Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: wv16TplnwTeoa+WOfBzDcEVgtM1O9vfWLKAnSNPCqeo=
Subject key identifier: 5C:E9:71:FA:09:FA:70:18:F5:61:EA:3D:CA:AD:16:92:E9:DF:20:9F
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019D9C2C657F4FF31D785CE519A716D239EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 0675
Signing time: Fri 17 Apr 2026 16:00:48 +0000
Manifest this update: Fri 17 Apr 2026 16:00:48 +0000
Manifest next update: Sat 18 Apr 2026 16:00:48 +0000
Files and hashes: 1: D84NfmvTfMKexslgZq5Al71ZBj4.asa (hash: davxVJx5jjzmjZdeUnCwP1bBkhZiVGk6m71g+mvRQkY=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: yucfQMlHNaKJyCw2vXOJyIS0u6cdhZbz4YsppOcdEc4=)
3: meKxmSPWJkmnmg1z5dLKFL5i-Mc.roa (hash: Q8KapP0PEq8gKVruzhqRWI535qerZlKc/L3zbz6PK8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:65:7f:4f:f3:1d:78:5c:e5:19:a7:16:d2:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Apr 17 16:00:48 2026 GMT
Not After : Apr 18 16:00:48 2026 GMT
Subject: CN=5ce971fa09fa7018f561ea3dcaad1692e9df209f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:f4:97:9b:40:d2:56:64:0a:2b:3e:5e:d5:
da:f4:9c:ae:e9:49:33:35:a3:64:f2:ca:2b:91:05:
d3:f3:20:b0:7a:bf:cf:ed:62:52:47:c6:24:7b:36:
e0:c5:59:54:42:c4:1e:7b:61:3e:e6:b5:74:bc:ca:
f6:77:86:52:d4:84:8e:c6:10:a5:54:35:4a:02:3c:
ba:09:77:32:1d:f8:8d:f4:7d:b0:c4:6b:27:91:82:
6a:2e:69:91:5c:65:1b:b4:65:c4:bb:2b:24:f7:cd:
21:1a:5c:9c:9d:b4:f3:ba:c8:37:9c:3b:db:6a:e1:
b7:4d:51:0c:fb:2a:80:b3:54:6e:74:96:81:77:41:
12:62:e7:8b:81:5a:86:b0:27:fc:17:74:78:d0:a2:
13:16:8f:dc:9d:cd:44:d5:da:ef:70:60:d5:cc:9d:
c9:fa:f1:f5:ef:84:c7:8d:2c:36:8b:2b:52:c4:d3:
73:09:8d:20:c9:cf:12:75:5a:c3:24:78:64:b1:47:
d5:aa:fa:20:fc:a4:4c:69:9e:d7:d8:59:06:c3:27:
a6:4a:e1:aa:d6:d1:af:6d:78:dd:a9:6a:07:02:10:
fd:de:d8:3a:4d:9c:22:f7:31:7c:c0:79:93:c4:5c:
c0:20:64:b3:7f:52:af:43:b8:65:e5:08:a9:4c:73:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E9:71:FA:09:FA:70:18:F5:61:EA:3D:CA:AD:16:92:E9:DF:20:9F
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1f:f4:36:8a:08:61:d3:b7:c5:ab:f7:0f:e6:f3:53:03:36:
e0:db:fe:98:f9:41:d3:72:05:ce:63:6b:e6:d8:ff:4c:39:56:
4b:4d:e5:78:11:94:a5:dc:ae:87:29:f8:8a:20:93:23:bb:f0:
09:69:6b:af:23:2f:16:4e:91:ce:ca:cf:3a:81:97:40:88:c3:
60:27:d1:32:bc:9f:20:97:fe:c2:9a:af:ae:59:78:64:42:f6:
ba:7e:1d:a7:97:a1:99:13:44:76:29:d9:3f:24:82:9d:ca:f2:
4f:a5:e9:4d:3b:bb:95:c7:56:6b:0d:d4:b2:9b:19:70:f2:2a:
8e:e0:44:f0:ea:c4:4f:75:95:71:e2:62:26:0b:6c:e8:f4:4e:
1c:07:b1:86:fe:5b:1d:b1:c9:c6:b4:bc:91:77:83:af:1a:5d:
a3:8b:04:d8:62:56:0b:62:d2:b8:22:dd:34:c8:b2:56:e4:be:
8a:01:a2:d7:48:13:f9:d5:d3:2d:78:92:18:39:b9:93:27:be:
c9:1b:e1:36:5c:39:d6:52:52:d1:07:1d:93:c5:db:94:02:b2:
c9:2a:4f:a9:f5:d6:0a:1a:f4:6b:3c:44:ba:79:31:f1:fd:36:
08:94:d3:f8:86:94:31:88:d7:e1:69:c8:a8:6b:06:53:36:7d:
02:e3:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:08 2026 by rpki-client