Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: //03jD0D94fmXp6WLQcRbTo8ks98kwj0JQlNzTR5EUY=
Subject key identifier: 70:D8:22:61:C6:01:53:E0:5C:5E:F4:82:13:49:5A:0D:98:9C:0B:40
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019D9A3DFB7FC12F94EA77B99E6FACBB49E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:00:46 +0000
Manifest this update: Fri 17 Apr 2026 07:00:46 +0000
Manifest next update: Sat 18 Apr 2026 07:00:46 +0000
Files and hashes: 1: 0ZSPMOhVl_CYEffmgJIA-ZebrN8.roa (hash: 9FNLm9UezI9LWG0EYY6elTehFhNHqrh8PSFbqazgLkI=)
2: aIB-U74XOsh4LFFeV56dHmApdhA.roa (hash: n4BldvZSrWCDo/is34Mdq/Joj399xGxxHCi8O5qGXUc=)
3: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: k+EZpg6vRYHME+iBcRk9BIQ3YpcEXCfR9sFvWC0sk80=)
4: jrMavM7T5lh5Vt_GhvE7PBRjMs8.roa (hash: USL2VyfF57jrtGEUdroIYIf6KJtLy3Xo1q4FTmoA1+c=)
5: kft59b0FPyvt41ZJ7c7rkDRzMdo.roa (hash: rnkG/kK1GbP5ThmnLvK6djMuJiao91onEPjk3GN8OV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fb:7f:c1:2f:94:ea:77:b9:9e:6f:ac:bb:49:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Apr 17 07:00:46 2026 GMT
Not After : Apr 18 07:00:46 2026 GMT
Subject: CN=70d82261c60153e05c5ef48213495a0d989c0b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:84:9c:0b:fa:48:41:dc:52:0d:6f:1e:3a:
34:84:96:09:6f:f3:eb:c7:ba:89:e8:c8:5c:ba:e8:
ff:f4:e7:e2:84:0e:9d:a8:e1:77:44:ad:8a:b5:bd:
ce:27:ed:5f:04:af:93:7b:9a:e2:fc:81:45:14:6f:
f3:40:8c:b2:f7:24:b4:8e:fa:1a:5f:44:af:89:06:
bc:c1:1c:b0:c1:f2:89:5d:9b:9e:25:48:ec:36:98:
ac:2a:10:c5:73:e4:ce:b6:ef:55:89:0d:17:28:49:
b9:4d:7a:fb:51:f6:35:07:ca:a4:29:f7:b2:81:1b:
30:e5:2b:86:72:c7:cf:c0:e6:11:1c:e5:01:5a:4e:
68:64:cd:0e:6e:1b:54:38:aa:f5:1e:ce:7f:f6:73:
17:53:45:c6:81:e0:9c:a4:60:2a:d0:a6:c4:86:21:
80:6d:69:c9:e4:96:a6:64:08:a1:a8:dd:4b:8a:b5:
d3:e2:b3:be:1d:28:bd:b3:60:f6:68:8f:d9:d8:28:
75:a7:ac:c7:1f:72:c6:13:60:f8:12:dd:56:0f:ed:
35:74:f0:ea:21:04:cb:4c:de:42:eb:77:bf:4c:a6:
4e:02:8d:8d:8d:68:be:0e:89:87:00:4b:d7:50:02:
aa:ce:ae:02:bd:f9:5d:28:db:a7:6b:72:d3:0c:f7:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D8:22:61:C6:01:53:E0:5C:5E:F4:82:13:49:5A:0D:98:9C:0B:40
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:88:60:84:2b:1c:e7:08:a7:02:b1:43:78:b6:a2:49:2a:
