Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: K+6U6S/op60iadO1z4cXxUGmfJG2+H0hVDCuxGjOwaE=
Subject key identifier: 0A:8F:0B:DB:B8:32:2F:A1:F0:BA:F7:73:03:49:97:7B:44:CB:0A:76
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 019D992B17F78A81277E27B2CF01FBF118B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 8cg2nEVG8Xzu0RX4ymhKb5woKRk.roa (hash: kcwFv0RR8Ptv5DePTusLmAIEM0ACWY+zBbPUnnsVU90=)
2: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: ot/o/vAHn415mK2gGkWFKqM9f03DgeLDRWL0Y+iIH9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:17:f7:8a:81:27:7e:27:b2:cf:01:fb:f1:18:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=0a8f0bdbb8322fa1f0baf7730349977b44cb0a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:b7:98:9b:04:25:57:7d:23:8e:a5:93:61:
04:ab:a3:05:75:63:6c:da:ee:80:eb:07:d5:1f:cd:
2d:b7:cb:ba:0d:55:c7:a5:68:b8:68:22:50:99:c0:
f7:cb:13:22:17:1c:d9:e3:71:44:81:0c:b8:15:02:
84:02:49:63:d0:e9:84:07:66:11:37:54:c1:ee:e7:
4b:7b:ad:b1:fc:5b:7f:78:ed:9f:eb:46:da:3e:fc:
90:c9:ef:1a:85:d8:62:45:be:76:78:0a:ec:ea:95:
1f:8e:53:a0:c8:02:02:6e:46:26:7d:11:76:a8:6f:
2b:13:99:76:16:2b:43:5f:79:03:45:73:80:a5:0b:
b9:a1:39:67:8b:79:bc:61:24:92:86:09:c7:99:04:
b5:aa:ca:ca:41:a5:93:14:a5:97:54:a7:c3:98:02:
f9:80:73:e8:82:6f:8c:f0:a6:84:e6:61:ef:69:14:
86:e0:0f:73:84:dc:e9:99:1e:09:18:46:3d:ef:34:
93:8e:4b:12:83:0a:50:9f:71:f6:e5:e3:e1:21:f9:
d2:92:c0:b5:9b:69:a5:1c:4c:05:a5:9d:51:97:0c:
0f:43:d8:3a:71:0b:10:67:79:3b:d0:52:ba:04:62:
d3:c2:4f:4b:48:1a:c3:4d:97:f1:b0:30:d1:b9:35:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8F:0B:DB:B8:32:2F:A1:F0:BA:F7:73:03:49:97:7B:44:CB:0A:76
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:8d:fc:cf:13:cf:4f:38:56:65:6f:ed:d7:41:5f:6e:54:
46:f9:eb:f0:45:f0:3e:48:eb:d2:5d:e0:9e:13:d2:fe:db:76:
61:0d:d6:3e:f3:20:27:fb:36:90:78:e3:f2:18:ad:42:10:57:
9e:5d:4c:58:39:f4:6a:6c:63:00:19:a6:da:31:94:6a:44:67:
a8:7a:96:4d:49:ce:b9:46:c1:2c:31:dc:00:22:49:6d:2b:78:
8f:2a:37:0d:84:08:9f:44:19:80:3a:45:6d:5e:57:ac:56:d6:
b9:41:d5:2f:34:22:33:b5:fa:1b:c4:30:f9:04:2b:b6:c2:5a:
a3:39:e2:61:7f:a6:b3:35:66:62:5b:fc:14:56:53:f2:a4:f5:
59:12:00:09:cc:8c:e2:90:5a:32:5a:21:b5:5f:19:e3:e9:bd:
7f:88:51:98:93:e6:21:25:ac:24:44:56:a6:70:aa:ad:30:00:
a1:a7:21:28:7d:a9:84:71:a5:f3:81:bd:c8:af:0f:8c:30:55:
a2:15:7b:f0:3d:14:19:db:13:09:f1:02:e2:91:89:7d:5d:6f:
de:a9:52:cb:09:23:f9:63:a9:94:99:08:e2:2e:50:15:7d:bb:
6e:04:24:22:5f:65:f9:41:48:1d:b5:27:e9:57:e4:39:6c:49:
59:6c:18:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKxf3ioEnfieyzwH78RiwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2ZjZWQ0ZjM0ZTdmMzdlNzUxYjViNDVmMzBiOTljNjMx
MWY5N2UwHhcNMjYwNDE3MDIwMDMxWhcNMjYwNDE4MDIwMDMxWjAzMTEwLwYDVQQD
EygwYThmMGJkYmI4MzIyZmExZjBiYWY3NzMwMzQ5OTc3YjQ0Y2IwYTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wi3mJsEJVd9I46lk2EEq6MFdWNs
2u6A6wfVH80tt8u6DVXHpWi4aCJQmcD3yxMiFxzZ43FEgQy4FQKEAklj0OmEB2YR
N1TB7udLe62x/Ft/eO2f60baPvyQye8ahdhiRb52eArs6pUfjlOgyAICbkYmfRF2
qG8rE5l2FitDX3kDRXOApQu5oTlni3m8YSSShgnHmQS1qsrKQaWTFKWXVKfDmAL5
gHPogm+M8KaE5mHvaRSG4A9zhNzpmR4JGEY97zSTjksSgwpQn3H25ePhIfnSksC1
m2mlHEwFpZ1RlwwPQ9g6cQsQZ3k70FK6BGLTwk9LSBrDTZfxsDDRuTXkWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqPC9u4Mi+h8Lr3cwNJl3tEywp2MB8GA1UdIwQY
MBaAFI5/ztTzTn8351G1tF8wuZxjEfl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUt
MGQwNTAzNThlNjU2LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MTNjZDctNTkzZi00ZTk5LWI1ZWUtMGQwNTAzNThlNjU2
LzEvam5fTzFQTk9memZuVWJXMFh6QzVuR01SLVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVK2N/M8T
z084VmVv7ddBX25URvnr8EXwPkjr0l3gnhPS/tt2YQ3WPvMgJ/s2kHjj8hitQhBX
nl1MWDn0amxjABmm2jGUakRnqHqWTUnOuUbBLDHcACJJbSt4jyo3DYQIn0QZgDpF
bV5XrFbWuUHVLzQiM7X6G8Qw+QQrtsJaozniYX+mszVmYlv8FFZT8qT1WRIACcyM
4pBaMlohtV8Z4+m9f4hRmJPmISWsJERWpnCqrTAAoachKH2phHGl84G9yK8PjDBV
ohV78D0UGdsTCfEC4pGJfV1v3qlSywkj+WOplJkI4i5QFX27bgQkIl9l+UFIHbUn
6VfkOWxJWWwYMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:20 2026 by rpki-client