Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: 618I/X0AJnVO6pcPYWhBsXmq1IJLuyXRDq/Rin+BbFU=
Subject key identifier: 4C:B7:F2:9E:FA:43:B8:63:07:D0:BD:F7:A4:EB:BF:49:DE:82:E0:6C
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019D9A75010678DF23C2449869233A0C4CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: 5FzvwUIf_jEUll3PKrQMP5_suiU.asa (hash: MNHOEt9JisPhIb3wm1XE5W+hLf6wZBICFb3kH8XoROg=)
2: 8bD-7QTegEg52E0iZppyCdDUnzk.roa (hash: SIwdtnsAl+O53na0hHcKGea3jeX1u8/+0tuoQrFoHIc=)
3: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: mMBefhoSSpwOYd5GWl7q/EczprlcgVL4qg6jXoggOPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:01:06:78:df:23:c2:44:98:69:23:3a:0c:4c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=4cb7f29efa43b86307d0bdf7a4ebbf49de82e06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:85:db:68:a2:78:db:e0:89:25:67:b8:0d:
c2:45:ac:a2:04:25:d5:ca:79:f0:34:b5:0f:d7:a9:
17:96:f8:6e:ad:59:ea:f5:a1:bc:a4:98:00:17:9f:
82:f6:bd:a6:a4:ea:1d:0b:29:89:4f:04:0e:13:0b:
30:e3:80:ca:75:5f:ae:04:2f:88:e6:a0:64:4a:5f:
98:17:5f:0b:b8:85:5e:8c:3e:ef:52:ec:fd:95:b3:
6d:6c:5f:48:5a:67:91:a7:36:fa:7a:00:20:68:7b:
de:e0:d9:09:ae:47:65:f5:e7:ca:5f:ce:33:07:b0:
1a:ea:d0:b1:b6:3d:6b:48:7a:68:f7:b3:36:c6:7c:
04:9d:3c:a8:b1:dc:f0:cc:8f:d6:8c:84:e6:81:19:
7d:9d:aa:86:be:f9:24:1a:14:ac:7f:2d:ec:38:ec:
ab:79:b0:d8:b7:d0:a5:3e:d2:22:2c:43:b2:4f:4c:
73:b7:71:95:09:a7:34:64:bf:f0:9a:59:88:e5:16:
51:b7:aa:38:f8:e7:c2:9b:24:6a:26:d3:71:78:74:
0c:e1:6a:53:fb:06:c3:85:dc:18:fa:30:2f:d5:d6:
a8:0d:5c:6f:d9:ce:a5:2f:df:10:94:6a:4f:f0:fb:
ca:10:85:33:c2:8c:67:6a:f3:25:74:42:25:20:b6:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:F2:9E:FA:43:B8:63:07:D0:BD:F7:A4:EB:BF:49:DE:82:E0:6C
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1c:3a:61:29:25:25:07:1c:ae:f9:9c:b5:15:d8:26:f8:85:
d1:75:38:70:86:63:8c:70:c1:17:88:35:e6:e6:2a:01:53:f1:
17:c6:a3:fa:3c:51:bd:52:49:85:69:bc:45:2e:d9:21:44:2e:
05:1a:e6:92:0c:29:cc:51:56:da:00:3e:1c:99:cd:02:86:ab:
95:6b:dd:1f:16:df:e9:62:1d:c1:96:14:87:f7:cb:f0:e2:fe:
ae:3b:27:3c:a0:7f:6f:c1:d4:1d:4f:37:53:ef:ab:59:45:14:
89:e1:6e:66:f6:df:70:23:87:1f:98:dd:ed:51:5b:4b:53:d7:
3c:b2:19:6b:ab:c4:60:41:42:cc:95:28:e7:f6:ab:e4:ba:74:
41:fd:c4:0a:f5:8e:a8:e5:a8:25:90:de:51:be:82:85:73:99:
53:1f:d7:8d:e8:e4:7d:94:09:91:f0:14:00:48:ef:1b:b7:b5:
12:7e:a1:7c:02:01:8f:ea:ad:27:d8:cd:3f:62:86:a4:60:83:
f1:5a:65:e0:61:0e:00:c2:18:1d:01:f8:4d:61:85:3b:8c:0f:
03:66:77:f6:3f:16:c4:fd:e2:11:d4:17:39:00:1b:ee:f9:ff:
f7:06:7c:a7:6b:01:b8:10:e0:12:25:12:4d:6f:62:ae:c4:cf:
21:e9:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:41 2026 by rpki-client