Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: DQZ7zJh1/2xyZHFD7ZjLmkAd8aiwMW+pm/LR74muU0c=
Subject key identifier: 0D:8E:DF:7D:10:0A:06:47:B5:40:DD:C7:B3:5E:85:AE:5E:79:B1:09
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019D984F860C3482E3204E59A31E524EAAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: h8s5VF0jBngVhO8MNSGk7yDgYjVOqSeWzSAK/6d1xuY=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:86:0c:34:82:e3:20:4e:59:a3:1e:52:4e:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=0d8edf7d100a0647b540ddc7b35e85ae5e79b109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:fb:24:45:e4:31:e7:18:69:54:4d:8b:52:
d5:34:2d:03:6f:24:5b:4b:a4:b5:d7:ac:04:ed:1a:
82:c2:15:15:e6:18:34:b5:5e:f9:86:ac:82:52:06:
60:96:8b:8b:2f:c0:2c:ff:22:d2:fd:02:60:22:29:
1a:70:1e:df:76:59:1c:83:b4:25:26:13:6e:3d:95:
da:b9:bf:9e:f3:13:38:85:ac:89:72:13:18:75:c7:
fb:a0:aa:90:db:40:2a:1f:ac:9d:43:7d:a8:1b:e5:
f6:7d:22:9c:83:2d:16:dc:eb:5d:ab:23:24:f1:b3:
40:7d:ba:a0:aa:cb:23:c9:3d:8e:24:9c:52:8c:87:
7d:4a:60:7d:bb:da:dd:8a:40:25:28:13:c7:5b:61:
ff:19:8f:dc:fc:22:21:19:b1:83:3f:bb:5c:4d:a3:
14:48:a6:75:91:93:18:b7:59:87:12:98:8f:5b:b1:
ae:42:40:eb:c2:9b:4a:5e:a1:5b:ac:72:12:d3:34:
13:15:6b:1e:1a:85:de:0f:8f:da:7e:52:0a:7e:2e:
7d:26:01:eb:5d:35:0e:1a:97:2d:ce:c5:5c:09:f0:
8e:b2:02:85:18:ca:a2:0b:ed:98:db:9f:cf:7f:1b:
50:1d:18:c9:9e:ab:19:d7:6b:0b:59:20:a4:33:2c:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8E:DF:7D:10:0A:06:47:B5:40:DD:C7:B3:5E:85:AE:5E:79:B1:09
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:11:57:3c:28:b3:b0:b1:b6:51:e3:35:8e:36:41:e0:d9:
69:8d:27:6e:59:41:16:06:27:9f:eb:fe:d7:87:36:69:33:2d:
10:d5:8d:4c:21:34:cb:8e:97:8b:ca:ef:fd:dc:b5:e4:3c:89:
6a:76:bc:64:60:5a:10:49:0c:79:cf:02:2b:e4:70:30:66:0e:
5f:80:0f:a9:e2:3d:18:4c:9b:8d:d0:22:86:7b:75:31:e0:f3:
63:b9:c1:b9:69:c7:d2:40:a4:76:f5:26:7a:f5:75:f0:23:b7:
84:af:4f:21:1c:98:84:ee:27:98:6a:60:0d:71:90:c4:45:14:
cf:11:21:7b:fc:13:1e:d9:4c:e7:ee:43:7a:75:cf:9f:62:19:
13:55:4b:f1:ed:fd:2b:b3:02:01:db:63:50:88:d4:7a:2e:69:
c7:86:3f:d8:15:e6:8b:68:32:23:16:b1:93:75:4a:81:c2:53:
0f:05:8c:82:7d:07:42:3c:3a:0c:03:f3:fb:d2:d1:b6:ed:80:
ae:49:88:1a:3f:06:92:36:e3:e4:22:15:6b:09:bb:f8:26:b7:
67:49:08:a0:bd:5c:55:7a:e3:95:66:07:8f:f9:5e:4d:c2:d6:
1d:4b:b6:1e:e1:69:8f:75:48:4d:7c:fb:60:97:9e:7f:47:d8:
2f:58:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:23 2026 by rpki-client