Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: kbZamMqfRSljhZ3rswUEJ6EHQ3itc65UHdFtroVc4XA=
Subject key identifier: B8:5B:3D:5A:B1:39:87:6A:3D:43:74:5C:97:87:82:B5:64:DF:90:AE
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019DA30A387AC8B30F4E0BB2808A2A63DDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 11F4
Signing time: Sun 19 Apr 2026 00:00:49 +0000
Manifest this update: Sun 19 Apr 2026 00:00:49 +0000
Manifest next update: Mon 20 Apr 2026 00:00:49 +0000
Files and hashes: 1: fpTANtI4bRz4exyqA72XnfqWeAU.asa (hash: AzHMEe9qZzasIn392H8jsDvUxwHyy/nAONClfoo+kAc=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: jQ78euCJcwYohctA251J8OMRwhS/L616fDGjyzjsKpI=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:38:7a:c8:b3:0f:4e:0b:b2:80:8a:2a:63:dd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Apr 19 00:00:49 2026 GMT
Not After : Apr 20 00:00:49 2026 GMT
Subject: CN=b85b3d5ab139876a3d43745c978782b564df90ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:a2:54:97:d7:a1:16:fd:91:07:0e:9d:82:
aa:21:5f:e0:75:f8:10:78:3c:fd:23:10:1a:88:bc:
5d:d2:72:e3:c2:73:08:75:6d:c1:6e:67:df:bb:d7:
92:e8:86:39:fc:57:5b:60:0f:f6:23:66:1f:95:2b:
30:7e:08:d0:3e:ab:76:84:91:98:d5:2f:ce:47:2b:
29:7d:8f:ed:64:6c:e1:2b:63:6c:fa:bb:42:14:95:
48:1f:87:ce:c3:c3:f0:e2:ae:a1:07:72:e7:cf:71:
e7:ff:14:31:05:e6:56:ab:15:56:c1:1a:cd:b8:5f:
2a:07:d0:3c:1b:12:d4:e0:25:05:f7:cf:6b:41:51:
c2:f1:55:32:6c:a3:05:95:fb:99:f9:8b:0b:f1:5c:
0c:d1:5e:22:a9:0f:77:05:43:69:c1:ad:ad:24:20:
d4:5a:0e:0a:b1:2a:61:50:fc:33:43:15:c3:8a:ba:
06:1e:e8:f1:bb:87:88:64:82:ac:28:28:f6:e7:6a:
b0:d5:35:ef:6b:cf:d6:3d:a6:1d:a1:41:21:07:52:
28:53:ac:bb:18:56:37:cd:20:b9:ca:c8:13:b7:0a:
be:d3:23:a8:45:18:5e:24:78:80:08:ee:0c:48:a4:
25:31:50:22:70:dc:60:6b:a3:1e:fe:e4:7d:8b:b4:
18:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:3D:5A:B1:39:87:6A:3D:43:74:5C:97:87:82:B5:64:DF:90:AE
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:53:8f:bd:86:6c:a4:d5:12:b6:68:86:eb:94:03:86:38:eb:
ac:a7:3a:fd:ad:ac:34:f4:eb:c7:5a:1b:45:59:3b:0d:70:a7:
1a:68:7d:e6:0c:f2:ad:1a:b2:68:8f:56:d4:2c:3f:dd:db:d3:
fc:86:16:fa:14:35:fa:54:e8:30:db:ec:2f:09:22:8a:10:f3:
66:a5:e6:be:3b:97:9b:f8:bb:71:c0:38:2f:4e:0e:56:88:62:
b9:3b:5e:03:d0:7a:b4:30:16:92:2e:40:80:f6:02:8b:27:5c:
33:8b:54:24:0a:a7:47:a3:6d:bd:d7:d1:39:27:a5:dd:ee:e2:
a8:5b:5b:0d:49:b6:74:9a:93:96:b5:e8:ca:60:25:43:17:4a:
ca:b4:26:85:0a:3e:62:83:d6:6c:6a:b1:70:77:dd:b3:35:a3:
0e:a7:80:84:07:c0:de:5a:f9:52:b8:61:94:32:40:3e:e0:2b:
53:7d:4d:2d:e5:94:e3:05:ce:7f:02:63:10:77:14:e6:14:aa:
bc:3c:92:7e:30:9a:eb:51:66:63:d5:b3:5c:1f:80:99:d4:cb:
b8:76:71:cf:52:a0:7c:0e:99:33:5f:10:5c:99:13:89:b8:15:
8f:02:2f:0f:94:2a:59:f8:ed:7d:a7:87:1b:58:4d:3a:05:8b:
6f:00:49:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:36 2026 by rpki-client