Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: trVhpkCS3mjBIi5HPuV/W9NoauJfeH/Y7u47la5tl8A=
Subject key identifier: 7D:43:3B:0D:28:22:58:72:CD:BF:85:7A:AC:7E:7A:43:D8:86:09:BA
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019D98863F66900C0DBF2FCE467F052772D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 1786
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: kBC9E/tBnuIebwakPvc81Lttxj6uWMKq7VmQ8K2oIfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3f:66:90:0c:0d:bf:2f:ce:46:7f:05:27:72:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=7d433b0d28225872cdbf857aac7e7a43d88609ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:dd:eb:10:b8:83:ba:29:fb:9b:1f:0e:43:
49:06:54:8a:60:d2:ea:a0:33:df:a5:99:9a:93:cb:
dd:5b:b3:a3:f1:4b:11:5a:b9:1a:10:c2:4d:5f:e3:
77:8b:20:cb:68:b7:00:a0:52:34:75:7b:7c:96:65:
34:17:fd:aa:69:2a:a0:33:ce:bd:39:67:80:3f:ea:
fe:8e:5c:ad:3a:9f:51:3b:44:3d:06:58:20:72:4d:
16:01:09:56:40:1e:6d:70:11:51:ab:08:01:2e:f9:
8e:ce:51:9f:e0:03:39:e9:a6:02:cf:60:89:d4:92:
be:69:22:71:2b:d6:d7:6b:ba:71:10:ca:32:76:a5:
fc:7a:31:35:3d:6b:31:2f:3e:c1:c3:82:e7:19:f9:
00:9f:e4:f5:46:16:e3:dc:39:05:6a:2b:24:86:5c:
cf:f2:db:a1:97:0a:c3:2b:e7:c7:3a:8c:30:c5:0d:
ac:b9:0e:ca:5e:8e:54:15:c5:6b:4a:68:cd:73:3e:
2d:48:ab:63:65:c8:0a:d3:89:3b:6d:75:00:1d:46:
c9:b6:a8:d0:2d:6e:4a:ff:07:27:87:4f:c9:6a:01:
df:8b:18:12:f7:e9:16:a0:ca:a9:41:34:a3:b8:de:
cf:54:0a:11:84:e9:34:4c:65:dc:41:9c:a1:38:67:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:3B:0D:28:22:58:72:CD:BF:85:7A:AC:7E:7A:43:D8:86:09:BA
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8e:b6:9d:77:92:2e:26:51:7d:7a:0d:a4:4b:53:6f:04:ed:
9c:32:83:9c:31:9d:bf:30:cd:ed:ce:7e:0d:e5:6c:e2:55:b1:
e4:50:41:b0:ef:d3:58:87:e8:7c:13:09:5e:c8:82:51:19:ec:
d4:f6:cb:7d:94:a5:51:e4:3f:a1:fe:9e:35:28:ea:fa:b1:a7:
5a:4b:4a:2f:34:e1:33:81:1a:34:88:4c:3d:e7:a3:29:35:26:
28:38:43:51:79:ff:db:14:2c:00:08:0c:3e:47:08:74:d3:7d:
3b:85:2f:f5:38:f4:b5:ac:85:23:61:97:f2:a3:f5:fd:96:bc:
c6:2f:c3:7e:e7:c5:f2:4c:eb:fe:e7:5c:f8:1a:cd:28:85:c2:
54:f0:10:85:a0:a8:4a:1e:97:1e:48:a1:4d:25:94:0f:06:11:
a1:2a:c2:67:20:46:d8:63:5c:dc:75:e1:93:b0:b3:2a:28:97:
ee:cc:a7:19:88:70:c7:08:e6:29:57:77:eb:3d:e2:fa:6d:35:
cf:f3:13:61:d8:02:85:4f:bb:b9:f9:a1:41:a0:c8:be:b9:7b:
e0:3c:f1:73:55:ca:d8:8f:73:ce:9e:01:52:9a:ab:eb:2c:fc:
3b:5a:3d:b9:fb:2a:a9:b0:e4:9d:eb:64:01:3e:ff:5c:53:ec:
13:b1:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:35 2026 by rpki-client