Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: 8ktghYkrC/r7CP4uTB2M8ZXkJeEDUF7H/A0Z0FivGcA=
Subject key identifier: 87:7A:EC:93:CD:BB:4C:7F:62:21:AF:37:14:82:9D:2E:AD:6A:E0:6F
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 019D9850B4A14E0C49341B9F8A273895CA49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:01:59 +0000
Manifest this update: Thu 16 Apr 2026 22:01:59 +0000
Manifest next update: Fri 17 Apr 2026 22:01:59 +0000
Files and hashes: 1: j20qybaMMnEffof95SNFhPW89PI.crl (hash: 7bJewqcfDjrOyPt34SHjXVBT/FzsvjoyG+zQiJFXq+c=)
2: yy7RjY9VjJxpv75GhAQEnVx8t8k.roa (hash: KHt8fJdWAUNtqMOeAAHu9NRYtOwOJC7Y60cmxx721z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:b4:a1:4e:0c:49:34:1b:9f:8a:27:38:95:ca:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Apr 16 22:01:59 2026 GMT
Not After : Apr 17 22:01:59 2026 GMT
Subject: CN=877aec93cdbb4c7f6221af3714829d2ead6ae06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:9c:08:2d:df:99:51:65:b0:dc:bb:b1:f0:
21:1d:e0:9e:06:6e:e1:f4:c6:c2:23:78:4d:09:96:
be:6d:0b:e0:a4:a4:60:e4:ca:03:f5:f1:b5:e2:37:
5b:3b:4a:5e:d3:09:42:63:6d:66:db:ba:dd:d0:ba:
cf:56:fb:7f:b2:dd:14:7c:05:71:ad:16:ed:d2:0b:
f2:6d:cf:c3:65:19:0e:4d:6e:d1:b2:c8:a5:3a:0f:
4f:3c:74:3d:a1:a1:07:51:6f:b5:1f:a0:32:06:50:
99:56:7e:fc:d3:25:c4:38:a6:2e:2d:50:c3:7f:be:
b1:6b:7c:92:78:d8:c9:5f:d2:a9:b2:b3:e1:64:fd:
2b:74:33:49:f3:15:49:b6:63:12:45:0a:a0:f8:1c:
ee:dd:3a:8a:2c:a6:d6:b9:d6:c1:04:ed:8f:6e:03:
d9:f9:4f:ee:ea:ee:30:86:39:39:62:a8:70:a7:92:
86:67:ea:26:45:94:98:70:1b:3a:bf:97:aa:28:61:
04:d6:27:3a:f4:ad:4e:da:34:7a:6a:15:80:e5:df:
62:3e:c9:7c:62:69:51:10:67:12:e5:c1:33:b4:8b:
e8:6b:a3:01:32:96:64:bf:f8:6a:2c:6c:c9:b8:30:
54:db:3b:dc:89:73:78:9c:a1:73:95:95:f2:ae:8d:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7A:EC:93:CD:BB:4C:7F:62:21:AF:37:14:82:9D:2E:AD:6A:E0:6F
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5d:d2:d9:ad:61:2b:54:5e:0d:e8:6f:0d:0d:e0:9c:72:49:
19:8d:d2:34:52:9a:b4:1d:e4:fe:65:47:12:be:4a:68:3b:fa:
ea:77:ce:7c:7e:dd:bb:94:70:23:54:f3:af:2c:91:f2:b7:42:
06:46:0d:7f:d8:ff:83:99:00:21:b8:39:07:2d:75:61:03:69:
7e:ad:c3:9f:1c:e2:9a:7f:6b:f6:ac:7a:64:cb:ae:c1:19:8d:
07:f7:33:02:4e:e2:3d:23:e0:5a:22:18:c4:0a:8e:02:ca:6e:
91:1a:aa:f7:6c:45:14:5d:b9:cd:1d:32:3c:53:f9:0e:41:f9:
cf:99:ba:eb:08:13:f9:44:a6:cd:19:a6:8e:19:57:10:ff:fe:
ae:12:ed:73:12:fa:48:44:9d:6e:24:56:4b:e5:c6:56:c6:04:
44:69:4f:1e:f5:ad:31:34:f1:4c:78:a2:ec:7a:bf:35:f8:92:
c0:3c:5b:42:66:4e:eb:7b:cc:ab:62:37:f6:5b:c3:8b:27:f9:
e3:64:9f:af:ec:e4:c2:23:1c:8b:0b:62:6d:94:c6:25:56:be:
a0:7b:99:25:d1:ca:d8:7a:5d:1c:97:40:4e:81:cf:7d:d8:1d:
6b:ac:ba:a8:78:8b:a9:cf:0b:9d:f1:29:d7:ef:fb:5f:4f:bb:
32:86:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:54 2026 by rpki-client