Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: tjusrbzs0JNRU7G6pCrLw8fNIsxD/EEq//j5/XlwkYE=
Subject key identifier: 98:FD:DE:2A:59:51:9D:06:E8:02:F7:E6:C9:5D:EC:D9:F2:1F:FB:ED
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 019D992AF0761DE73241E5C43566434BEB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0D39
Signing time: Fri 17 Apr 2026 02:00:20 +0000
Manifest this update: Fri 17 Apr 2026 02:00:20 +0000
Manifest next update: Sat 18 Apr 2026 02:00:20 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: yByxaVY7nfi+ExzRSjvQXLpObpp/TxmF9zib59CM93M=)
2: uIfxedIoPtI6sFt6tLFbdFhBmow.roa (hash: Q+T15udJmpOitf8fa/5KOsL5hhkwGZ8F5qC5MKVKRFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f0:76:1d:e7:32:41:e5:c4:35:66:43:4b:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Apr 17 02:00:20 2026 GMT
Not After : Apr 18 02:00:20 2026 GMT
Subject: CN=98fdde2a59519d06e802f7e6c95decd9f21ffbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:33:be:04:c5:31:a7:db:a8:de:d8:1f:69:
86:98:e4:b5:d9:ba:06:af:a6:a5:98:e0:2e:c6:18:
01:36:c5:5f:4b:55:4e:5c:8b:ae:8f:e9:c5:38:f7:
33:6b:d0:49:ab:63:36:18:0d:1a:63:3e:03:aa:0c:
9b:79:2b:30:4a:b3:37:50:84:d6:cf:97:9b:65:02:
bf:9d:96:7d:9f:0c:bd:cf:7a:2d:28:cd:66:19:71:
4f:6f:73:f7:89:ed:ee:e0:27:d8:c6:d7:1b:86:18:
73:f4:bc:82:7d:af:1e:38:17:a4:40:37:4a:56:cb:
b3:5a:68:21:c8:d5:86:62:56:c1:2b:58:81:f2:d9:
3e:92:83:ce:fc:4a:f9:c3:2d:db:49:ad:dd:04:d1:
c6:ff:e5:d3:7f:5d:f4:13:62:27:4d:d0:85:92:9e:
d4:74:e8:bb:ca:85:1e:57:3b:13:96:b4:ff:c1:dc:
12:8b:63:ff:c4:3f:c7:cd:3b:a4:3f:5f:ba:e3:3c:
91:c0:bd:bc:66:9b:b6:cc:5d:20:82:5e:4b:97:c4:
29:ce:04:2e:4e:1e:5d:28:80:81:34:fb:e2:1c:cf:
82:77:df:f6:df:bd:50:54:95:ef:54:67:2e:49:56:
bc:c6:48:13:79:53:33:a4:78:da:37:28:ba:22:38:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:DE:2A:59:51:9D:06:E8:02:F7:E6:C9:5D:EC:D9:F2:1F:FB:ED
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:29:5b:81:d2:d7:c2:89:08:bd:29:4e:3b:dd:07:07:2b:96:
87:5b:df:42:0b:64:c9:77:8a:17:9a:69:e2:b9:bb:97:39:82:
d1:a5:5b:ff:dc:c5:ec:d0:9b:31:24:3f:47:05:cc:9a:87:21:
ba:b7:61:e4:6f:75:3e:0a:46:01:5a:e1:19:81:4c:ee:77:07:
74:ff:92:89:ef:d3:31:7a:8c:e7:56:68:92:3b:25:10:63:24:
38:06:59:f8:70:30:66:78:71:80:c1:ab:b5:c1:7e:43:50:72:
da:39:29:25:3f:02:84:a6:2e:f2:bc:10:b4:06:bf:f6:c7:39:
d6:1f:cb:6a:5b:6b:2a:59:94:54:b7:a0:0e:03:5c:40:fd:38:
36:1a:be:da:e1:df:de:58:18:1f:fb:72:22:db:e4:3e:0f:90:
fb:c7:3e:ad:63:e1:fe:d9:88:65:de:7b:68:1a:a9:91:46:fd:
ee:a7:29:01:fe:b5:aa:3b:8b:60:70:5a:11:78:ec:62:cd:e5:
86:4c:aa:99:7a:ed:2c:0b:c3:96:22:24:5a:38:4f:ab:f5:9e:
18:da:25:6b:d1:dc:02:60:34:4c:9e:3c:bc:32:a1:38:da:23:
2a:77:00:a3:f3:60:09:62:27:ea:51:31:f5:b5:a3:47:0f:cd:
96:92:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:24 2026 by rpki-client