Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier: QIvSOhFrUtyRZ3GKu36SkDgsnDruMekN9r42UoIPaSg=
Subject key identifier: 1A:5F:C7:2D:6D:3E:03:C4:81:67:E2:41:63:AB:09:55:C4:26:C4:C0
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 019D9AAB8CE378064A45A1DCA538BBA8F707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number: 15E3
Signing time: Fri 17 Apr 2026 09:00:27 +0000
Manifest this update: Fri 17 Apr 2026 09:00:27 +0000
Manifest next update: Sat 18 Apr 2026 09:00:27 +0000
Files and hashes: 1: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: 4a7XUEoqrUuUs2xtdl/x/bxTzK+zOQlggSXQMTv7/yw=)
2: n2cwiplK4QxCrTwGBHLplO2ULeU.roa (hash: 7aeKHzASb9QXAHN2dhVECcGoHU8aQKfp4EYYcWeuYiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8c:e3:78:06:4a:45:a1:dc:a5:38:bb:a8:f7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Apr 17 09:00:27 2026 GMT
Not After : Apr 18 09:00:27 2026 GMT
Subject: CN=1a5fc72d6d3e03c48167e24163ab0955c426c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:4f:13:60:db:ec:64:e8:92:3f:b0:11:45:
1b:8a:d4:fb:67:33:83:34:d4:b9:78:e3:88:80:71:
a3:d7:be:37:48:ef:88:37:32:b8:a8:cc:79:c9:9f:
6a:17:88:c4:27:0b:6e:0a:ae:34:a2:80:07:95:06:
62:a2:c0:db:c2:eb:f0:a2:ac:4e:73:94:5c:c6:2b:
d9:81:1f:ab:99:57:e4:25:34:08:4f:16:9e:46:e3:
c9:a2:ba:bd:af:54:30:2e:7b:6d:ca:13:ae:45:13:
de:06:0b:6c:9a:00:b6:da:e9:50:3f:cc:ce:72:1c:
ad:d9:0e:56:17:02:a6:29:83:17:02:4c:2d:8c:58:
29:ff:85:ef:6b:5e:ba:da:54:1b:69:d6:ff:1b:45:
28:b2:38:8e:8b:83:61:97:c9:08:08:03:20:3d:8d:
23:72:45:c9:e8:b1:b4:09:89:cd:83:1f:de:ca:d5:
1e:f7:73:f1:c3:53:81:51:d7:d1:c0:94:1a:a3:35:
cb:1c:e0:7d:0e:c8:24:3c:15:17:c4:5f:46:c5:8a:
66:b1:8d:74:ae:be:06:4b:34:40:1c:16:2d:c9:47:
a1:5c:ba:27:67:76:16:9a:85:d4:fc:9d:66:b6:51:
fe:aa:59:2a:1e:2c:4e:5a:7f:0f:fb:1c:35:d5:2c:
cf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:C7:2D:6D:3E:03:C4:81:67:E2:41:63:AB:09:55:C4:26:C4:C0
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:91:a6:f1:78:c4:b7:e8:72:dc:44:d8:c8:59:5a:72:ce:6d:
30:6b:1c:d3:35:ed:20:d5:33:2a:8b:0b:cf:01:22:40:d6:87:
e0:45:d1:ff:56:65:41:ac:6f:a4:2f:8e:28:c4:6e:1a:ab:51:
00:cf:2b:e7:4c:b2:0f:19:69:a3:cb:66:eb:f6:4c:4b:a5:13:
75:dd:cf:9f:76:42:ce:b1:8c:af:cf:ba:ee:b1:f0:a1:de:d8:
fd:57:7b:9b:d0:0e:ea:e0:21:80:34:c3:e3:00:ea:dd:f9:b8:
06:96:c0:15:7e:83:7e:94:fd:04:e8:c5:f8:61:6f:91:1b:31:
32:fd:d3:e1:93:c7:bc:81:7b:6d:c8:9c:a3:a6:07:6a:61:88:
68:46:a4:4b:af:de:87:53:99:e1:e1:4a:f8:89:67:4c:f7:42:
c0:6f:de:7a:94:88:74:21:07:fc:52:71:15:72:75:64:2b:d3:
45:f1:01:52:a4:9d:1b:36:1b:18:c0:38:b8:9e:26:72:dc:5b:
c2:c8:27:a9:a3:86:08:e4:95:ad:c6:84:91:82:2a:59:28:fe:
96:f8:82:81:83:66:5f:a8:a6:63:2a:40:be:d7:94:aa:71:ef:
12:fe:7b:b8:35:46:cb:06:4a:ed:61:58:a7:ac:8b:34:86:fd:
5e:58:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:07:16 2026 by rpki-client