Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier: fpcFNqe3HFLH8XD6CJZLcNZ/WPSMk069bw/XRKti7II=
Subject key identifier: 8A:11:F0:6D:96:7B:4E:26:A8:67:A0:F7:B9:3D:DE:1E:AF:11:89:4C
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 019D9886CA48A26D2E9F32E81FCCDB8FCBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:01:03 +0000
Manifest this update: Thu 16 Apr 2026 23:01:03 +0000
Manifest next update: Fri 17 Apr 2026 23:01:03 +0000
Files and hashes: 1: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: xqEqSGnF4s6xuRPvOia8YO69pbUoVMTkOg4PEb/75Ak=)
2: opETjfO6mWFYsmS6JQzzGRH9WxI.roa (hash: 7PPELYdKKburZhJ6qtTeTQUYG9VrfTnWioCBqvymRAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:ca:48:a2:6d:2e:9f:32:e8:1f:cc:db:8f:cb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Apr 16 23:01:03 2026 GMT
Not After : Apr 17 23:01:03 2026 GMT
Subject: CN=8a11f06d967b4e26a867a0f7b93dde1eaf11894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:80:fe:3d:84:43:8c:dc:4e:49:47:f0:e0:
25:58:66:b7:12:61:83:0f:12:73:1b:11:e3:b5:9b:
1e:bd:00:08:f6:6e:5f:c8:8a:d7:55:31:45:76:ea:
02:85:a4:1d:c8:89:be:a8:5e:f2:37:fe:23:e0:cc:
f3:a4:f2:6e:43:33:ab:5b:c8:ff:79:c5:e2:2e:d6:
d7:ba:86:70:09:04:4f:3d:d9:73:f4:f8:63:7d:68:
24:df:ac:35:b7:14:cd:26:43:e1:fa:4c:18:d2:be:
74:d3:3e:b2:07:99:27:47:fe:0e:16:53:cb:ef:e6:
88:e6:2f:94:d2:ea:b1:61:c8:fd:a1:1b:5a:8c:bd:
a8:50:90:89:97:ed:52:32:fc:97:f3:8e:8b:93:65:
6e:37:6d:2a:fa:d7:4a:21:d3:17:3d:81:0e:c4:49:
15:d3:0d:25:77:fa:ca:68:30:84:f5:02:83:eb:d6:
3d:d5:27:94:f2:30:02:66:38:2f:ed:0d:23:db:d4:
9c:a9:f7:ad:07:a6:df:26:5a:ac:fd:0d:c9:51:d5:
80:fb:f9:f9:ea:58:a7:38:3b:e1:3c:1a:80:62:97:
f9:7a:83:df:e0:8a:11:5d:27:7d:7c:07:c1:15:6d:
26:5c:16:4f:b7:d3:f5:04:54:f9:e9:9e:57:32:7f:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:F0:6D:96:7B:4E:26:A8:67:A0:F7:B9:3D:DE:1E:AF:11:89:4C
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6a:13:14:95:e6:dd:df:35:22:f0:4e:d4:e9:92:6d:fa:39:
54:40:36:4e:39:54:0d:4c:c3:37:12:15:1d:f6:27:92:dd:e1:
99:47:10:08:42:e5:42:eb:c2:30:c6:8d:a7:65:e3:0f:21:78:
91:4b:c7:b1:da:dc:c9:7f:02:d2:92:91:4c:7a:ec:4b:ba:f0:
6f:19:29:bf:24:60:3a:44:f5:73:d8:53:22:2f:cb:ae:7c:e1:
5a:3d:a6:6c:43:ac:38:a9:8f:07:c2:6e:e8:c9:81:51:56:49:
37:3f:45:15:a9:84:5d:05:d5:ad:f6:d8:07:87:c2:14:ed:1e:
1d:5f:52:3f:a5:5d:c7:09:43:1e:4a:fd:9b:3b:96:c3:92:ee:
99:2f:33:ec:70:00:2f:c4:86:3f:96:d4:7d:78:2c:1d:21:f5:
28:af:fc:6d:cc:f3:02:ef:18:d1:aa:8a:7d:3a:06:05:72:e1:
9a:70:42:5d:ba:3d:9c:de:bf:d8:a3:ce:73:52:b9:48:28:3b:
a6:b5:44:9d:21:87:d0:63:72:33:39:df:b1:aa:93:15:8e:88:
ef:be:5d:b3:4b:19:5f:2a:cb:7a:e1:67:b5:61:18:5b:be:0e:
85:bb:7c:d7:2f:b5:e8:17:94:3e:6e:a1:58:8e:c4:9d:e7:2c:
a8:e4:71:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhspIom0unzLoH8zbj8u+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0
MTJjZmMwHhcNMjYwNDE2MjMwMTAzWhcNMjYwNDE3MjMwMTAzWjAzMTEwLwYDVQQD
Eyg4YTExZjA2ZDk2N2I0ZTI2YTg2N2EwZjdiOTNkZGUxZWFmMTE4OTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXqA/j2EQ4zcTklH8OAlWGa3EmGD
DxJzGxHjtZsevQAI9m5fyIrXVTFFduoChaQdyIm+qF7yN/4j4MzzpPJuQzOrW8j/
ecXiLtbXuoZwCQRPPdlz9PhjfWgk36w1txTNJkPh+kwY0r500z6yB5knR/4OFlPL
7+aI5i+U0uqxYcj9oRtajL2oUJCJl+1SMvyX846Lk2VuN20q+tdKIdMXPYEOxEkV
0w0ld/rKaDCE9QKD69Y91SeU8jACZjgv7Q0j29ScqfetB6bfJlqs/Q3JUdWA+/n5
6linODvhPBqAYpf5eoPf4IoRXSd9fAfBFW0mXBZPt9P1BFT56Z5XMn8r2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoR8G2We04mqGeg97k93h6vEYlMMB8GA1UdIwQY
MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt
MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk
LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGoTFJXm
3d81IvBO1OmSbfo5VEA2TjlUDUzDNxIVHfYnkt3hmUcQCELlQuvCMMaNp2XjDyF4
kUvHsdrcyX8C0pKRTHrsS7rwbxkpvyRgOkT1c9hTIi/LrnzhWj2mbEOsOKmPB8Ju
6MmBUVZJNz9FFamEXQXVrfbYB4fCFO0eHV9SP6VdxwlDHkr9mzuWw5LumS8z7HAA
L8SGP5bUfXgsHSH1KK/8bczzAu8Y0aqKfToGBXLhmnBCXbo9nN6/2KPOc1K5SCg7
prVEnSGH0GNyMznfsaqTFY6I775ds0sZXyrLeuFntWEYW74Ohbt81y+16BeUPm6h
WI7EnecsqORxCg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:46 2026 by rpki-client