Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: hf3fKl+c7fuzVaA2mseuH2MQoKgLPAUtNKz6TyNE/rk=
Subject key identifier: B2:14:31:1F:34:31:3E:AD:CD:D3:52:07:4D:50:90:F6:7A:49:B9:BC
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 019D98BDD576CD67CD6E10F9096F2FD5CF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:10 +0000
Manifest this update: Fri 17 Apr 2026 00:01:10 +0000
Manifest next update: Sat 18 Apr 2026 00:01:10 +0000
Files and hashes: 1: 2WayiAZSX3nD6XaqZdV_RpH6q6U.roa (hash: 6fDuXbG6/psRUJ7t4OjebizyN35Nh2rrX/pfUxV0Hac=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: eOIgqfpVWu7lLCyMAmSHrMuZbQzJauRXHKLPPzW3FOk=)
3: zHJpV3ZXxbaE4sj_xu9RNt3r4dE.roa (hash: S4FWvpehwaf+t86RAndAwSRdPD3fihRGtxygI5zpGMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:d5:76:cd:67:cd:6e:10:f9:09:6f:2f:d5:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Apr 17 00:01:10 2026 GMT
Not After : Apr 18 00:01:10 2026 GMT
Subject: CN=b214311f34313eadcdd352074d5090f67a49b9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:e8:1f:2b:15:43:5c:3d:b6:e0:9f:21:6c:
38:6f:ea:5d:ec:43:a4:30:0a:02:21:97:6f:55:57:
29:c5:10:65:bf:f5:a9:8d:c5:a3:28:36:c6:83:74:
32:f1:44:87:5c:86:9f:6b:de:32:90:b0:77:76:80:
f3:51:c7:8c:35:d2:52:d0:32:2f:e8:a7:80:d2:b2:
e5:35:78:61:1a:e6:13:a7:62:a3:9b:ae:4b:f7:47:
a8:1a:88:c3:45:d3:da:b9:9c:76:51:3c:79:a8:55:
af:aa:5b:e4:b9:12:7c:5e:db:9d:83:7c:1b:c8:8a:
fb:6c:16:e3:7c:14:96:2b:cf:74:32:a9:65:ac:e3:
9c:c2:9d:f2:27:e3:7d:b9:b3:ca:15:3c:b6:9e:c6:
0f:91:fa:c1:c7:5d:47:1c:16:ef:50:0e:06:8d:17:
a2:14:53:27:43:47:3b:a4:a9:a3:4f:2d:ea:48:61:
5e:28:95:62:33:fd:37:c7:ba:fd:25:ac:85:fb:ab:
ae:16:50:5b:88:24:5f:ca:6b:92:44:bf:1b:90:ba:
0c:c3:fe:d8:88:e3:31:47:1d:8c:64:73:c0:18:50:
1c:af:bc:37:54:0f:01:30:aa:1a:16:6a:e7:56:c7:
5c:4f:a2:d4:5d:2c:84:6e:53:bf:6c:c6:c2:54:4e:
91:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:14:31:1F:34:31:3E:AD:CD:D3:52:07:4D:50:90:F6:7A:49:B9:BC
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:60:a3:03:44:d0:ba:6c:93:92:27:82:2d:86:7a:0d:4f:f1:
64:87:c5:be:05:ea:9e:19:1e:bc:1d:21:44:bc:88:0f:b9:ca:
08:ef:5a:1a:a9:93:73:9d:89:41:cc:c4:e5:75:21:9e:50:6a:
1a:4f:36:65:90:8e:fa:cc:21:09:5f:3c:1f:52:d3:67:1e:d9:
c8:77:4a:9b:f3:f1:60:fa:47:26:64:45:cd:45:ee:f4:8e:50:
7a:cd:26:67:5c:0c:2c:f3:97:83:cb:e8:f3:26:5c:97:01:ee:
94:e0:c8:a2:79:ae:86:a0:1a:36:03:4b:f3:f5:40:d2:20:0b:
25:97:73:c8:05:d9:2e:9c:ad:1d:78:1c:eb:e5:23:71:60:64:
8d:1b:65:bd:5b:34:7c:96:b2:12:e4:88:d4:c6:b1:c9:73:5c:
97:60:3a:5f:4d:c8:ea:3b:bf:9b:04:c2:7c:20:05:63:19:9f:
aa:df:3f:99:bd:cd:1e:5f:e1:ea:f0:cd:ab:14:46:3b:e1:1e:
e3:a4:d9:2f:27:4a:5d:4a:1f:28:37:2f:33:b6:24:f4:37:ea:
ae:39:4a:f4:8e:14:39:e8:6f:a9:89:db:06:94:8a:42:75:b2:
78:82:22:17:4e:fb:14:9c:ef:34:37:ba:64:d7:d1:14:42:54:
83:17:23:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:12 2026 by rpki-client