Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: 2PzrkwEaQUGon+f3WzbvLK7XjvVngR+JxAKW9QaLbX8=
Subject key identifier: 41:9A:6C:27:E0:2F:36:98:12:5C:92:31:52:0D:52:4B:C1:AD:B3:11
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019D9DE3BDC79A8802C4234269FD16364048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 18C8
Signing time: Sat 18 Apr 2026 00:00:41 +0000
Manifest this update: Sat 18 Apr 2026 00:00:41 +0000
Manifest next update: Sun 19 Apr 2026 00:00:41 +0000
Files and hashes: 1: 2u4DW90i6pJn6TNxJSQdCJPO9PA.roa (hash: z+7kYSl922ZGHRd4ve+viSStXQUCmw3QVQ5Lgiw6cXk=)
2: 7YQffxRE0rSLQxPURshHecG_JTc.roa (hash: uQCBTYo2a3hrZABdDnP1fnClvfQjBgoT9LYi5KTntlk=)
3: AsS6Pm-pzCccfpBN7h6vWbKNH-0.roa (hash: QSEqtIt5+vLOlNNT3jvuTFm3bvcUsPaUnJycOPB71zs=)
4: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: XaVNOSZFitNXuHsoxyLpYkifMXEZIZQfKltGmVFh770=)
5: tgt22Xbh2dYkc5Tjjf4Gx-Xa2eY.roa (hash: XvxWV+DKU6Gtey3JNABlz2pi2cGrZK+aZ7VTSpuGXSw=)
6: vM268rav9B38xfaLn_yfc-f5loY.roa (hash: L3My8FF3Oma4omxz1SHFdJJ/WgvkO4FPZLAe6cqle1I=)
7: wsHpLkBYw1EeftdDR6sp04VigBw.roa (hash: /kY3oNdD/MtjNpfjYxiTgX3Hn7hLZLYXv3Sx0dMMAnA=)
8: zOqpyrA-mf4nkA9uzKu6WERUh9M.roa (hash: YZ3w9TWP7euxVmL2Kl9d48zmDrmJVrnCAiOTTTRIhhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e3:bd:c7:9a:88:02:c4:23:42:69:fd:16:36:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Apr 18 00:00:41 2026 GMT
Not After : Apr 19 00:00:41 2026 GMT
Subject: CN=419a6c27e02f3698125c9231520d524bc1adb311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:f2:84:b7:fb:84:e8:73:ad:1d:13:53:5f:
d0:1f:c7:61:8d:50:39:a7:79:3d:58:43:fd:ec:51:
6a:f8:7f:58:62:12:b2:20:e6:b9:ae:1c:82:8d:40:
27:b1:91:16:16:08:4e:9c:a7:00:bb:0e:07:fb:91:
73:33:8f:21:11:4a:e2:38:15:70:5f:a9:d7:25:9a:
d9:f0:f8:c9:97:3e:43:c1:2f:b9:05:55:b1:ff:c6:
65:cf:eb:ac:f5:37:50:f6:2e:fe:61:a2:ad:a5:0f:
b2:b8:20:fe:59:51:42:71:e9:9a:01:e6:7f:90:4e:
93:ab:5c:dd:6b:c1:0d:93:c7:bd:66:39:61:75:b6:
6f:22:65:68:2d:c3:a0:c7:af:fb:f8:c4:3f:e0:db:
4e:1d:30:cc:bb:2e:74:ab:18:b7:99:1a:7a:a1:68:
34:2a:2a:69:06:5f:04:53:4c:46:18:47:cd:cb:b5:
64:6b:69:55:0c:71:4d:b7:66:a5:e1:95:cc:e9:e3:
c2:96:36:c1:03:72:94:25:5b:15:9f:0e:11:40:7d:
0e:2e:ce:ee:13:56:6f:4e:10:dd:dc:79:ed:75:5d:
