Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: DakK7QLZ0txO5QWhkhZt0BPcCm0tW9tnOz2ElzpDK6I=
Subject key identifier: EE:9A:76:9F:71:7C:02:4A:E6:94:7F:54:59:E6:C1:A5:D2:CF:70:4B
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019D9BF5A4982D99826BAD2112518C171C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 15:01:00 +0000
Manifest this update: Fri 17 Apr 2026 15:01:00 +0000
Manifest next update: Sat 18 Apr 2026 15:01:00 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: tDnRfFeRFP8nluhVBDMb3eRkhMDOLl1PvIrVgqTdUkQ=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:a4:98:2d:99:82:6b:ad:21:12:51:8c:17:1c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Apr 17 15:01:00 2026 GMT
Not After : Apr 18 15:01:00 2026 GMT
Subject: CN=ee9a769f717c024ae6947f5459e6c1a5d2cf704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:05:95:c9:27:a4:01:b7:86:61:92:97:5f:b7:
12:a6:e0:c9:29:0c:2f:ad:6d:f9:de:f2:24:55:06:
43:07:5b:2b:a5:12:e8:69:dd:7a:40:7a:2c:04:d8:
8a:1e:ee:68:89:43:16:22:5b:b4:df:89:49:ce:5e:
f7:b5:a1:b3:48:a7:fb:8b:7e:38:82:f5:65:10:12:
c3:83:77:70:47:d2:8c:3d:f6:47:f8:66:49:94:43:
25:bc:4b:92:da:6d:65:50:fc:24:97:98:b2:82:06:
27:36:d3:d8:00:a9:16:d5:83:d1:e9:59:8f:a5:56:
87:4a:fb:d8:d6:5c:fe:5b:50:73:64:ad:46:3f:4a:
49:22:b1:a6:1f:d1:80:37:e0:ac:1f:4c:7d:4f:ab:
39:dc:fd:5b:5b:d8:0b:31:43:4d:71:1e:00:c2:40:
19:cc:e5:6f:6c:dd:d7:c8:6f:b3:57:f4:e6:e7:e2:
b5:f9:45:f7:00:7b:7b:2e:5d:17:ae:8d:f0:87:4e:
a6:2f:b3:ec:d2:b5:8e:c3:15:6d:d3:9e:94:50:30:
00:90:b0:31:ff:5e:67:52:c9:84:37:d3:ab:8d:e6:
58:54:2a:2a:52:10:76:b3:68:f8:86:6d:e7:1f:39:
90:53:66:3f:fd:a2:7e:79:61:d4:63:a6:b8:94:3f:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9A:76:9F:71:7C:02:4A:E6:94:7F:54:59:E6:C1:A5:D2:CF:70:4B
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b3:52:87:0a:95:04:88:fa:62:7f:07:f5:71:9c:54:a2:b0:
6b:d9:96:49:ea:a0:04:20:c9:ae:e4:b5:5f:a5:d3:32:3e:bf:
6d:a2:34:a8:14:64:36:d4:64:0a:fc:9b:fd:0f:1d:8e:c4:f4:
c7:c5:38:bc:30:23:14:0a:b2:b2:12:be:50:74:d1:6c:a4:52:
08:e4:98:8c:46:7a:b4:89:e2:0e:ae:46:1b:c8:31:ca:7e:da:
23:9d:a3:06:9a:74:d7:d1:95:4c:e1:3a:46:c3:a2:1e:b3:5e:
71:8b:84:8d:6d:f8:6c:f3:7d:bc:ef:b3:6d:c1:ca:cd:82:3b:
63:10:be:37:77:69:77:c4:cb:eb:68:bf:79:a2:04:5c:f7:f1:
16:f6:99:de:62:29:22:38:24:8b:bb:c3:67:ab:2e:c2:7f:50:
98:ab:b1:cd:e7:62:89:5e:5c:85:65:c0:38:12:5e:e8:07:a6:
e2:0a:dd:b3:df:4a:8b:a9:96:f1:88:7d:fe:37:8c:42:10:6f:
a4:6f:d9:5e:36:2b:b1:d3:69:fd:0c:10:13:4e:09:3f:6f:0b:
e5:8c:7e:be:4f:b1:45:63:92:fa:f7:03:19:5f:96:e6:e6:ac:
78:31:94:3c:6b:c4:ec:11:db:7e:11:06:8b:40:77:35:f6:6d:
78:6a:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:39 2026 by rpki-client