Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: zc1NRBOl9b3ZG7D4D4IVw+lbBUrY3ehDj40qJdaZWn8=
Subject key identifier: 38:7D:D7:F3:ED:55:7F:7B:EC:4F:ED:2E:EC:11:A5:42:9D:92:1B:07
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 019D9C2CE78BB864F0A41BB45EAA2F8EA7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 16:01:21 +0000
Manifest this update: Fri 17 Apr 2026 16:01:21 +0000
Manifest next update: Sat 18 Apr 2026 16:01:21 +0000
Files and hashes: 1: 3RCjNuMxUkfSYyNOUlggwRfWfc4.roa (hash: UnwrsssJDeDLbtzFhokPg+3DUFYJBO3poSSiUsMCOJk=)
2: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: eMEDzYUubQZODvRE4DiINsKW6b0fD8HyGkh7iyCc39E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:e7:8b:b8:64:f0:a4:1b:b4:5e:aa:2f:8e:a7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Apr 17 16:01:21 2026 GMT
Not After : Apr 18 16:01:21 2026 GMT
Subject: CN=387dd7f3ed557f7bec4fed2eec11a5429d921b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:b7:34:0b:29:27:5f:99:71:a5:91:6b:99:
c6:71:95:58:11:f3:25:89:44:de:0e:38:b9:b5:ea:
3d:aa:d6:08:63:18:61:52:27:c5:7b:0f:aa:dc:dd:
67:48:2a:e3:0b:c7:f9:a9:a6:02:11:14:55:e3:17:
24:de:8e:27:7e:b8:c0:96:d8:d9:68:62:7f:8a:17:
d8:95:b9:a1:09:4a:f3:9f:67:c0:65:39:7e:4a:df:
2c:02:38:1a:b6:4c:5a:c7:ed:c4:1b:fe:96:bc:b1:
96:05:68:c1:ab:21:59:dd:7a:a0:c1:31:5f:c7:3d:
b9:84:ab:52:72:da:06:ad:75:9f:25:42:ed:5a:be:
1e:eb:14:97:e8:a0:2e:e7:49:b0:9b:51:89:fe:67:
03:4b:76:85:b1:52:d1:90:cc:0e:91:0d:73:1b:ec:
8a:ab:13:22:11:bd:80:75:1d:54:0c:97:5b:67:fb:
fb:ab:f1:90:cf:ec:44:e6:76:5b:5d:92:42:b3:fd:
39:03:a8:5b:a8:0b:f7:2e:0f:55:c7:32:ff:7e:6b:
94:71:77:ef:e1:6e:0b:23:7f:a2:c7:7d:0d:fa:94:
ba:ad:d3:3e:60:92:22:68:0c:39:e2:7c:13:38:18:
cb:61:6d:5d:67:99:78:a1:92:67:8f:22:c9:b8:e0:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:D7:F3:ED:55:7F:7B:EC:4F:ED:2E:EC:11:A5:42:9D:92:1B:07
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f4:49:46:22:c1:fc:cf:ec:44:39:b0:c0:39:2b:28:a8:98:
4f:7a:09:89:69:e8:18:63:69:1b:cb:41:6d:88:86:d9:1e:e2:
69:cd:60:4b:25:62:20:14:56:ac:6c:15:50:14:51:ed:5c:94:
e1:98:0c:77:99:ab:f6:4c:92:32:d6:8c:b8:c2:c7:84:65:ad:
ec:d4:34:eb:9a:dd:54:d3:24:c6:ca:ad:73:91:93:a3:03:ec:
21:c7:e9:7c:c2:87:3f:2a:27:4a:43:ac:43:8e:30:f6:cf:ae:
0d:e0:a6:15:6c:35:51:0f:ef:55:20:39:0c:e7:85:e9:eb:a5:
62:83:10:43:f5:0c:13:57:bc:f3:42:3a:c1:35:a4:c6:70:df:
e2:ab:b9:47:6a:a5:a6:1f:70:88:b8:e3:6d:55:75:76:61:c8:
56:54:ef:66:5a:c8:26:f7:53:32:64:d1:e7:dd:43:19:cc:90:
f2:2b:7d:e9:12:65:ab:93:83:f1:fc:f9:ba:38:05:96:9d:e0:
46:f9:80:3d:22:8e:6d:37:5e:dc:db:cf:95:7b:b7:d1:56:32:
02:ff:aa:74:ed:68:9a:ef:59:85:74:3b:bb:8a:1a:d6:92:fa:
68:bd:c5:22:bd:7a:ea:41:0a:aa:95:32:c3:f1:be:ac:b7:76:
81:10:e0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:50 2026 by rpki-client