Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: PBzspg8xFYeIXPIOkYMSC3t0Wpt5Tc8bMOSbQCTR9aE=
Subject key identifier: B9:54:36:55:82:EB:6F:6B:0E:CE:04:32:5B:54:A6:C5:58:CC:7E:A4
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019D973D314D5669E5252C3E6A55659046D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 17E8
Signing time: Thu 16 Apr 2026 17:01:03 +0000
Manifest this update: Thu 16 Apr 2026 17:01:03 +0000
Manifest next update: Fri 17 Apr 2026 17:01:03 +0000
Files and hashes: 1: 5SPOOAFTV5wB0v8bOqbqxdbSbOQ.roa (hash: mgFPEV4LAu92g1S2eIdHABLNocI2JnL7lnfnPbZr274=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: ofhY1zj+BY7Mh7/cq7lxT64kQGy5neZOkPf/v0+bDkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3d:31:4d:56:69:e5:25:2c:3e:6a:55:65:90:46:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Apr 16 17:01:03 2026 GMT
Not After : Apr 17 17:01:03 2026 GMT
Subject: CN=b954365582eb6f6b0ece04325b54a6c558cc7ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:61:25:83:85:d0:86:0f:8a:81:0f:d6:ae:
ad:de:b9:73:7e:9a:05:6a:ad:b1:98:43:b7:de:b4:
ce:49:45:84:18:96:da:2b:59:a8:14:68:37:b8:ea:
cf:b1:00:ce:ff:7b:37:89:bd:21:68:17:42:81:91:
f0:00:a7:2a:61:6d:d6:5f:fb:22:93:d2:ac:63:db:
bd:b3:82:8b:b8:bd:ce:a7:f5:6b:0a:40:f1:fb:c0:
36:32:6d:09:31:ea:40:c7:87:1c:fa:a8:0c:a1:26:
58:2f:e5:bf:b5:09:6b:8d:92:cd:56:b4:75:55:91:
ef:2c:d6:c8:85:57:a7:cd:e8:2d:d8:5f:40:de:cc:
cb:95:28:6b:ca:62:91:9e:4b:46:4b:56:40:ed:ef:
be:64:9d:7e:0e:5a:1d:e7:c8:7b:45:c0:4e:b0:a9:
7f:7d:0d:d1:b4:ed:91:10:86:76:a0:2f:5d:fa:5a:
f0:e0:f0:1d:c5:0b:30:fe:98:d5:6b:10:67:97:aa:
42:ef:20:a0:1f:e0:32:6b:7f:89:30:90:66:5d:a6:
5d:9c:63:b0:1f:4b:0a:35:79:2a:eb:0d:5e:cf:68:
5c:6a:41:06:35:60:32:95:ea:d2:18:6a:cb:ba:d8:
0d:d8:64:37:de:69:62:47:bb:09:75:e5:ac:66:fa:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:36:55:82:EB:6F:6B:0E:CE:04:32:5B:54:A6:C5:58:CC:7E:A4
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:59:94:93:46:6b:26:62:c1:35:82:77:05:d5:79:d7:65:
31:bf:51:f3:6d:4f:3b:d6:13:44:40:8b:b2:05:ba:b2:f3:b0:
08:8f:0c:b5:7f:c8:5e:0e:f7:2f:db:13:58:a7:c4:48:a8:5a:
9b:61:84:eb:01:c0:eb:17:b1:4f:18:89:62:4b:ac:c9:d8:19:
6f:0c:f3:15:92:3e:72:ef:01:ec:5c:f5:9e:99:d0:e7:e2:79:
f5:6c:fe:1b:99:83:4a:0b:75:f5:fa:fb:78:0e:67:75:f2:b2:
3c:a6:f9:4d:d9:a5:6b:1c:13:f4:6d:7a:ea:f5:1d:83:54:e7:
ec:53:62:6d:ab:ba:80:e4:84:1a:60:d7:76:79:0b:f4:e5:08:
ed:0f:44:cd:01:7a:73:8c:3b:2b:ae:aa:ef:c7:55:81:e9:24:
56:cf:27:b7:20:86:2c:a2:52:98:d8:17:e3:9f:2b:37:4f:d2:
3d:a2:42:82:93:32:64:af:31:ec:e8:b5:52:d9:54:23:2e:9c:
c7:f3:8f:19:95:cc:57:c2:bf:22:d4:a3:88:e9:92:d5:24:0a:
4e:da:2d:19:2f:16:55:e2:94:8b:54:be:00:b3:2c:90:4e:74:
f0:ec:01:fa:24:0c:84:c4:da:5d:26:1c:f4:fd:52:98:03:5c:
8c:44:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:26 2026 by rpki-client