Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: nf4BKg6iq+ATF7l51q143hyX+vOHiSqlUIY7a2jEodA=
Subject key identifier: 2B:2F:0B:C0:E7:9C:36:B0:33:84:AC:D2:B3:13:2F:37:C5:1A:17:47
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 019D9B19BBB678FC9C40411326CBA293181B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:48 +0000
Manifest this update: Fri 17 Apr 2026 11:00:48 +0000
Manifest next update: Sat 18 Apr 2026 11:00:48 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: e+cC7fXZO6w4U/WF5caW8fgMwoeQah/Q9MreOmXs9L4=)
2: aK-KiOW1egsjAqwNXfFKte8mrTM.roa (hash: cMN/aBHsJKW/o3mLC7qajGiwbSYm63ebF4bSsFTDBjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:bb:b6:78:fc:9c:40:41:13:26:cb:a2:93:18:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Apr 17 11:00:48 2026 GMT
Not After : Apr 18 11:00:48 2026 GMT
Subject: CN=2b2f0bc0e79c36b03384acd2b3132f37c51a1747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:93:61:70:11:92:ac:3c:d5:97:97:97:f6:
90:e0:42:79:4d:d9:96:66:cc:9a:86:5c:c5:4a:fa:
17:fe:8e:0e:3b:1a:31:ce:0c:37:f4:2a:c0:7c:d2:
79:ef:3c:ae:e5:ec:9b:8f:90:6a:85:e0:bb:15:a2:
56:53:f8:1a:cf:94:04:56:82:1c:88:ef:e4:d6:de:
3d:50:b9:f1:b9:70:2c:5f:21:54:61:ba:11:52:5f:
6b:4c:7e:3e:29:60:53:08:80:49:97:11:fd:f5:70:
d3:c1:be:9b:55:93:59:cc:23:0f:96:3d:96:1e:66:
bc:b4:47:ec:5b:61:01:ee:88:dc:1f:ff:f7:f4:ac:
57:16:7e:84:22:c1:82:5a:ea:79:a7:98:5a:c2:a4:
c4:b0:de:f2:ec:c8:af:21:2f:80:5d:b5:87:f7:cf:
7a:e4:18:99:ec:42:d7:65:21:0f:be:94:70:a1:62:
99:19:2e:dc:b2:12:99:87:b4:de:9e:8a:e6:72:71:
e8:81:4f:cd:02:49:5b:71:bf:24:6f:c4:9e:40:b4:
2c:7e:bf:2f:82:9e:37:da:37:13:92:a9:b0:63:2e:
cf:e2:da:bd:89:f5:a3:8c:86:3b:c8:4b:60:9b:c3:
35:e0:b6:81:11:99:38:a1:22:50:52:85:8e:9d:f2:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:0B:C0:E7:9C:36:B0:33:84:AC:D2:B3:13:2F:37:C5:1A:17:47
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3c:3c:62:94:90:e9:67:61:c1:1c:09:ba:00:30:44:ce:3a:
d0:b1:f8:cc:57:1c:1b:48:1c:7f:f8:1f:1c:ee:1f:23:aa:56:
ea:aa:a4:51:72:eb:89:63:52:5e:e2:6f:d3:58:ec:83:0f:f1:
49:00:8a:d6:05:f6:7f:45:bb:c2:e4:ee:5e:96:ac:3b:fe:4f:
01:30:76:68:a6:8e:99:6c:02:dd:b7:57:9d:2e:5a:d3:5c:88:
fb:3a:60:50:45:68:a1:dc:83:97:45:c8:1f:3d:e9:75:da:d3:
64:3e:83:96:08:3b:1c:16:de:07:96:8e:6d:a3:85:82:de:30:
ca:c4:20:ac:38:95:57:21:b9:1e:01:7a:2a:84:2d:cc:a4:ab:
38:e2:af:a2:fd:fc:92:9f:0b:8b:a3:33:c5:9f:93:64:a4:b5:
1d:6c:44:a8:4d:3c:2e:6f:30:00:74:b1:b7:2d:9c:05:eb:83:
db:41:06:ef:a5:e5:06:48:54:9a:e8:43:e5:ca:f6:b7:97:f5:
75:40:21:6b:26:ca:4e:e1:c8:c3:69:de:8f:91:7e:d7:7c:73:
a9:8b:50:32:24:2f:cf:c5:a6:ff:1f:86:6b:00:f6:46:94:98:
4c:e3:5a:1c:f5:c0:a5:d3:1f:af:6e:d4:fe:ea:7b:07:68:3c:
33:e1:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:15 2026 by rpki-client