Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: R6TwFjMIW13UVQIpMqOvIBkwgG+1tsnie8a74ZafWZI=
Subject key identifier: DE:85:F6:17:14:3B:9D:E2:F9:83:60:C0:B2:06:B0:7F:30:BE:95:95
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019D9AE278FF12B7DA9F35A8971AE499DF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 10:00:26 +0000
Manifest this update: Fri 17 Apr 2026 10:00:26 +0000
Manifest next update: Sat 18 Apr 2026 10:00:26 +0000
Files and hashes: 1: K7imHnGp5a0GZEXjdJA9ycC0yM0.roa (hash: WpPn3I2nrpKd+2H696eaEy1UwnJ6zYF2icMGlpKEWrE=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: Tyqyl8Lc/7iGexleOJNAYeeKQ6C+s+MrW5pIBfGeN/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:78:ff:12:b7:da:9f:35:a8:97:1a:e4:99:df:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Apr 17 10:00:26 2026 GMT
Not After : Apr 18 10:00:26 2026 GMT
Subject: CN=de85f617143b9de2f98360c0b206b07f30be9595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:07:a0:cf:4f:a4:64:14:77:9f:8e:c6:dc:
16:43:02:8a:a0:37:f4:c3:53:86:f2:13:f5:e2:c9:
c8:8a:5c:2c:de:b6:a6:43:b9:0e:79:cb:7a:79:f2:
9f:5d:59:5c:71:a0:f4:f3:61:c4:a8:98:7a:0c:0b:
72:ef:1d:c3:90:87:7b:53:fb:56:a9:fc:85:01:56:
ae:04:6f:7f:e1:4b:2c:63:d2:f7:42:29:d8:27:2b:
45:d7:19:65:28:13:b7:ec:18:20:4c:73:8d:31:47:
9f:71:27:9c:d9:94:73:f8:5b:29:5d:16:37:23:ac:
6a:56:1d:4c:cd:69:d5:31:cc:24:ba:9f:0a:c7:1a:
42:96:57:78:cd:8b:24:bd:6b:22:97:63:c7:6b:fb:
aa:dd:53:ca:c4:a8:c8:09:92:65:ea:16:ef:cf:1b:
a1:f4:b6:84:7e:70:2e:06:ff:e0:0c:75:8d:80:28:
f7:78:3e:b4:ac:72:a0:0b:e3:2f:f1:8b:6c:73:0e:
d8:12:ed:a8:91:97:4b:e2:6e:69:d5:d1:b9:2f:95:
d2:32:c5:69:99:1b:9a:28:e9:41:51:85:77:64:a0:
54:14:4f:37:21:9b:e3:7b:b6:9f:62:2e:4e:21:5a:
33:b8:33:87:37:a7:36:77:97:fb:57:4e:cf:6a:fb:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:85:F6:17:14:3B:9D:E2:F9:83:60:C0:B2:06:B0:7F:30:BE:95:95
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b0:7e:5d:b6:30:a0:d6:37:18:6c:54:ab:c7:b8:a5:ba:19:
57:43:70:6f:6b:8d:b4:c7:0b:0d:5c:a0:2a:53:d3:5e:83:05:
bb:8f:49:05:a1:b5:cb:b4:3c:40:6c:26:e0:33:56:e9:11:b7:
10:a4:0c:66:7d:e4:3e:7d:8f:db:74:37:0f:8f:01:a0:b0:c9:
85:46:2b:ae:0d:ad:58:ac:04:7e:67:a7:37:76:90:ce:ca:f0:
66:31:af:e9:fd:74:4b:32:40:19:36:7d:44:05:d8:c0:8e:3b:
25:c2:b7:75:05:73:a7:50:93:1c:08:9e:8e:d8:7f:d3:56:11:
36:14:94:93:cc:24:d4:b5:4f:66:03:25:b3:53:50:a4:c7:a2:
19:09:22:af:36:ac:1c:91:68:a4:36:2e:7b:cf:98:85:13:c3:
bd:96:c6:a2:4e:81:6a:a9:6d:20:e3:8b:20:5c:90:ec:a0:54:
4c:45:18:a0:d4:79:a5:33:01:50:d9:c5:e3:82:55:b5:ae:8f:
d6:69:70:fa:00:ad:c3:33:d0:95:ac:b7:69:0b:d2:3d:3d:15:
ab:14:e5:05:82:ec:41:3d:8b:71:9f:e8:43:a5:83:b3:8f:32:
d3:1a:0e:62:bb:8b:65:f3:c2:dd:24:0a:67:f8:03:f3:0c:56:
af:20:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:17 2026 by rpki-client