34:65:38:99:f0:9f:44:12:2f:72:e4:9f:b7:43:bb:2f:df:e1:
53:6c:6c:9c:d3:29:51:09:4f:5a:56:dd:53:fb:4c:63:bd:39:
64:6a:dc:e5:fe:b2:4d:8e:0f:24:e6:f4:26:89:e5:7b:7c:8e:
a1:1c:d4:5f:aa:8a:6d:63:ab:5b:00:3d:f2:04:68:93:30:20:
5f:ef:7f:73:9e:3c:0a:d6:7d:4e:47:fd:58:30:cf:45:30:b4:
cd:e9:44:51:19:68:cd:6c:a1:6b:32:19:a8:d9:6c:cc:3f:2b:
f3:c1:31:bb:1b:b3:f6:34:5b:13:dd:63:70:09:c0:85:7b:ff:
c0:d3:51:ec:22:04:1c:59:f8:dc:86:63:39:50:8a:7d:65:1d:
d7:d3:12:29:5e:16:1e:9d:07:0d:00:b1:e0:6c:ee:e9:7b:1d:
26:4d:39:1e:a5:3b:88:3e:df:ea:fe:b9:61:ff:b5:d6:8f:b4:
a9:c1:d8:82:ff:68:5c:72:0a:6b:db:57:f8:b5:ed:30:bf:14:
b4:b9:67:34:51:ce:19:70:8a:4a:f7:0c:01:86:a3:e9:13:f9:
b2:c3:5a:3f:b0:9c:10:fe:c5:ac:9c:66:d2:02:fc:17:75:aa:
f6:70:69:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPft/wS+U6ne5nm+su0noMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDYwMDQwZWYzYTA4MjNhYTk3M2YwZDA1OTJiMWRkYTgw
OGY3ODIwHhcNMjYwNDE3MDcwMDQ2WhcNMjYwNDE4MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGQ4MjI2MWM2MDE1M2UwNWM1ZWY0ODIxMzQ5NWEwZDk4OWMwYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJCEnAv6SEHcUg1vHjo0hJYJb/Pr
x7qJ6Mhcuuj/9OfihA6dqOF3RK2Ktb3OJ+1fBK+Te5ri/IFFFG/zQIyy9yS0jvoa
X0SviQa8wRywwfKJXZueJUjsNpisKhDFc+TOtu9ViQ0XKEm5TXr7UfY1B8qkKfey
gRsw5SuGcsfPwOYRHOUBWk5oZM0ObhtUOKr1Hs5/9nMXU0XGgeCcpGAq0KbEhiGA
bWnJ5JamZAihqN1LirXT4rO+HSi9s2D2aI/Z2Ch1p6zHH3LGE2D4Et1WD+01dPDq
IQTLTN5C63e/TKZOAo2NjWi+DomHAEvXUAKqzq4CvfldKNuna3LTDPcPGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDYImHGAVPgXF70ghNJWg2YnAtAMB8GA1UdIwQY
MBaAFIwGAEDvOggjqpc/DQWSsd2oCPeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4Yjkt
NGU0YTM1ZGQzNjc3LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lNzU0OWUtNWIyNS00MjAwLTg4YjktNGU0YTM1ZGQzNjc3
LzEvakFZQVFPODZDQ09xbHo4TkJaS3gzYWdJOTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqyIYIQr
HOcIpwKxQ3i2okkqNGU4mfCfRBIvcuSft0O7L9/hU2xsnNMpUQlPWlbdU/tMY705
ZGrc5f6yTY4PJOb0Jonle3yOoRzUX6qKbWOrWwA98gRokzAgX+9/c548CtZ9Tkf9
WDDPRTC0zelEURlozWyhazIZqNlszD8r88Exuxuz9jRbE91jcAnAhXv/wNNR7CIE
HFn43IZjOVCKfWUd19MSKV4WHp0HDQCx4Gzu6XsdJk05HqU7iD7f6v65Yf+11o+0
qcHYgv9oXHIKa9tX+LXtML8UtLlnNFHOGXCKSvcMAYaj6RP5ssNaP7CcEP7FrJxm
0gL8F3Wq9nBphQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:38:43 2026 by rpki-client