d7:67:ad:2b:
b3:bc:25:f8:6a:99:74:a2:ce:8f:f4:19:11:a4:84:
d0:f1:61:51:72:ec:55:04:8f:50:f4:83:84:43:f0:
fb:29:d3:63:35:f5:fa:6f:46:99:8c:e9:c5:bf:5f:
7a:e2:e2:53:07:b9:39:cf:c6:0d:59:08:e1:a2:5b:
23:2e:c7:68:90:bf:13:a0:41:f6:6c:0a:1d:75:cf:
e9:b2:da:dd:5c:be:f8:bc:66:0c:f8:46:de:bd:4b:
2a:ef:5a:28:78:25:19:98:e9:b2:eb:9b:0c:ec:ef:
63:bf:94:ee:1d:b0:c4:2b:9b:e4:d9:17:97:a9:3c:
be:0c:18:0d:f2:be:45:38:38:29:1a:9b:7d:9a:79:
a5:ba:02:2c:d0:16:8a:96:bc:e9:84:38:c8:a7:c5:
f9:a0:96:e1:43:0c:ae:6f:22:79:e8:d3:21:ac:2f:
18:3e:ef:eb:ac:ec:71:c8:2e:2a:63:7d:d3:2c:cc:
39:e1:8a:c9:d3:8b:01:d6:82:f1:ca:b4:3d:c7:96:
3b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:25:93:93:57:B7:C9:E2:4B:CE:EB:B2:6F:48:86:FF:47:AE:C7:4B
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:45:04:e1:bd:ec:7b:1b:ce:64:9a:6e:e6:9d:6f:50:74:2e:
62:3a:67:36:2e:e6:b1:28:49:87:71:e7:4b:8d:81:19:12:c2:
a4:e3:81:6b:e9:b0:ef:a7:77:65:02:2e:88:0f:5e:d6:34:74:
c4:44:78:98:eb:ad:de:15:70:33:85:ae:59:2e:67:98:55:fc:
4d:c2:36:61:8f:64:40:bb:dd:98:6f:93:63:65:70:58:00:ba:
da:c9:dd:2e:68:bd:f4:ee:2b:36:77:65:b1:93:6b:b7:29:a3:
a0:f0:a6:6e:d8:93:c2:47:ef:3d:c0:e7:68:bf:56:7d:f6:e6:
58:bf:a1:e4:02:9c:75:1e:84:cc:8c:28:97:ed:d6:af:8d:f9:
7c:7f:61:eb:05:f1:ec:83:7e:c0:77:2e:dc:71:de:be:27:29:
52:e4:22:f8:83:ed:b9:c1:17:18:f5:bb:d2:29:eb:9d:23:8f:
ca:a3:06:65:64:a3:fe:8b:d8:82:76:0b:3d:75:8c:2d:85:22:
40:24:10:ad:2b:72:21:64:09:cf:55:91:b9:1c:09:a7:73:18:
c3:4d:b2:78:9d:68:75:fa:a8:ef:2e:ae:53:08:0a:6a:b0:ae:
c9:63:c1:11:27:c4:27:87:b2:45:23:c4:62:19:b4:a9:6a:11:
c1:ab:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:19 2026 by rpki-client