Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: RoCXR+3eEXOs0ZtGCoqAExYtEyLO6uBtzic1Yp/+T2o=
Subject key identifier: 76:7D:A1:B8:EA:5D:33:36:EA:9E:5E:E8:3C:47:62:04:06:8D:AD:DF
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019D9A3E239C20018E01323429EF98771251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 1136
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: D8bSaLMLjBwZKbbBrOpCxUR8Q1Po9S1wFpPmFhj3ozg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:23:9c:20:01:8e:01:32:34:29:ef:98:77:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=767da1b8ea5d3336ea9e5ee83c476204068daddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:a7:05:6b:c0:23:9b:f3:cc:5b:11:47:f1:
a4:7d:26:0f:d8:45:5b:70:1f:26:f6:16:fc:de:db:
16:aa:cb:d4:8a:56:09:0f:dc:45:b0:fd:fd:0e:ac:
58:0f:da:d2:70:de:5f:89:90:74:7f:28:29:c2:0e:
91:5f:91:ba:cb:fb:fc:86:8e:e8:74:58:e3:02:ce:
f9:7d:06:19:29:46:e2:05:44:50:7e:6a:34:23:13:
0d:8d:94:1f:93:1f:f4:92:33:18:0c:e0:c2:4e:b4:
53:93:3a:94:26:ef:d0:98:85:32:fa:d6:9e:dc:a9:
ed:0c:f5:3b:3c:d3:6f:08:d2:64:93:42:42:bd:40:
ff:cf:bf:cb:9c:30:9a:3a:18:a0:64:a6:e5:86:49:
d8:a0:36:38:4c:61:a8:57:a0:d1:32:15:e6:ca:f9:
80:28:c9:25:c3:db:7b:c8:e0:c5:61:9e:2d:f8:87:
0e:1e:3e:d2:42:7b:3d:91:31:dc:30:a8:af:19:a6:
38:e1:df:ad:6d:b8:09:35:3a:1f:d7:f7:14:e2:0b:
88:71:b8:46:aa:89:96:bf:c9:ef:e7:07:54:e5:3b:
6a:11:c6:1f:e3:87:3e:34:4b:8e:48:d8:69:54:d7:
7a:8f:2b:2d:77:c7:9b:c2:e4:ed:8f:74:28:ce:d6:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:A1:B8:EA:5D:33:36:EA:9E:5E:E8:3C:47:62:04:06:8D:AD:DF
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:74:dc:0f:f8:e5:1a:b0:9f:ba:41:fb:f2:33:7b:23:03:4d:
9b:3f:ac:7c:fe:ce:d1:ee:4f:7b:d1:77:8d:5f:3d:36:29:95:
d1:10:91:f0:88:e1:ee:31:4f:b6:08:4e:0a:3a:6c:36:4a:2c:
dd:db:ef:e1:35:a2:6c:10:7e:d0:c9:69:e8:be:3b:dd:4c:9b:
96:c6:4b:d1:76:c9:15:b4:e7:df:53:6d:55:8d:13:48:27:f5:
e8:78:3a:b2:a0:d3:66:c6:54:28:d6:97:4e:fd:fd:1f:b5:c6:
65:72:7f:8d:e5:e1:73:8c:ce:ef:86:da:76:83:68:d2:4d:e3:
6f:3b:90:8a:0a:fe:7f:ad:c1:2c:5b:9e:2b:52:14:fc:84:26:
61:ba:4a:f0:8e:d2:af:b2:43:34:85:69:0c:77:39:9c:11:29:
55:28:c1:31:4f:36:60:ef:96:1b:ee:3c:53:ee:38:e9:e5:d3:
9f:a7:c2:cc:6e:cd:33:ff:af:85:ba:ea:f3:1e:6f:96:dd:90:
0a:6d:f1:37:aa:1a:e1:0b:93:37:8d:9a:6e:59:7a:c8:bc:eb:
21:02:44:29:87:df:85:d4:6f:53:b5:99:8d:2a:6c:8c:f9:b6:
57:ff:eb:5b:52:ce:8c:6c:3f:70:56:43:4f:1e:cc:26:9b:31:
35:ce:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:11 2026 by rpki-client