Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: isufiVfza/i2TM1KkU7rruM723Hu9VskDLgNdfdaxDk=
Subject key identifier: 23:32:D9:FC:8A:4F:B5:57:8E:3B:D6:81:C6:BB:06:CF:56:DD:6A:76
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 019DA3789DFC7AE68C11568D3B83154A62CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 0541
Signing time: Sun 19 Apr 2026 02:01:24 +0000
Manifest this update: Sun 19 Apr 2026 02:01:24 +0000
Manifest next update: Mon 20 Apr 2026 02:01:24 +0000
Files and hashes: 1: 08TX7zGJM_9SDvXsn_IRwc2BjrU.roa (hash: jT+EKCy6Js0nlHIQwG+OyzWgM7mgDMvpygyb2+ijALI=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: KM414hedVXmmk+XYRI5Fe4G6HJMuQ+JV/EhOX2lX6rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:9d:fc:7a:e6:8c:11:56:8d:3b:83:15:4a:62:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Apr 19 02:01:24 2026 GMT
Not After : Apr 20 02:01:24 2026 GMT
Subject: CN=2332d9fc8a4fb5578e3bd681c6bb06cf56dd6a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c5:b1:d9:77:98:e8:34:a3:c8:5f:ad:ad:07:
d0:d4:e5:bc:e5:f1:24:e8:cd:f5:57:ee:0a:45:87:
5b:68:ce:d8:12:72:6f:7f:89:e2:25:4f:b1:b0:47:
f1:0e:07:b8:38:50:6c:f7:89:42:15:eb:57:07:2e:
fb:1b:80:84:8e:4e:db:b4:58:c2:85:56:bd:c6:36:
08:ed:08:a6:49:15:78:9d:07:00:f2:57:f7:9c:5a:
7d:d2:39:c7:f8:29:58:d4:ef:39:d0:df:32:9e:c3:
ca:84:aa:10:f2:b4:d2:70:fb:34:af:c8:a8:e5:c0:
27:dc:7f:63:eb:cc:fb:86:70:bf:c6:a0:f4:0d:90:
67:70:80:00:83:30:af:6f:23:c3:e2:ff:1e:4e:a4:
e6:b5:d7:67:c3:f7:60:f0:49:8f:80:8e:75:d8:05:
d1:c2:13:7d:c6:4f:e9:90:86:2f:7d:65:b5:c2:35:
a8:25:fd:70:3c:b4:1f:f2:81:20:fc:f8:ab:d7:bf:
1d:8f:d5:6a:ec:21:f4:a3:e9:cd:0c:fb:c4:ea:80:
c7:5c:f6:c5:ab:da:9e:54:1e:66:b3:7f:64:b4:ac:
d0:fd:f5:c5:68:e7:1e:17:3e:71:08:1e:f1:fa:ea:
b0:f7:ba:3d:7b:c4:83:22:62:06:37:f8:00:f4:fc:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:D9:FC:8A:4F:B5:57:8E:3B:D6:81:C6:BB:06:CF:56:DD:6A:76
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:36:62:b4:72:78:00:b8:da:02:c9:ab:ed:d0:b2:1c:c9:63:
ad:d0:93:dd:9d:0b:63:35:6e:5c:c0:33:13:2b:f5:b0:5f:33:
dd:b4:11:21:87:e3:3a:9c:ef:04:77:20:ba:ae:b9:a6:ca:e0:
a4:0b:bf:d9:07:4f:9b:16:8e:7b:c1:77:c9:c3:17:d0:d7:3b:
f5:da:c8:aa:84:c8:a9:d6:39:fe:d0:52:e1:bd:aa:ff:41:a8:
8f:d9:9a:2d:7f:19:97:97:92:e8:b4:8f:f8:84:0f:95:f1:d3:
d5:e1:75:f7:de:5f:7a:db:c9:1c:20:84:8f:4f:b0:e6:62:eb:
fb:de:b1:bf:a7:3c:16:a2:0b:c0:6f:ee:07:16:0c:bd:2b:a2:
43:15:cb:fa:70:09:59:78:72:6c:0f:25:f0:0f:7e:cd:95:6e:
14:dd:1d:33:28:2d:db:78:e4:be:1c:8a:25:b9:da:83:cc:44:
8a:ab:57:bc:47:49:a2:1e:78:e3:37:f3:92:45:58:22:c2:6c:
66:82:12:e0:96:1e:04:1f:e4:10:2a:50:40:a1:20:71:3f:cf:
82:36:b2:dd:3a:2c:f4:ed:e5:b2:07:80:56:e4:1b:b5:b0:fb:
f3:de:41:a9:6a:cf:e4:68:3c:78:ee:2a:db:b8:b3:23:aa:4a:
ac:8b:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:47 2026 by rpki-client