Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: sMLtUSHb0B8elNdm78Y0yleGUTavu5VQw+OAIuYDVkQ=
Subject key identifier: 58:AF:47:5E:17:19:94:F0:75:9E:95:6F:88:30:8E:EE:4B:65:44:2D
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019D992B181960B87334AB895F2F48F1F5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: VndZi1ag43yUYbp1p18VZaT1S-Q.roa (hash: YUCC1yTTSNVtoC4MDdJQsWo/Nb81JBpWk0EnfDrruB8=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: a5TDRXFfPgcVaL6OVn2zrCkjQHYFGXGn2Fiv+AS3S8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:18:19:60:b8:73:34:ab:89:5f:2f:48:f1:f5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=58af475e171994f0759e956f88308eee4b65442d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:8d:66:93:81:e7:6a:37:1f:5e:9a:b6:0e:
de:11:de:eb:3d:6d:af:ee:81:dd:79:59:ca:21:dd:
23:d9:0f:94:32:b9:8b:09:8b:1d:2e:74:48:be:a4:
a3:3d:5f:bb:af:67:4f:cd:8f:8d:8c:24:7a:65:e0:
f3:55:23:c4:d8:7f:e7:82:60:ae:3d:ac:6a:59:23:
87:99:dd:aa:64:b4:61:4b:00:2b:eb:d4:37:da:78:
a4:2c:f0:6d:8e:f4:c7:e3:00:f7:72:9a:e7:34:28:
67:c6:86:b9:95:54:e0:8c:b0:96:38:8d:85:53:03:
c3:ac:53:fa:08:07:9f:47:5c:56:0f:13:1b:f0:97:
42:c7:4d:a8:f9:8a:d6:6a:6e:0b:30:40:c3:ce:28:
d9:d0:f9:5d:db:3e:4b:1d:57:60:74:79:cd:8c:d7:
48:01:b4:f7:49:67:1d:13:0d:8a:2d:f8:6c:48:89:
19:09:65:50:a4:c7:35:b9:39:a9:26:3c:e9:a7:2f:
0c:6f:b0:9b:79:ee:da:71:da:8f:bd:34:4b:52:da:
df:b9:ee:25:4e:5e:00:cd:91:2c:fe:a4:5a:9c:d9:
e0:d9:dc:c6:cc:d1:6e:e5:dd:ae:43:dc:32:7b:38:
9b:b2:da:9e:96:06:09:21:3e:4b:76:f7:90:68:37:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AF:47:5E:17:19:94:F0:75:9E:95:6F:88:30:8E:EE:4B:65:44:2D
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ca:88:07:8c:e9:d0:24:ac:88:c6:44:94:4d:23:51:5d:e2:
06:21:97:6d:ce:2e:87:c6:b4:b9:fb:92:76:71:c0:e5:52:f7:
13:b1:d9:5b:21:d2:a9:33:8d:54:fc:72:e9:61:58:ad:0d:82:
ab:ff:b3:7a:9e:41:a8:b7:78:b8:88:04:40:6e:b4:f5:2c:3e:
5f:e4:3e:4c:6d:9b:a8:2e:76:bd:f2:9f:c9:80:58:5b:7d:7f:
e8:e8:3f:e8:31:ab:a9:90:18:70:1d:bc:e4:c4:a6:91:64:a9:
e3:14:09:84:2c:c1:89:25:99:c3:72:92:e2:b7:2c:bf:e8:b7:
84:1f:53:ae:a7:5e:73:6d:e5:0f:73:76:52:cf:3f:b0:c8:72:
a5:7e:0e:f2:dc:e2:a7:81:4a:ea:17:71:c4:0f:07:35:ab:82:
57:c3:62:29:ff:ff:e2:d7:e7:0c:60:1a:94:e4:80:77:af:ab:
d8:1b:ec:4b:15:05:86:89:84:cb:68:ed:e1:57:a3:94:fe:d5:
3e:e9:c8:af:79:78:a7:21:0c:5e:84:79:3b:68:5a:91:81:a9:
19:18:f0:88:b7:0e:39:a1:9b:a6:7c:06:db:5b:c5:a0:3d:23:
66:32:d5:6e:e2:10:cf:b7:aa:08:6b:bd:47:62:5e:c3:ab:ac:
f6:49:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:49 2026 by rpki-client