Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: xdpH3qeQ6oy5HMMprxNAg0wZ42wlF3VAhIU8R4iTmAk=
Subject key identifier: AD:E1:2F:BA:C1:FA:84:5F:3B:53:64:EF:ED:D9:4B:57:AA:C0:92:1C
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019D9A06D8DF23D58128A9CFA8F4DA1D535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: RtAzEtFofwFDRI1uklV1iXMa1wg.roa (hash: cRkKQUmXVsmTzq50TJwx3uR/gXhJ/74yYnMnrtZIm+M=)
2: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: k/RYvH5nZ2cfRWd5bCZ4LGwo78Ayl36Yg0ovvscXZsA=)
3: zVGoD_0Y0DHDLcKfmGJhAnYlgkE.roa (hash: 5YNYXEQ+H71UmBiAtmwj2k1bmJWUMWVXm7siQv17RzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d8:df:23:d5:81:28:a9:cf:a8:f4:da:1d:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=ade12fbac1fa845f3b5364efedd94b57aac0921c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:ce:17:19:be:fa:e1:54:d4:5f:34:f6:0e:
28:ad:f8:4b:5a:52:f3:cf:b5:46:66:75:59:8f:7a:
ab:bc:67:85:25:aa:e4:2a:59:25:46:4a:55:cf:5a:
80:ed:11:9c:2a:79:dd:21:05:f7:c6:a4:8e:24:87:
c3:04:e3:6b:d1:41:f2:45:fc:cb:63:5a:b6:44:90:
3a:5e:d6:6a:06:7f:13:04:f9:8d:e0:21:09:19:52:
42:15:94:78:cf:f9:ec:f7:9f:10:c3:07:d6:99:c7:
48:be:cf:71:9e:cd:8d:2e:57:52:a8:ad:b3:b8:d1:
15:07:2f:ef:6a:d6:ae:f1:11:30:b3:be:7d:2b:50:
e2:3f:a7:ef:b4:89:a5:9c:df:65:48:ac:93:60:17:
af:dd:c4:98:b8:dd:5b:de:eb:2f:e0:03:eb:94:b1:
0d:e1:fe:9d:69:b1:10:b8:c3:9b:81:11:ca:45:a6:
a9:73:e7:ed:43:7e:34:38:01:e7:21:e5:ed:56:1e:
bd:be:02:6a:7b:78:de:7e:c7:63:4d:9b:f0:3a:8c:
7a:b2:18:88:7d:f3:c1:c6:ea:a6:e6:0f:38:d0:71:
de:ef:aa:3e:b5:0e:b9:c7:c4:a2:36:5c:72:66:ee:
25:ac:c3:4f:27:98:be:d4:d3:fd:87:be:a0:b5:b0:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E1:2F:BA:C1:FA:84:5F:3B:53:64:EF:ED:D9:4B:57:AA:C0:92:1C
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:40:52:d8:9e:b1:56:19:d1:2f:a1:f8:0b:1f:1d:e2:bd:12:
2e:c5:dc:c0:f1:13:45:ef:4b:c8:38:41:f3:ae:5d:f5:c0:fc:
14:50:09:67:6c:27:b2:ae:af:01:e4:2f:d6:86:93:98:44:15:
f4:ff:1a:e0:e8:4c:2d:be:c1:31:2c:ab:da:7b:fd:e1:a2:3e:
62:87:a6:ea:b0:cc:a1:f1:cc:6d:2e:41:28:ff:8e:88:9f:93:
92:37:b6:5f:33:47:5e:ad:05:5f:4d:67:d1:82:94:17:8d:ab:
06:8b:51:3f:7d:fb:86:e6:8c:f6:62:b1:55:7a:92:ce:af:3e:
6a:dd:80:ae:ac:35:1d:e1:cc:bb:0e:4f:5b:a7:58:7e:6d:44:
b1:c1:88:8b:72:41:b5:58:66:6d:ca:92:3f:e0:17:d9:fa:5d:
eb:e4:b0:ba:fa:d4:46:e6:63:60:fb:e4:97:07:c1:27:98:04:
74:c2:80:a8:d5:09:b0:fb:35:10:b7:89:bd:e1:cf:bd:e7:64:
55:fe:fa:a8:f1:a8:6d:d8:e4:fd:00:e7:ad:b2:b3:ed:5f:22:
69:21:ef:b6:86:77:64:a7:a4:ab:22:31:5a:7a:6d:bd:5c:9b:
64:d1:c8:2e:ae:f3:3e:f6:18:3c:45:ff:e0:ca:2e:c2:03:47:
9e:5e:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:35:27 2026 by rpki-client