Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
File: jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft (raw, json)
Hash identifier: 8/9e8NPFetlb9nESe02Xhl0AkKQBvJ3DO1Sbq6TDgBI=
Subject key identifier: 04:5B:8C:9A:81:B3:ED:6E:E9:67:5D:60:E9:5B:84:BB:27:1A:64:F3
Authority key identifier: 8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
Certificate issuer: /CN=8c54a846632e83340e114d0d35591b3d42188b76
Certificate serial: 019D9BBF08F3096D8C0CF7745DCCD2161F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
Manifest number: 10E0
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: a8MwW9uA1QblypP4WtvHf2_buTE.roa (hash: KOPlkZDXHkxKuQQUEqNV5mrWVVkmRluPORCXFGTA7CA=)
2: jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl (hash: t8WiqjZB3pi1GTxjIQWUVFf1bEtujJOkY3jS03zRa0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:08:f3:09:6d:8c:0c:f7:74:5d:cc:d2:16:1f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c54a846632e83340e114d0d35591b3d42188b76
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=045b8c9a81b3ed6ee9675d60e95b84bb271a64f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:5e:b0:9e:86:58:96:cf:99:47:15:60:45:
63:1c:65:46:3b:73:e8:3b:d8:66:72:0f:b0:d9:7f:
31:bb:cf:53:6b:bf:3c:26:a0:fc:53:26:11:47:36:
6a:ac:01:d0:43:ac:ef:4b:75:0d:66:d6:d6:22:d8:
a4:f7:a1:fa:1e:aa:7a:82:1c:22:3d:cf:44:7f:d1:
6a:7d:8e:7e:71:6a:31:f9:47:61:e8:01:81:fd:5a:
74:d6:f9:d6:0f:e6:f6:28:90:5a:eb:b4:d3:d8:a7:
f0:c3:3d:c5:70:02:d8:1a:2f:8b:2e:66:9e:49:da:
32:c9:9c:72:d2:d9:39:79:73:90:c7:1a:4a:c8:ed:
30:13:05:a1:30:b9:9a:1b:17:4c:32:f8:7a:b0:99:
19:56:33:88:de:8c:81:75:16:37:4f:4d:d2:49:62:
af:c2:1a:e4:11:ed:69:3d:e0:cd:ac:40:a1:02:c8:
39:09:41:4b:5d:b0:18:66:ec:fd:b6:c0:1c:1c:df:
6c:22:e0:2b:a1:26:a2:65:18:cb:0a:64:74:33:01:
70:a2:a9:66:66:d0:84:be:07:0c:94:96:70:f1:9e:
23:66:32:49:c8:88:1b:5f:b8:ee:ef:21:a2:4e:3d:
36:de:96:e7:b8:25:d8:43:f4:4f:6a:4a:78:34:95:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:8C:9A:81:B3:ED:6E:E9:67:5D:60:E9:5B:84:BB:27:1A:64:F3
X509v3 Authority Key Identifier:
keyid:8C:54:A8:46:63:2E:83:34:0E:11:4D:0D:35:59:1B:3D:42:18:8B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFSoRmMugzQOEU0NNVkbPUIYi3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/82a661-5587-4083-813c-3459be266731/1/jFSoRmMugzQOEU0NNVkbPUIYi3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a2:92:ab:07:a8:7e:3d:03:c5:6f:c0:7a:56:c3:22:fb:d6:
72:15:78:c9:40:d5:8c:e2:84:04:96:e1:18:b4:66:07:34:45:
85:33:09:57:da:6d:ff:f6:79:d8:72:3a:36:1c:ea:aa:08:cd:
17:5e:53:83:6c:a5:d2:2f:ec:54:3d:f3:e2:ee:c9:99:4b:53:
46:a8:b9:71:84:65:7c:de:1d:13:0f:14:2c:6d:f7:26:56:01:
b0:70:7b:80:14:46:be:88:6f:c9:44:e4:6e:e1:ec:23:a9:cd:
fe:45:98:60:03:b2:40:75:4c:53:84:c7:49:1e:5e:6e:86:01:
26:68:0b:f2:75:0e:b7:53:ba:3e:5c:8b:a7:4b:18:07:d3:d7:
0b:2a:0c:1c:3e:e3:90:47:7c:f2:c3:d9:9e:dd:8d:d1:d0:60:
bf:41:14:87:c3:5e:b0:a2:63:61:9e:2f:cf:90:ee:01:8b:05:
1a:90:83:c8:45:04:c0:69:77:a8:21:fd:5a:f0:04:76:4b:ac:
55:3b:1f:8c:a0:08:89:3f:20:40:b2:ea:e5:2e:19:c4:30:eb:
c5:d6:41:8d:14:6f:c7:db:c5:5f:f2:c1:65:56:41:33:2b:e0:
47:cd:1d:f9:1f:22:37:eb:4c:50:a2:0b:ed:60:2b:ad:5f:76:
26:45:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:58 2026 by rpki-client