Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
File: jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft (raw, json)
Hash identifier: JHvWrypWH4t3vwDriyRKxZbKXSYDMP3i8eBGCUSZdrQ=
Subject key identifier: 9F:E3:93:3E:5F:68:20:5F:7C:20:7F:09:E9:48:E0:CE:61:6B:D2:D8
Authority key identifier: 8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
Certificate issuer: /CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Certificate serial: 019D9E8908F00674122664D12FA7F86AD6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
Manifest number: 0D
Signing time: Sat 18 Apr 2026 03:01:13 +0000
Manifest this update: Sat 18 Apr 2026 03:01:13 +0000
Manifest next update: Sun 19 Apr 2026 03:01:13 +0000
Files and hashes: 1: NEcLFSwv26xLnBwyqRu5JPI3kC4.asa (hash: unJYBX+TeFWqDQL6g6ksbM0rdW10f4yITjYBgb1aAak=)
2: jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl (hash: Se6ns+FpKLDwuHkYNRBnEqZRshA1KPbRnal596GfV2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:89:08:f0:06:74:12:26:64:d1:2f:a7:f8:6a:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d051e84e5fcc400035526f37e7dea0b522ad82c
Validity
Not Before: Apr 18 03:01:13 2026 GMT
Not After : Apr 19 03:01:13 2026 GMT
Subject: CN=9fe3933e5f68205f7c207f09e948e0ce616bd2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:ff:a4:41:4c:4a:59:8e:49:4a:61:69:d5:
0a:ca:b6:b4:4f:d2:51:ea:95:5b:17:fe:ad:43:10:
e0:a7:e9:d3:d6:61:dc:08:cc:d8:34:c5:09:ab:20:
12:04:3b:7b:51:43:47:48:0a:f8:6c:15:0d:e1:74:
c6:52:60:74:b7:fa:d1:b6:14:fb:7a:56:f9:fc:c9:
40:ce:a2:33:75:3a:59:53:b6:00:3d:2e:42:f2:6d:
78:53:52:87:8c:66:29:8d:c1:55:32:22:88:85:b5:
39:40:ea:7b:f8:dd:8d:4d:b7:ad:86:ea:fb:80:70:
94:ce:a5:20:7a:8e:de:66:e9:32:aa:af:6f:1c:d7:
86:83:10:2b:a3:2c:33:8f:14:4d:28:2d:61:c4:7c:
72:86:e9:ba:21:7b:4a:9c:2a:53:4f:75:2a:08:48:
f9:14:5d:69:35:65:23:03:dc:75:2b:c3:1a:06:4f:
01:be:c8:4a:9a:30:ed:e4:97:34:58:cd:5b:1b:fb:
d8:48:34:1c:3f:17:e6:69:0e:95:29:a3:84:8d:a9:
da:38:7d:9e:e4:d4:30:53:ce:15:01:d6:57:4e:0e:
62:37:d8:73:35:ff:54:17:e0:52:35:c2:b0:c3:9f:
ea:8b:80:98:93:f7:5e:bb:fa:81:a6:f3:33:01:8f:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:93:3E:5F:68:20:5F:7C:20:7F:09:E9:48:E0:CE:61:6B:D2:D8
X509v3 Authority Key Identifier:
keyid:8D:05:1E:84:E5:FC:C4:00:03:55:26:F3:7E:7D:EA:0B:52:2A:D8:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQUehOX8xAADVSbzfn3qC1Iq2Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2a6a99-0a61-49c5-b815-1c0500980cbf/1/jQUehOX8xAADVSbzfn3qC1Iq2Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5e:e9:8b:a3:3c:f1:f5:30:04:1e:63:1b:a0:c3:8d:75:4c:
d1:26:b0:2e:87:68:e0:f3:7a:8e:8e:33:04:34:33:e5:a6:39:
71:46:75:12:aa:8e:f7:57:e7:7b:ae:f4:55:5a:a4:55:ed:a9:
22:eb:e1:1f:bd:25:b0:a5:17:bd:5e:df:98:38:8f:00:0e:63:
98:49:b8:31:62:ef:c6:c3:d7:7f:6b:91:9b:8a:ea:0b:c1:b4:
3e:2b:5b:f2:33:28:59:a9:1f:04:f3:c0:99:e6:dc:49:15:eb:
31:46:91:85:58:3c:fc:c7:36:ce:b6:4f:6f:46:7b:20:0a:95:
32:94:21:4e:c4:b4:57:1f:92:f9:d1:30:c5:3a:a6:c3:a9:50:
ca:b6:9e:19:8a:5f:44:d5:7f:90:38:3e:0b:fa:28:48:a6:bb:
b6:7d:3f:6c:01:ab:79:59:c0:53:9d:a9:ee:f6:0c:9d:90:a4:
87:06:02:d4:35:cb:c9:d9:15:da:0b:79:b7:0d:9d:a6:6c:10:
ef:c5:9a:81:ba:c6:a7:63:90:3d:9c:5f:e0:9c:df:fa:45:8a:
36:9d:2f:6e:89:51:79:4c:df:b5:c3:54:55:15:c5:0d:c2:7c:
43:ca:a6:b0:f0:70:0b:2c:be:96:75:ef:24:88:29:ff:f0:ee:
ec:e5:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:45:44 2026 by rpki-client