8f:bc:97:fd:e0:60:51:a6:bf:2e:cf:c4:d6:34:d6:
37:81:c1:89:c7:94:fd:b3:a1:f2:dc:1c:9f:29:34:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:6C:27:E0:2F:36:98:12:5C:92:31:52:0D:52:4B:C1:AD:B3:11
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1a:7d:c3:d6:53:b0:d7:17:82:db:23:ce:6d:14:30:64:ec:
44:f5:17:bf:6e:25:8b:b3:3b:7b:1a:03:57:71:66:f1:44:30:
d6:e7:2c:c5:39:dd:3a:18:8a:ef:62:6c:7b:52:78:20:47:0b:
b6:34:39:47:17:b5:e0:fd:6d:43:eb:a8:54:cf:b4:31:dd:2f:
12:23:9d:43:07:d6:59:35:b6:91:c6:d1:93:7e:e1:b2:9e:8b:
61:b6:94:3c:c1:96:5e:88:64:bf:87:5b:ab:77:33:13:cd:9b:
95:5d:d9:ea:81:c8:5e:f2:80:b0:4f:6a:87:23:5a:42:c5:7f:
7c:96:3e:0a:4a:15:85:93:b7:62:27:16:4f:9b:4f:a7:63:0c:
f4:08:6a:0d:8e:3d:6c:55:d2:da:3d:3d:2e:82:f7:d7:9f:ac:
da:b2:d9:2d:3e:5d:42:58:79:30:7c:59:1e:52:6d:cd:d7:c4:
fd:da:58:fb:38:aa:54:95:06:34:c3:c1:d5:7b:86:11:8a:a9:
70:55:99:aa:8b:1b:44:b8:20:25:2b:2b:2d:ea:ec:90:df:02:
e2:66:26:3a:29:f3:19:cc:32:88:e5:6e:f4:21:e4:8a:f5:ee:
da:d5:e6:af:f9:f6:a3:fd:04:a5:0a:61:51:c3:09:cb:4f:85:
b9:e5:83:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2d473HmogCxCNCaf0WNkBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjYwNDE4MDAwMDQxWhcNMjYwNDE5MDAwMDQxWjAzMTEwLwYDVQQD
Eyg0MTlhNmMyN2UwMmYzNjk4MTI1YzkyMzE1MjBkNTI0YmMxYWRiMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07TyhLf7hOhzrR0TU1/QH8dhjVA5
p3k9WEP97FFq+H9YYhKyIOa5rhyCjUAnsZEWFghOnKcAuw4H+5FzM48hEUriOBVw
X6nXJZrZ8PjJlz5DwS+5BVWx/8Zlz+us9TdQ9i7+YaKtpQ+yuCD+WVFCcemaAeZ/
kE6Tq1zda8ENk8e9ZjlhdbZvImVoLcOgx6/7+MQ/4NtOHTDMuy50qxi3mRp6oWg0
KippBl8EU0xGGEfNy7Vka2lVDHFNt2al4ZXM6ePCljbBA3KUJVsVnw4RQH0OLs7u
E1ZvThDd3HntdV2PvJf94GBRpr8uz8TWNNY3gcGJx5T9s6Hy3ByfKTTdnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGabCfgLzaYElySMVINUkvBrbMRMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhp9w9ZT
sNcXgtsjzm0UMGTsRPUXv24li7M7exoDV3Fm8UQw1ucsxTndOhiK72Jse1J4IEcL
tjQ5Rxe14P1tQ+uoVM+0Md0vEiOdQwfWWTW2kcbRk37hsp6LYbaUPMGWXohkv4db
q3czE82blV3Z6oHIXvKAsE9qhyNaQsV/fJY+CkoVhZO3YicWT5tPp2MM9AhqDY49
bFXS2j09LoL315+s2rLZLT5dQlh5MHxZHlJtzdfE/dpY+ziqVJUGNMPB1XuGEYqp
cFWZqosbRLggJSsrLerskN8C4mYmOinzGcwyiOVu9CHkivXu2tXmr/n2o/0EpQph
UcMJy0+FueWDhg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:48:56 2026 by rpki-client