Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
File: 2JtqEJex8lH5XFbaTkqjEblHC_8.mft (raw, json)
Hash identifier: UrfW9O/yLLRG2IxwHHdLU+pOec4YZTdzJGedfp61tzY=
Subject key identifier: BE:D1:E4:01:23:D7:22:B1:9F:A5:5C:1A:E1:5B:03:FB:69:9F:50:BF
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Certificate issuer: /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial: 019DA3AEEA5383B4324EE50D4242714E69D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:42 +0000
Manifest this update: Sun 19 Apr 2026 03:00:42 +0000
Manifest next update: Mon 20 Apr 2026 03:00:42 +0000
Files and hashes: 1: 16oaMN5X6HEfvxV2hqwlnzKAq2U.roa (hash: TJYZiknvnDct1q+8vkfBIK3EloYfIQpA2frqHwTOSwo=)
2: 2JtqEJex8lH5XFbaTkqjEblHC_8.crl (hash: 4/+/Blrv0W84IaqeL5WDIn/4ceTj4BsdZWQqDDolh/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:ea:53:83:b4:32:4e:e5:0d:42:42:71:4e:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Validity
Not Before: Apr 19 03:00:42 2026 GMT
Not After : Apr 20 03:00:42 2026 GMT
Subject: CN=bed1e40123d722b19fa55c1ae15b03fb699f50bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:21:0b:97:06:bc:eb:a7:c1:f6:d9:1c:9e:
1f:27:c1:5f:ee:ea:2e:7d:b0:11:88:75:97:66:75:
ae:4f:ef:98:36:43:74:6c:d4:13:ba:a2:ed:e9:1e:
1a:6e:38:f2:9d:7d:cf:8a:39:61:ac:36:a5:1a:ad:
9c:3c:d6:e7:5f:43:cb:e2:65:8f:e8:28:27:2d:47:
0b:90:ef:25:64:a1:85:9d:2a:5e:5c:cf:24:7d:a4:
cc:bd:78:77:b3:e0:2c:0c:de:1f:36:9a:1f:5d:ac:
fb:66:48:34:9a:19:1f:31:76:e8:29:73:47:5f:e9:
9d:f2:54:8b:47:a3:93:b4:0e:61:ef:2b:52:b3:55:
03:cf:f0:de:83:f5:ca:be:ef:b4:e8:de:22:f2:75:
d2:5c:0d:ac:fe:9f:12:69:8d:56:05:48:eb:15:e5:
be:85:0f:3f:94:b8:2d:72:90:b4:b3:7e:19:bc:10:
b0:5f:36:ca:eb:be:ee:30:46:df:ef:ee:0c:f7:0c:
22:49:8b:c9:37:d6:c8:e4:7d:d8:c5:17:5b:44:cd:
50:0a:3d:ec:98:33:d4:0c:5e:7b:89:84:7b:15:c5:
73:1b:28:63:c1:54:25:10:b7:6b:d1:4f:0d:c7:69:
4e:7d:2c:01:25:74:b8:7e:51:70:1d:ec:e8:3a:22:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:E4:01:23:D7:22:B1:9F:A5:5C:1A:E1:5B:03:FB:69:9F:50:BF
X509v3 Authority Key Identifier:
keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:e9:0c:5b:55:bf:c5:58:e5:ff:5c:d0:79:4d:e7:77:03:
26:be:9b:d6:e6:df:0b:73:14:03:54:46:37:1d:d5:34:b6:59:
a6:ef:41:45:19:f8:43:c1:15:71:1c:73:d3:9b:c6:7f:2c:36:
e8:3d:5f:9d:62:ce:48:dc:be:f5:2b:d7:14:2d:1e:58:11:9b:
8a:68:92:d8:09:4c:a2:66:2f:29:02:09:4f:5a:85:7c:32:17:
e3:16:f3:24:ef:5b:9e:5f:3c:04:69:47:2d:f0:12:34:c2:3e:
c9:ae:2d:13:90:dc:a8:8c:c8:ed:dc:89:ff:95:53:ae:9e:a2:
a0:d5:1f:43:5f:76:07:a7:ce:48:6d:34:65:dc:bf:6f:1e:75:
11:25:b1:dc:2a:49:fa:8f:43:78:be:7c:30:18:9b:64:52:8a:
ac:a6:af:ce:f7:71:33:ae:3c:ee:3a:cc:7e:58:ad:73:f0:16:
df:02:37:16:9f:63:5c:ef:9c:86:0a:de:b2:b8:3c:87:ad:a0:
e0:5c:73:45:7f:12:39:90:91:f4:00:f1:54:de:00:19:90:83:
70:42:1a:44:5f:6a:33:3e:87:06:7c:a2:e5:ac:52:9f:88:10:
02:6a:56:db:12:12:1a:6f:1e:9e:e7:7f:77:5d:e0:f1:51:e8:
82:29:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:37 2026 by rpki-client