Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: 7opL+FVe0HXg1hdrxkAg+3p6VxotWMfGEIA68rum6Jk=
Subject key identifier: 9A:BF:98:B7:A4:77:B6:6E:A1:65:B4:A8:FE:4A:77:58:AF:54:13:70
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019D9BBECF464350038477FF2391B3A05146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:01:06 +0000
Manifest this update: Fri 17 Apr 2026 14:01:06 +0000
Manifest next update: Sat 18 Apr 2026 14:01:06 +0000
Files and hashes: 1: D8C_fac31Ie3Mlmm0iY26zsUpPQ.roa (hash: aXM4Hau7o88WQaKHyho1aeWalezo3Xwt0vRqN6L/8TQ=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: MXGyc9azi2xImgzmARUPTIDWdF5wRh4GFzOJhF7Tbbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:cf:46:43:50:03:84:77:ff:23:91:b3:a0:51:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Apr 17 14:01:06 2026 GMT
Not After : Apr 18 14:01:06 2026 GMT
Subject: CN=9abf98b7a477b66ea165b4a8fe4a7758af541370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:5c:b8:5a:78:ce:47:98:54:da:33:27:97:
30:c2:c6:a1:76:c5:c8:f8:b7:cd:af:0e:c5:e6:7e:
b5:c1:e1:38:3f:a6:af:bf:80:b3:61:d2:ae:d9:50:
0e:e2:79:d0:5e:30:37:6e:fd:97:17:b1:77:7f:1f:
51:33:64:8a:91:92:e9:93:52:56:01:44:b9:62:45:
9d:68:ba:89:c5:32:99:cc:9b:bb:56:a1:65:b4:35:
54:e6:81:6d:78:bd:c6:86:5b:21:52:c4:5d:7b:17:
90:80:f3:f9:9b:52:8b:ba:58:7d:44:97:11:c8:c2:
4c:84:36:ca:f2:f2:f9:a4:64:72:1b:a0:04:e8:89:
9e:b3:97:12:9d:b8:a0:8a:64:a0:48:0a:50:d6:1e:
07:d7:62:13:1c:3c:fd:9b:1a:79:03:21:1a:a5:95:
11:f2:86:bd:16:e4:37:4d:ea:f6:80:0d:69:4c:a2:
6b:a7:c1:27:1b:f2:ab:91:8f:bc:b2:dd:f6:31:50:
1e:11:69:0b:ee:55:07:f8:02:7d:68:d3:25:b8:e7:
d8:79:cf:ff:30:40:58:8c:61:0f:a8:be:79:3f:ca:
ca:c4:be:33:f2:34:07:4a:48:e1:03:a8:63:ef:dd:
34:d2:15:d0:f9:4a:55:e1:6f:99:05:b0:ca:ce:75:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BF:98:B7:A4:77:B6:6E:A1:65:B4:A8:FE:4A:77:58:AF:54:13:70
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:e5:5a:d8:65:ea:97:23:37:92:6d:29:f7:93:d2:63:c4:
1c:05:c1:dc:57:9c:70:f3:0c:9a:30:95:ab:46:47:b8:8f:61:
9b:a6:ab:26:31:44:72:d2:59:1a:a0:00:43:16:e6:24:e4:31:
9c:52:aa:01:c9:b2:3f:86:66:4e:c2:c1:5a:08:e0:f4:3a:0d:
58:22:f5:29:7f:43:c7:b8:9f:8b:79:93:87:50:31:f1:d0:ae:
f9:de:3a:58:48:07:a2:5a:a4:95:9a:49:37:a8:30:d6:fc:5d:
57:17:24:d0:5d:f0:48:b5:44:2e:ce:52:91:0c:35:94:33:57:
e1:18:ea:05:bc:4c:8d:7d:13:72:73:30:f2:41:f6:99:02:32:
32:3a:60:01:4c:a8:cf:91:2f:22:d1:e5:a4:45:04:19:35:e9:
86:55:c9:38:65:aa:db:3c:85:5b:e7:f9:29:27:da:49:7d:95:
6e:2b:9b:39:69:0e:87:25:f4:9d:81:2c:d0:d9:4f:46:2d:21:
3e:f0:c0:90:03:a6:c9:bd:57:f3:b3:ea:a9:39:38:7b:f8:31:
3c:00:07:32:dc:1a:dc:e4:48:ff:0c:49:e5:9f:a4:c4:21:b4:
b6:fb:32:37:05:e9:41:a3:2c:63:d7:27:4d:a9:34:e4:e9:95:
0d:73:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:20 2026 by rpki-client