Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
File: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft (raw, json)
Hash identifier: 4XeTLjr4QfHNSSeBsFpdtdokW5gVLoUBJCcNdmIF17o=
Subject key identifier: 30:64:95:FD:D1:DD:30:97:E0:2E:7B:8A:D1:24:B4:0B:10:A2:E1:2A
Authority key identifier: 24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
Certificate issuer: /CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Certificate serial: 019D9A3DE81B8A06E52BF21E108F71552ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: 3A9howO8D1X-BLYPqKD3XZ5Kxz0.roa (hash: cw3EW0tYOXjRTKHLWeTNQZy58ZLoHee03jDMcZoncWw=)
2: JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl (hash: wDMeWsu2yrvdEgJS68tgz8rjyYlR0dnez+Gcda9clR0=)
3: xhe1ftuP4eIHL857T_L-xO3GLdU.roa (hash: jxlOSVGh50KvsEL1junXJzFdVjHdQEvGO3d67LIevSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e8:1b:8a:06:e5:2b:f2:1e:10:8f:71:55:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a918f1b10ec1d660b1cfcb1bfe196c2feb06bf
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=306495fdd1dd3097e02e7b8ad124b40b10a2e12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:e8:65:21:bb:fe:8b:db:da:2b:44:6d:88:
52:86:d7:ae:b8:43:3f:24:74:4f:21:c0:d6:6d:c7:
8e:33:6a:2a:8b:a2:34:af:22:53:55:64:43:3b:0b:
14:e8:bd:7b:51:f8:b3:a7:56:de:d0:cc:1f:a6:43:
73:7b:48:6a:8d:4b:37:49:91:c8:7d:bb:13:1d:fa:
e0:59:51:5f:59:4d:2c:28:53:de:ee:1b:94:16:b6:
88:99:20:25:c0:f4:7a:c1:dd:86:14:2e:13:b6:1b:
e1:62:b3:8c:e6:3c:21:09:dd:73:63:4d:2a:12:02:
11:b3:55:41:0a:7b:76:1d:e9:b9:38:fa:e2:e9:3c:
4d:54:16:c9:a1:92:9d:be:87:f1:45:51:a8:06:7e:
98:ff:a2:be:f7:75:43:b8:0f:fb:ba:33:3c:39:c3:
11:7f:92:c6:e7:e7:45:17:6d:70:19:c7:ae:4f:22:
ac:c9:c6:86:8d:b8:00:63:b5:d6:ce:79:49:8a:85:
62:aa:ad:5f:d9:5d:d0:a2:25:57:a5:ac:fd:f3:ae:
ec:15:59:d4:dc:e0:a4:b3:4c:c1:8e:8d:31:4b:65:
b4:c7:e0:c3:4d:6a:56:d4:e7:d3:fc:87:0f:5f:60:
b5:5c:c2:a4:de:c5:a1:53:f0:f3:81:91:a7:3f:db:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:64:95:FD:D1:DD:30:97:E0:2E:7B:8A:D1:24:B4:0B:10:A2:E1:2A
X509v3 Authority Key Identifier:
keyid:24:A9:18:F1:B1:0E:C1:D6:60:B1:CF:CB:1B:FE:19:6C:2F:EB:06:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/1f5feb-7acf-4c1d-8e9f-1f262d9c9b07/1/JKkY8bEOwdZgsc_LG_4ZbC_rBr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:17:97:a3:67:5e:32:30:c4:1c:75:45:5a:f3:12:a9:d6:06:
7d:25:54:52:dd:fc:45:24:ed:a8:01:ec:26:4f:dc:c9:a7:64:
47:66:cb:96:ae:5b:40:62:a4:6e:45:ed:8a:ef:07:fb:49:a1:
2f:ca:98:1d:bf:50:dd:e6:1a:bf:2d:86:24:38:7a:01:e7:66:
88:31:c4:b8:4f:24:b9:c5:e8:88:dd:9c:10:63:84:21:19:ef:
75:db:01:d8:8d:47:7d:38:43:ae:b0:82:23:a7:9d:95:d8:02:
30:4d:bf:7c:aa:0f:5b:a8:d5:b5:b4:8f:cf:02:1a:56:e1:cc:
d4:a6:f3:fb:5d:3d:44:99:5a:d9:1f:75:23:60:2b:39:25:c9:
2c:2e:51:fc:51:30:79:6b:1f:a8:1e:2a:ec:60:c6:25:f4:c3:
11:e3:77:2b:03:23:21:5f:22:66:4f:3b:c0:68:a4:2f:2e:71:
bc:27:b2:53:bd:8e:94:4b:b3:75:6e:80:7b:03:15:93:ce:bc:
06:74:71:46:61:6f:e3:75:2c:d1:d5:75:64:99:55:df:8c:b6:
a5:89:59:13:60:2b:5c:91:3d:8c:9f:1a:67:e7:5f:0b:4c:21:
35:ec:a9:be:77:9b:ad:5e:fa:bf:f0:f6:97:78:ee:1a:51:f9:
3f:b3:d2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPegbigblK/IeEI9xVSq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YTkxOGYxYjEwZWMxZDY2MGIxY2ZjYjFiZmUxOTZjMmZl
YjA2YmYwHhcNMjYwNDE3MDcwMDQxWhcNMjYwNDE4MDcwMDQxWjAzMTEwLwYDVQQD
EygzMDY0OTVmZGQxZGQzMDk3ZTAyZTdiOGFkMTI0YjQwYjEwYTJlMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BzoZSG7/ovb2itEbYhShteuuEM/
JHRPIcDWbceOM2oqi6I0ryJTVWRDOwsU6L17Ufizp1be0MwfpkNze0hqjUs3SZHI
fbsTHfrgWVFfWU0sKFPe7huUFraImSAlwPR6wd2GFC4TthvhYrOM5jwhCd1zY00q
EgIRs1VBCnt2Hem5OPri6TxNVBbJoZKdvofxRVGoBn6Y/6K+93VDuA/7ujM8OcMR
f5LG5+dFF21wGceuTyKsycaGjbgAY7XWznlJioViqq1f2V3QoiVXpaz9867sFVnU
3OCks0zBjo0xS2W0x+DDTWpW1OfT/IcPX2C1XMKk3sWhU/DzgZGnP9tEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBklf3R3TCX4C57itEktAsQouEqMB8GA1UdIwQY
MBaAFCSpGPGxDsHWYLHPyxv+GWwv6wa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYt
MWYyNjJkOWM5YjA3LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xZjVmZWItN2FjZi00YzFkLThlOWYtMWYyNjJkOWM5YjA3
LzEvSktrWThiRU93ZFpnc2NfTEdfNFpiQ19yQnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBeXo2de
MjDEHHVFWvMSqdYGfSVUUt38RSTtqAHsJk/cyadkR2bLlq5bQGKkbkXtiu8H+0mh
L8qYHb9Q3eYavy2GJDh6AedmiDHEuE8kucXoiN2cEGOEIRnvddsB2I1HfThDrrCC
I6edldgCME2/fKoPW6jVtbSPzwIaVuHM1Kbz+109RJla2R91I2ArOSXJLC5R/FEw
eWsfqB4q7GDGJfTDEeN3KwMjIV8iZk87wGikLy5xvCeyU72OlEuzdW6AewMVk868
BnRxRmFv43Us0dV1ZJlV34y2pYlZE2ArXJE9jJ8aZ+dfC0whNeypvnebrV76v/D2
l3juGlH5P7PSGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:35 2026 by rpki-client