Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: 6pJPkrc0104rdim9gXvXc7CtJulFTZ4rhdaaD1Nu1nE=
Subject key identifier: A4:5E:F8:57:EE:91:01:C7:4D:34:8E:C9:DF:34:31:FA:9B:06:12:9A
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 019D999967B489BB3BE569A21C7782C5FF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:01:00 +0000
Manifest this update: Fri 17 Apr 2026 04:01:00 +0000
Manifest next update: Sat 18 Apr 2026 04:01:00 +0000
Files and hashes: 1: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (hash: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: gjFeuiLjNMpfQzyCTiDxeq5yfwzppLpZWaXAgQNpeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:67:b4:89:bb:3b:e5:69:a2:1c:77:82:c5:ff:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Apr 17 04:01:00 2026 GMT
Not After : Apr 18 04:01:00 2026 GMT
Subject: CN=a45ef857ee9101c74d348ec9df3431fa9b06129a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:dc:34:38:44:27:88:60:ee:13:6d:29:2a:
1e:7e:c6:67:37:bb:31:70:dd:35:73:f6:68:eb:8e:
ad:b5:48:0e:2d:97:46:2f:04:14:df:7a:51:72:7b:
fb:e1:da:d7:93:63:c1:da:17:d8:fa:ec:b9:b9:97:
c2:a4:b2:62:35:4d:05:12:35:1d:9f:6b:e2:e7:30:
78:fc:29:f2:5c:66:9a:bd:72:ec:2a:9c:5b:96:69:
a0:4b:c3:70:74:85:19:b5:99:63:b0:70:d3:ee:cc:
8e:cb:26:70:e2:de:e1:c1:65:61:fc:b2:a4:f6:20:
40:9f:a1:82:a0:a0:b9:b4:c0:d5:fe:c4:14:d8:df:
50:72:e7:2a:fd:2e:b6:35:d2:8c:9c:6c:09:d4:66:
c2:2d:e2:47:06:6a:83:1b:2b:13:f1:dc:38:51:a1:
6a:b8:30:23:c0:0b:a3:fa:40:7e:90:79:4a:e7:8a:
28:eb:a7:cd:8d:78:3b:5c:dc:2b:cb:d2:33:72:ea:
e8:72:3b:45:f0:2e:0e:4d:7c:1e:cf:db:b9:33:fe:
bd:7e:42:c3:50:82:54:df:f9:4b:3d:d6:d9:12:72:
a4:16:3a:07:45:e0:63:9c:2d:51:7c:04:20:15:6a:
a6:58:2b:9e:fc:c5:de:2c:d1:a3:2f:bd:1c:7f:b2:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:F8:57:EE:91:01:C7:4D:34:8E:C9:DF:34:31:FA:9B:06:12:9A
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a7:1a:ef:67:a5:5c:28:57:54:a1:5e:cf:3c:65:3e:fc:57:
41:b3:70:d0:4e:db:c1:3e:18:de:92:bb:1e:2c:32:9e:fe:c9:
d7:45:77:22:10:a1:11:35:f2:3d:90:7d:f5:cf:5b:ae:87:18:
e8:5b:d9:a5:2a:ae:2c:48:12:81:fd:61:10:04:a3:cd:64:08:
57:57:dc:eb:59:b0:bc:2b:b7:85:10:37:3f:dc:38:7c:97:28:
d9:aa:55:43:df:fa:e1:87:b2:fb:73:80:cd:e4:95:fb:5f:62:
a9:fc:8d:a4:40:89:8d:e4:44:39:c8:4e:f6:92:a6:2a:f1:66:
91:49:26:f0:ed:3d:a8:1f:7e:56:b8:19:2f:04:8d:8e:0b:0d:
e8:56:2d:4e:92:b5:54:cc:ef:da:b2:50:66:a6:0b:87:46:23:
56:f4:8a:f0:c2:c2:88:46:f9:1e:b2:de:5c:b1:c0:c8:1c:91:
a6:e9:0d:b4:4a:db:2a:3f:ad:e7:0d:96:47:68:a9:6a:a9:a0:
ab:b7:5a:42:43:ab:aa:0a:d7:5f:64:e3:7e:69:f2:56:bf:92:
4f:e2:63:62:78:fc:4b:d4:27:6d:04:6f:44:2c:33:29:d4:62:
58:4f:cb:96:b1:a3:16:42:86:2d:82:74:0a:ce:c8:ba:aa:72:
cc:94:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:42 2026 by rpki-client