Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: 7V2LGjOuMGXaGQfnpB2a2YwhTpqYNspCY2vtxVs92ps=
Subject key identifier: EC:DD:F5:CF:35:87:7F:1D:62:FE:46:9A:BB:08:19:5F:94:A7:E3:22
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019D98F49316DA0FB7A5E48718FAE9F7F1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 12DE
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: 8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa (hash: E0JF7X9/XHoU7PiFgFPjp+o209rtD/x1WqRQ5NKbHU0=)
2: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: tTHDaDJdLpRXtN4S+NT/4/fITF+jPZPanjk7azu85bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:93:16:da:0f:b7:a5:e4:87:18:fa:e9:f7:f1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=ecddf5cf35877f1d62fe469abb08195f94a7e322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:8b:b5:82:67:b6:7e:dd:b5:20:2f:32:69:
88:d8:61:2e:a6:de:b8:56:f1:a5:e9:38:50:d9:c1:
4a:e7:ea:bf:a3:93:ff:19:cd:12:bd:1a:16:98:d3:
1b:74:5b:b0:c6:39:ef:db:04:9d:c4:9d:cb:6b:78:
40:94:9f:01:2c:a6:93:fd:7b:51:15:35:8c:e5:9d:
2b:5e:74:2f:9b:f8:0c:1f:95:22:60:e2:6b:74:98:
e1:73:32:80:88:90:eb:bb:49:ba:77:25:27:8e:d1:
fb:36:af:fd:71:8f:34:be:6a:54:1e:49:aa:15:2f:
ab:1d:ef:c8:25:86:0e:c9:c1:d0:de:00:5b:86:b1:
a5:c2:9f:de:9c:88:1e:d9:30:bf:af:2a:a3:fe:b2:
66:0c:30:82:cc:29:65:3c:ca:4e:a7:71:14:0f:c5:
b7:4e:9a:46:6a:82:43:a3:43:93:de:d9:c8:48:81:
c0:04:fe:bf:23:03:2a:2f:9d:fb:ed:ef:c7:c0:0a:
58:e9:aa:c6:98:7b:f2:61:23:72:bf:82:f3:5b:9a:
ef:c5:12:90:fa:8d:36:67:dd:57:83:32:2f:07:d8:
2b:54:07:c6:f0:90:ea:39:ad:34:c4:f6:bf:07:b8:
b5:a2:98:7d:0f:39:20:e3:d6:52:1c:c7:55:e1:69:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:F5:CF:35:87:7F:1D:62:FE:46:9A:BB:08:19:5F:94:A7:E3:22
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:ed:a6:cf:64:95:b0:1a:bc:d3:7d:14:7c:59:0d:52:eb:
1c:5d:59:ca:0d:57:7a:b7:44:24:d6:75:f2:0c:b1:d2:16:82:
fd:18:87:f8:f3:c3:9b:be:0e:73:bc:af:0e:f5:c9:37:88:66:
cd:d9:62:5d:e0:17:22:68:dd:45:4c:08:56:82:99:23:e1:6c:
d6:e3:57:ea:1e:b6:ce:d9:0b:75:64:c5:16:a5:73:c0:71:49:
e9:46:cb:35:f0:3a:e2:02:c9:21:94:d7:48:07:29:e7:eb:49:
11:bf:d4:52:1b:e9:de:d9:31:d8:9f:3b:6e:15:cf:2a:35:71:
2e:3e:77:78:b5:1d:32:df:92:9e:1f:45:2b:93:89:2b:2b:f0:
21:f1:76:f8:d8:35:53:1a:cf:42:d0:f3:dc:52:b0:0d:05:0b:
3a:58:1a:c8:7a:a2:aa:ca:61:54:41:0d:67:2f:47:a0:c0:32:
9e:59:7a:87:49:49:39:04:54:72:8f:c0:d0:f9:38:99:a0:b1:
ab:ed:76:42:fe:fc:0c:8e:e1:88:87:8c:b4:48:0f:a1:08:64:
66:f8:bb:a3:48:ed:ea:59:11:70:92:69:0a:59:99:2b:b8:05:
a3:0d:3a:b7:8d:ab:86:e6:31:dc:4c:44:10:08:4f:98:ac:5b:
06:6e:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:58 2026 by rpki-client