Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: olmydApmPA0aV5GVyR6G/fnVzKixI1OZaQiPoEUEV6I=
Subject key identifier: 58:B5:58:B3:6E:AF:21:87:6E:BF:1B:C9:CA:97:7D:CE:CC:C4:AC:66
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019D9962761B1B018394981BE6B01B28669B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 16
Signing time: Fri 17 Apr 2026 03:00:59 +0000
Manifest this update: Fri 17 Apr 2026 03:00:59 +0000
Manifest next update: Sat 18 Apr 2026 03:00:59 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 1xHwRAZoXeX6p2iUpSiqJzpv3AvgPjazNwzNyb3e2GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:76:1b:1b:01:83:94:98:1b:e6:b0:1b:28:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Apr 17 03:00:59 2026 GMT
Not After : Apr 18 03:00:59 2026 GMT
Subject: CN=58b558b36eaf21876ebf1bc9ca977dceccc4ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:87:7b:83:30:59:39:73:b0:c0:b0:e3:7b:
b6:bb:dc:11:a2:a2:bf:1f:ba:5e:80:33:bd:0b:78:
64:4d:37:14:bf:be:0d:fa:21:c5:a7:02:0c:f2:24:
2f:c3:89:6e:fb:e2:25:36:2b:25:ed:61:fa:ef:73:
bd:66:3f:86:7e:4e:ac:f6:cc:42:7f:28:0a:60:47:
83:0a:b2:eb:b2:59:2e:21:8d:eb:0f:7d:c0:cc:39:
71:0b:12:a6:fb:93:c2:40:fa:6b:d4:34:ff:b9:42:
cc:e8:a1:ee:7e:3c:da:a4:b0:e3:68:16:53:6c:07:
e2:de:50:57:6d:97:ff:26:aa:c9:b3:85:97:57:00:
62:6b:aa:30:3a:d6:87:e1:8d:b1:ac:cb:d8:21:da:
6c:04:79:29:cd:ac:fb:73:31:4b:b5:44:a1:04:c8:
6f:d2:17:f6:52:a9:39:39:8a:a6:18:4b:42:52:51:
9a:58:f2:80:36:c4:b9:00:8d:a5:b0:f4:af:d6:cc:
54:c0:e2:61:85:3b:3b:79:86:72:b5:d4:35:01:3b:
c8:08:b2:b5:7d:b9:a3:93:ce:7f:03:61:39:07:d2:
d7:c1:77:64:9f:14:13:24:92:33:69:e4:b7:71:dd:
06:b1:f0:c9:51:72:2b:ee:b8:b9:27:7e:2d:23:da:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B5:58:B3:6E:AF:21:87:6E:BF:1B:C9:CA:97:7D:CE:CC:C4:AC:66
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:2c:14:d8:d0:17:d4:d7:23:cf:c4:e1:d0:76:e9:e5:e9:
9c:bc:f7:0d:e9:91:5e:d1:0c:40:17:09:51:8b:56:86:7a:8b:
a0:c0:2b:95:90:17:c2:e7:91:de:9e:fb:65:db:34:06:5f:fa:
1e:c1:6d:4b:66:a7:53:05:94:bd:31:ad:73:8d:79:d7:6d:fa:
bc:8b:2b:a6:39:9c:0e:71:1c:87:79:43:7f:18:04:21:d1:51:
08:48:9b:a9:d7:24:2b:2b:45:b6:a2:da:d8:f0:1a:fc:55:de:
fe:d4:bc:24:78:a2:2e:6c:6f:6d:08:36:e3:a8:7f:01:50:23:
b9:a3:61:22:73:1c:fe:3a:48:d1:f2:be:2c:51:0b:a1:6e:ff:
42:00:ee:00:9e:d5:4c:73:86:98:8e:37:83:8b:fa:89:74:37:
80:79:2a:6b:f6:56:2a:8c:7c:74:b7:32:55:5b:91:8e:bf:b0:
a9:8f:ba:4b:6e:e7:b9:51:78:f5:a9:37:ff:9e:74:4d:2c:d8:
30:89:9f:44:c2:c2:93:1b:5b:e8:c0:42:30:0d:4e:0c:e2:ca:
cd:25:df:45:49:26:03:12:1c:53:07:2a:63:df:6e:ed:c2:6d:
1a:e3:8d:67:fb:76:c7:9c:aa:99:6c:4b:45:65:98:04:bd:cd:
25:df:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:16 2026 by rpki-client