Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: bL3zWdMM2vxHaEQ09bht/KBrtqkE5j3660/g4jcoAoA=
Subject key identifier: 0D:C1:A0:23:70:49:9F:78:6F:14:B1:B6:E9:60:EF:04:E8:2A:4A:30
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 019DA48AB5DCA06EBD6C2BD76C361C1A8145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 18C2
Signing time: Sun 19 Apr 2026 07:00:47 +0000
Manifest this update: Sun 19 Apr 2026 07:00:47 +0000
Manifest next update: Mon 20 Apr 2026 07:00:47 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: c1VnnJLeIgiSjI3qrJ1rXakvaIEoooqk9UItXRyvAjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:b5:dc:a0:6e:bd:6c:2b:d7:6c:36:1c:1a:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Apr 19 07:00:47 2026 GMT
Not After : Apr 20 07:00:47 2026 GMT
Subject: CN=0dc1a02370499f786f14b1b6e960ef04e82a4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:f7:77:51:a8:cc:c6:db:e9:c1:05:cb:a1:
97:ff:ec:7c:8c:b9:d0:ca:8b:a4:b9:3b:c0:b4:5e:
a6:32:c3:87:c1:9a:45:4a:85:ae:b1:13:d8:17:f2:
2d:f9:16:9e:92:07:a3:46:20:b2:c2:db:a8:a7:e7:
07:28:93:9b:71:c4:e1:79:0a:c1:a0:f7:5a:57:69:
21:7e:12:fd:52:f3:39:86:fb:97:2e:1d:19:5a:9f:
64:18:52:cb:25:5c:53:2d:f6:d2:a6:99:0d:85:e8:
1d:be:f4:e1:53:4a:ac:2a:d8:20:3a:40:96:22:04:
37:8a:06:8d:21:24:7d:f0:d6:de:a1:3a:89:9a:c3:
ba:86:ae:ce:b4:df:cd:97:5f:ca:f7:d1:15:21:60:
eb:45:b4:de:51:7c:a9:0e:20:3e:e4:84:f8:ba:9a:
0c:77:f4:3c:b0:a2:43:2e:04:23:57:9e:90:07:85:
42:48:b9:99:45:16:59:61:7c:16:42:2f:96:d4:a5:
d8:c8:d6:44:55:a3:a2:ec:6a:5f:ff:27:d6:2b:29:
8c:89:f7:81:14:98:85:80:8b:78:99:fa:ed:40:43:
9e:fc:63:70:f1:dd:e6:81:cd:70:53:ab:5f:e6:2b:
aa:c4:1b:0e:26:37:7e:2c:b3:11:19:5b:de:a0:01:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:A0:23:70:49:9F:78:6F:14:B1:B6:E9:60:EF:04:E8:2A:4A:30
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:35:52:c3:ec:f2:95:ef:d6:70:18:dd:84:32:06:f8:90:e0:
5d:58:5d:35:d3:4d:47:2a:f4:18:ed:c0:36:b6:a5:c3:f4:13:
18:41:bb:a0:bb:8c:58:bb:ca:73:b9:df:ab:32:f9:d2:8a:f3:
1c:b7:78:e8:f2:35:eb:cf:8c:f4:80:ee:b6:bc:b6:52:ae:dc:
0a:0c:16:c1:e2:33:3f:88:53:e2:35:94:45:97:03:86:c9:c8:
51:41:87:e2:21:41:b9:cb:a8:9f:af:70:ec:ea:a2:c0:2d:72:
86:0e:83:ac:cb:0d:21:09:4e:f2:43:ea:69:bb:08:6c:b8:d1:
dd:de:65:9d:76:33:40:06:e4:33:79:6a:79:44:18:ea:cc:d6:
d9:95:81:23:ec:c0:26:c8:e9:2f:52:b0:9b:f2:f5:dd:f7:ed:
82:14:19:d6:25:0e:f3:2c:f7:96:09:aa:66:49:75:66:11:6b:
a4:ca:90:25:7a:53:67:53:06:15:b6:fc:79:af:fc:46:ac:4c:
91:ca:63:29:02:71:72:73:2f:f0:86:c0:0c:23:33:9a:c8:2f:
e1:e1:df:b0:10:47:b2:93:df:c6:8e:d7:24:b9:84:f5:74:fc:
e2:90:0a:9f:e2:32:49:ab:27:7a:66:be:8e:5c:89:85:c6:14:
ef:0a:49:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kirXcoG69bCvXbDYcGoFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMTRmMTc2MTFjZWI0MTMxODRhZGM5YzE5YWVmNTA4YTg0
OWI5YjIwHhcNMjYwNDE5MDcwMDQ3WhcNMjYwNDIwMDcwMDQ3WjAzMTEwLwYDVQQD
EygwZGMxYTAyMzcwNDk5Zjc4NmYxNGIxYjZlOTYwZWYwNGU4MmE0YTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20/3d1GozMbb6cEFy6GX/+x8jLnQ
youkuTvAtF6mMsOHwZpFSoWusRPYF/It+RaekgejRiCywtuop+cHKJObccTheQrB
oPdaV2khfhL9UvM5hvuXLh0ZWp9kGFLLJVxTLfbSppkNhegdvvThU0qsKtggOkCW
IgQ3igaNISR98NbeoTqJmsO6hq7OtN/Nl1/K99EVIWDrRbTeUXypDiA+5IT4upoM
d/Q8sKJDLgQjV56QB4VCSLmZRRZZYXwWQi+W1KXYyNZEVaOi7Gpf/yfWKymMifeB
FJiFgIt4mfrtQEOe/GNw8d3mgc1wU6tf5iuqxBsOJjd+LLMRGVveoAE9swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3BoCNwSZ94bxSxtulg7wToKkowMB8GA1UdIwQY
MBaAFI4U8XYRzrQTGErcnBmu9QioSbmyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS84MWQ1NmQtMWY1Mi00YTliLTk1OTEt
NzIwZmQzYTFlZWYzLzEvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS84MWQ1NmQtMWY1Mi00YTliLTk1OTEtNzIwZmQzYTFlZWYz
LzEvamhUeGRoSE90Qk1ZU3R5Y0dhNzFDS2hKdWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjVSw+zy
le/WcBjdhDIG+JDgXVhdNdNNRyr0GO3ANralw/QTGEG7oLuMWLvKc7nfqzL50orz
HLd46PI168+M9IDutry2Uq7cCgwWweIzP4hT4jWURZcDhsnIUUGH4iFBucuon69w
7OqiwC1yhg6DrMsNIQlO8kPqabsIbLjR3d5lnXYzQAbkM3lqeUQY6szW2ZWBI+zA
JsjpL1Kwm/L13fftghQZ1iUO8yz3lgmqZkl1ZhFrpMqQJXpTZ1MGFbb8ea/8RqxM
kcpjKQJxcnMv8IbADCMzmsgv4eHfsBBHspPfxo7XJLmE9XT84pAKn+IySasnema+
jlyJhcYU7wpJEA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:39:54 2026 by rpki-client