Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
File: jL10xtEdY8pd48xjfOln7pdgTGc.mft (raw, json)
Hash identifier: F3cQUD01XwGxOKuatJLoeozPVd7HxM4lD109twKEsgg=
Subject key identifier: 07:34:97:72:A8:C9:34:45:3F:60:5A:BA:73:50:A3:88:DB:84:D1:DB
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 019D9886D466EB5E00C17A34106CF317ED84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
Manifest number: 1020
Signing time: Thu 16 Apr 2026 23:01:06 +0000
Manifest this update: Thu 16 Apr 2026 23:01:06 +0000
Manifest next update: Fri 17 Apr 2026 23:01:06 +0000
Files and hashes: 1: Dt5_b8gj7Nh0cKup1MA1WzFZq40.roa (hash: gLzddFQSRg/+84Z04UYrdta+47qpL6E3gmNgoeRKLvI=)
2: jL10xtEdY8pd48xjfOln7pdgTGc.crl (hash: /MjObqe5gTN6gN5+ZcrnxgXjSF2inP9DKrpAewnxRVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:d4:66:eb:5e:00:c1:7a:34:10:6c:f3:17:ed:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Apr 16 23:01:06 2026 GMT
Not After : Apr 17 23:01:06 2026 GMT
Subject: CN=07349772a8c934453f605aba7350a388db84d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:3f:cf:99:51:8f:2f:00:2f:fc:64:ab:9b:
50:13:da:44:99:6e:b9:09:f4:27:39:ed:bb:5e:15:
4d:c2:90:1a:f0:e9:8f:f0:5f:55:d0:a6:5f:61:87:
17:0a:99:80:5f:0e:80:57:6d:54:c4:56:11:91:9e:
87:e2:3a:b6:e5:41:a6:0b:36:7c:c4:33:bd:e6:04:
24:78:26:50:a9:bf:2c:4a:43:49:00:9e:9d:4c:87:
6a:08:e5:8e:12:55:8a:70:49:08:fb:66:e2:c9:63:
14:9e:43:87:75:49:c5:00:9d:79:9b:e9:16:bd:bb:
90:e3:16:a8:ce:b2:43:37:b2:f8:ee:8d:37:7a:b0:
c1:be:af:08:44:99:e7:ab:86:d6:85:47:80:20:99:
59:13:af:aa:a7:a1:6b:47:96:66:5c:6a:39:13:3a:
88:f2:c0:33:2a:d9:c2:0e:6d:04:4c:86:24:de:86:
5f:f4:80:28:99:df:09:db:c3:f1:5e:62:82:a6:0a:
f8:12:f9:be:a8:86:09:21:55:a2:ab:f5:84:1b:a4:
aa:5b:89:b7:20:dd:2e:c0:bd:3c:8f:77:39:7c:17:
47:38:fd:e8:19:cc:e2:f8:77:72:b9:63:69:c7:e6:
b8:ad:e4:6e:2a:7d:e8:0b:f1:2b:aa:0f:80:8f:25:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:97:72:A8:C9:34:45:3F:60:5A:BA:73:50:A3:88:DB:84:D1:DB
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:73:03:4f:0c:af:a6:31:4e:79:ca:3d:df:2a:bb:eb:79:98:
57:65:86:0f:34:a5:d6:c7:51:5d:dc:a8:56:49:f6:d7:b3:69:
8d:8a:32:4c:ab:fc:16:4c:2a:44:dc:74:de:a8:ad:85:61:4f:
c3:3c:8b:fe:9b:91:eb:71:37:24:09:35:22:d6:87:bf:1f:cd:
b3:14:fd:0c:8e:35:24:91:5e:cc:a8:ad:ee:4e:c9:61:a6:14:
36:5c:a2:bb:9c:c2:8e:7f:ab:df:25:5d:8c:fb:3d:13:8a:49:
8c:fc:97:e7:92:ed:ef:c1:7c:d4:c3:24:92:0c:3e:e0:8c:4f:
d9:f2:ca:45:b0:12:9f:57:eb:ea:31:26:dc:99:60:eb:be:e2:
02:e7:cf:8a:2e:6f:71:e1:c9:23:09:59:cc:58:9b:cd:05:55:
c0:0c:da:29:87:76:86:b8:7f:6f:25:87:89:a1:22:40:84:45:
ec:ff:ce:14:5d:48:5e:b1:06:3e:7b:1e:df:47:0e:c4:70:03:
84:96:6b:10:d1:bb:43:fd:eb:23:8c:99:93:5e:c9:63:72:04:
75:ea:65:73:0e:18:fa:0b:ce:7e:2b:cd:73:62:43:ae:0c:49:
7d:cc:89:cb:42:52:1d:9a:a7:dc:be:78:5d:ba:a0:cf:95:9e:
7f:d8:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:37:06 2026 by rpki-client