Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: QS3QY6Zj/M3Ce+Weq/ebGMm0Dt2U7AQu8qEVXWO16tM=
Subject key identifier: 23:6C:7F:9E:B7:2B:38:44:F0:F9:2D:32:51:78:0D:1A:74:6C:A3:A8
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 019D9A7497B6EA142C4E32ECC1F33634C73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 159D
Signing time: Fri 17 Apr 2026 08:00:25 +0000
Manifest this update: Fri 17 Apr 2026 08:00:25 +0000
Manifest next update: Sat 18 Apr 2026 08:00:25 +0000
Files and hashes: 1: GO5gsgSjP6atrmJc6eN-oLN1XJE.roa (hash: T+zIy0ejXj3SXGWGil9zAIh7/YFmPINe0YtkNe4/+uU=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: WLvCE2gICyOIzLNDRFUUf9h0Z7tYYZTSbjKC3mBvH8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:97:b6:ea:14:2c:4e:32:ec:c1:f3:36:34:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Apr 17 08:00:25 2026 GMT
Not After : Apr 18 08:00:25 2026 GMT
Subject: CN=236c7f9eb72b3844f0f92d3251780d1a746ca3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:34:f2:c6:ee:18:bc:66:ad:4d:00:02:df:
aa:91:43:c5:67:f7:57:b3:1c:80:87:c3:a3:2e:47:
2c:c5:c0:f5:f6:fb:cb:5f:61:ef:03:99:5b:db:5d:
0e:a2:77:2e:a2:38:e9:04:84:c1:5d:21:d4:08:b0:
74:d5:cc:f4:b7:4a:07:5c:de:e5:f7:8f:50:83:99:
b3:4e:16:41:a1:c3:7c:99:37:7a:27:65:72:71:d4:
c3:9e:ef:c8:92:81:5c:d8:08:00:26:8d:8d:cb:dd:
34:a5:80:08:53:5e:45:85:e8:98:6f:d1:4d:81:7a:
13:cf:b7:d9:08:6d:3e:19:99:3d:b4:c6:98:ee:a4:
2a:f9:57:1f:05:27:c8:4d:c7:a6:fe:6d:17:85:c6:
c6:7a:f4:d7:5f:81:00:b5:17:6a:6f:0b:08:4e:18:
be:e5:5e:01:fb:a6:78:e4:7f:18:95:54:51:0a:a8:
76:f5:94:41:6c:97:e5:a4:f3:6c:5b:00:76:5b:59:
eb:09:a3:e3:9b:74:1c:5a:a1:58:6b:b8:67:71:42:
44:b6:37:6d:ff:7f:9a:60:91:be:8e:a8:44:61:87:
2b:12:5a:e7:20:fd:71:31:ab:8a:c2:ea:4d:1a:8b:
d5:b5:5a:8d:56:12:8f:ef:fa:7b:cc:72:74:68:8a:
da:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6C:7F:9E:B7:2B:38:44:F0:F9:2D:32:51:78:0D:1A:74:6C:A3:A8
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b0:51:30:7d:0e:3c:fe:f4:b3:54:20:4a:06:53:21:44:0f:
60:85:93:67:53:93:33:3c:96:76:a4:6d:98:76:a9:2e:dc:7a:
90:b9:2a:bc:26:2a:d7:37:b9:10:4d:5e:73:12:0b:22:02:08:
ed:b8:55:96:3f:e3:9c:56:b5:fb:2b:ba:99:a8:3d:34:d2:05:
33:bf:1a:8f:78:8c:44:97:ad:8e:92:b1:d8:01:4c:31:11:0a:
4a:22:d6:67:03:a2:11:b8:b6:b8:45:f9:65:6e:84:c0:ee:29:
80:83:7d:ee:63:4f:a9:45:23:09:cb:dc:d7:36:0c:ee:29:91:
5e:a2:b6:4e:76:0e:62:01:1d:cd:73:bf:58:51:e0:f1:2d:8d:
aa:c9:3f:4a:dd:86:15:b1:48:76:77:41:8d:7d:8a:be:29:7a:
25:8c:bc:21:8c:73:54:bd:fb:e1:64:ca:15:3d:5d:12:85:6b:
15:04:a7:8c:cf:21:95:86:d9:5e:3c:d2:66:6f:20:b5:e8:30:
fe:62:90:57:66:0d:78:d2:29:ad:dd:a8:0d:03:94:48:02:3e:
6c:4c:a7:5c:81:ed:bc:d8:27:6b:61:a4:e4:b2:10:75:59:87:
4b:74:0b:7d:fd:11:54:ea:c9:b0:63:4c:94:4d:c9:96:83:93:
c3:77:a6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:48 2026 by rpki-client