Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: LRdcd6MqHzzEc5Uor/MZJ3wty+TIfFGEcaI2yvCuKz8=
Subject key identifier: 9B:F7:3F:AE:A7:88:94:23:95:DE:57:F4:D2:1A:FD:F8:8D:D1:20:90
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019D99999DE420F916F8FC11FFB4DC5D928D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 04:01:14 +0000
Manifest this update: Fri 17 Apr 2026 04:01:14 +0000
Manifest next update: Sat 18 Apr 2026 04:01:14 +0000
Files and hashes: 1: 1-99tj9n-LWYw_lI6J2ZtTlYMtsw.roa (hash: Ptwrv4fZgKC6RoxF9JtUijELaGYTN5wfnCikQVHX0jc=)
2: Vbu4WFHtQs8CWjvDwWDBgOfuqwQ.roa (hash: N29scv8xguie+t9aPoJpoSulc1+RZLFrY9t5xm5Se4E=)
3: WHqH2EhDK6xxFIiXyNlsjw-yMMg.roa (hash: boc+B5V0r/3xbux19AoHg18zg6QdefO3+vjSL8b5Cv8=)
4: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: nhju1MLkRy7E9l4TtX5Zw0qFGJKtKSWcsgZYy/T0Ar4=)
5: wsaxcP_FSlrJyUqyv6RnWe5M_1k.roa (hash: 7BcGsYEeMK3lgIGyfCupRWnQz43ULZB5dbROxwaq/V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9d:e4:20:f9:16:f8:fc:11:ff:b4:dc:5d:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Apr 17 04:01:14 2026 GMT
Not After : Apr 18 04:01:14 2026 GMT
Subject: CN=9bf73faea788942395de57f4d21afdf88dd12090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:9e:4b:bd:8c:b5:6f:26:f7:60:b4:57:5c:
0f:83:2a:6b:f8:92:44:9a:93:0b:23:4a:2c:7e:18:
03:fc:63:66:7c:76:d6:b4:a6:95:7d:b4:57:37:11:
95:7a:c4:5b:f2:b4:d1:ce:2b:02:98:2e:6c:d3:80:
73:c4:f7:87:d4:71:01:39:8f:20:ad:8c:ae:03:a9:
13:78:cf:9d:e3:3a:d2:e0:85:6a:4b:07:98:b9:86:
ba:ee:77:c1:c4:73:b6:10:89:bc:ad:77:b3:48:cf:
91:4e:d0:54:4a:bc:08:29:0f:9e:e4:7f:78:59:ed:
a4:ee:23:23:b5:75:e7:dd:15:a5:c6:bf:a3:85:3e:
4c:9e:a8:cb:1e:3b:14:96:b5:38:12:9b:8c:49:c9:
78:bb:59:69:47:f3:14:a6:14:d7:17:41:5b:9b:6d:
bd:98:b8:29:4d:b9:7d:a1:f6:6f:86:cd:dd:6f:24:
bb:31:87:be:2e:fe:f5:ba:59:fa:83:30:41:8d:ed:
89:e1:67:03:8e:91:57:4f:46:68:e0:ba:16:dc:1a:
dd:38:56:81:4a:05:60:d9:f4:d0:4b:44:ed:27:57:
5b:67:0c:4f:8c:1c:e7:9b:d7:09:f3:70:c4:7f:00:
50:cb:c2:22:8e:b1:e2:0a:70:48:e9:b7:e5:eb:67:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:3F:AE:A7:88:94:23:95:DE:57:F4:D2:1A:FD:F8:8D:D1:20:90
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9f:26:17:cc:d2:70:a1:73:dc:dd:0c:a4:6c:88:87:49:84:
70:49:c4:db:54:7f:84:43:53:f5:9d:58:44:a9:1f:eb:ac:a9:
42:eb:f5:7f:f2:1b:23:b8:22:6c:56:c8:cc:88:4c:e4:97:02:
a3:b9:e6:5b:42:59:b0:eb:f9:bf:6b:e2:13:55:0e:14:3c:45:
ed:cf:65:1b:67:da:ef:5f:e9:29:64:3f:59:93:d6:6f:c1:60:
3c:96:e2:ed:e2:3e:b3:f7:dc:e5:eb:a9:18:bc:92:b8:99:db:
8b:3a:26:5c:6d:7c:91:5a:7a:4a:ae:8e:fd:29:ec:5b:20:ad:
3e:b8:4f:f4:56:88:8a:34:08:af:7c:0b:83:40:7c:82:db:9b:
70:e0:e2:a8:0b:3f:b1:fd:f8:ae:dd:97:d9:82:13:58:5f:d6:
9a:ae:b2:f6:04:fb:be:f9:97:af:78:99:47:e9:92:90:3f:27:
68:9a:e1:08:cb:08:09:15:39:a7:5f:5a:af:c1:56:02:b9:4f:
03:f4:28:5c:d8:b6:99:55:af:90:0c:88:05:3c:d6:cf:0e:ab:
bf:88:53:75:11:c8:ba:29:40:07:d3:65:f1:8d:84:5c:99:e8:
bb:71:7f:58:87:ae:16:3f:6a:00:35:2e:12:51:a3:4c:6d:40:
87:85:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:58 2026 by rpki-client