Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: N8MzQ4zwyDP4kKtygxvFEoSKe2+YXZJGbuaNunvEqdg=
Subject key identifier: AC:98:29:43:32:A0:6E:DE:D9:A5:B7:F9:55:63:B8:F2:EF:22:FD:3F
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019DA378BC63413147DF939BE2F6FBEA8A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 02:01:31 +0000
Manifest this update: Sun 19 Apr 2026 02:01:31 +0000
Manifest next update: Mon 20 Apr 2026 02:01:31 +0000
Files and hashes: 1: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
2: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: tpcn9WNjMiBCA5mOFZTqoD6Sx24AnVhp3kprP/meIVI=)
3: qGguuT9Ru0OfORRSKp-reBQ-KRE.roa (hash: OTU77wowFQko6pFhiDvLMQKWLsSMn8KIv1XwXHLkEb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:bc:63:41:31:47:df:93:9b:e2:f6:fb:ea:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Apr 19 02:01:31 2026 GMT
Not After : Apr 20 02:01:31 2026 GMT
Subject: CN=ac98294332a06eded9a5b7f95563b8f2ef22fd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:80:2d:6b:52:f7:fb:fb:f2:6a:c1:b1:35:
98:83:6f:68:e8:9b:2c:51:53:ca:22:bb:0d:7a:81:
eb:55:e6:e0:d0:33:ce:b0:b1:7d:59:b9:50:1e:09:
da:95:0b:12:4a:99:a6:12:ce:23:35:f3:81:36:c6:
71:cc:0e:b4:f7:63:3a:9e:27:11:92:ba:f4:9b:d0:
c3:b2:b5:0a:f5:d7:39:05:1b:60:9f:b4:53:37:67:
2d:af:3e:dd:2c:65:70:c6:c6:f5:50:a1:71:98:2c:
ed:99:01:c7:19:f2:b7:d7:17:03:3f:18:cc:5c:19:
1e:a5:b7:02:c7:c1:7c:4c:96:15:12:40:41:bf:78:
08:5d:39:c3:c6:94:4a:3b:37:9c:f6:89:90:ab:ed:
00:ff:ec:04:72:15:87:01:82:f1:15:f7:7d:fc:75:
5f:53:09:27:9c:1b:b7:97:60:29:aa:c5:e7:b7:d1:
c5:29:51:94:64:20:43:e0:89:39:fc:28:06:02:df:
08:09:94:d6:ca:0a:e9:ff:45:eb:ff:db:f3:cc:17:
99:24:90:0c:3e:8f:65:27:5e:97:ec:d6:6b:93:15:
b2:6a:9f:a0:06:f9:a2:cb:45:55:45:1f:38:e1:3f:
47:c9:98:ca:61:f1:9a:60:9a:cd:9f:86:bb:c4:97:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:29:43:32:A0:6E:DE:D9:A5:B7:F9:55:63:B8:F2:EF:22:FD:3F
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:98:a1:45:38:6a:b2:21:1a:9d:01:c6:73:34:fa:bf:14:61:
13:78:2a:66:ba:36:4e:72:2d:1a:d6:8b:67:11:72:3f:1d:14:
81:92:ce:e4:2a:82:73:b3:8b:5f:02:1d:fb:bd:c2:3f:2d:71:
5b:78:f0:96:0d:37:44:ab:1d:be:38:29:36:a7:ad:f9:06:35:
32:c3:74:9f:b7:63:e9:08:ef:87:fc:be:fa:c9:8c:91:71:0b:
ff:2d:92:b9:89:fb:94:44:d8:25:91:bf:d5:d0:fb:05:e9:08:
c9:34:51:95:85:6a:83:77:c5:ec:92:bc:52:b4:0f:6e:17:50:
8f:1e:de:ad:16:a2:72:5d:3e:b1:f4:03:b8:5d:41:d4:85:c5:
69:22:7b:e8:8a:ef:4e:e9:2a:cc:27:a9:4d:89:8b:d2:83:f7:
0b:5c:2a:68:91:12:7a:8a:94:94:80:a1:9f:d7:6a:ac:45:81:
85:f3:4a:20:33:c5:17:b5:ab:f7:a8:7b:82:21:62:19:cc:78:
03:5f:6c:c8:bd:03:ad:e8:ee:ee:2c:26:10:80:af:73:c7:a9:
dc:04:2e:70:8e:35:e0:70:8e:91:92:32:ba:6c:c1:d7:ac:a0:
e0:b2:bd:07:a3:40:21:93:4f:de:77:a7:40:7a:42:c8:1f:2e:
73:b5:af:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeLxjQTFH35Ob4vb76oo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3
YmYyMzIwHhcNMjYwNDE5MDIwMTMxWhcNMjYwNDIwMDIwMTMxWjAzMTEwLwYDVQQD
EyhhYzk4Mjk0MzMyYTA2ZWRlZDlhNWI3Zjk1NTYzYjhmMmVmMjJmZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRuALWtS9/v78mrBsTWYg29o6Jss
UVPKIrsNeoHrVebg0DPOsLF9WblQHgnalQsSSpmmEs4jNfOBNsZxzA6092M6nicR
krr0m9DDsrUK9dc5BRtgn7RTN2ctrz7dLGVwxsb1UKFxmCztmQHHGfK31xcDPxjM
XBkepbcCx8F8TJYVEkBBv3gIXTnDxpRKOzec9omQq+0A/+wEchWHAYLxFfd9/HVf
UwknnBu3l2ApqsXnt9HFKVGUZCBD4Ik5/CgGAt8ICZTWygrp/0Xr/9vzzBeZJJAM
Po9lJ16X7NZrkxWyap+gBvmiy0VVRR844T9HyZjKYfGaYJrNn4a7xJctHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyYKUMyoG7e2aW3+VVjuPLvIv0/MB8GA1UdIwQY
MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct
N2YyMDEyMTJkODgzLzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz
LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5ihRThq
siEanQHGczT6vxRhE3gqZro2TnItGtaLZxFyPx0UgZLO5CqCc7OLXwId+73CPy1x
W3jwlg03RKsdvjgpNqet+QY1MsN0n7dj6Qjvh/y++smMkXEL/y2SuYn7lETYJZG/
1dD7BekIyTRRlYVqg3fF7JK8UrQPbhdQjx7erRaicl0+sfQDuF1B1IXFaSJ76Irv
TukqzCepTYmL0oP3C1wqaJESeoqUlIChn9dqrEWBhfNKIDPFF7Wr96h7giFiGcx4
A19syL0Dreju7iwmEICvc8ep3AQucI414HCOkZIyumzB16yg4LK9B6NAIZNP3nen
QHpCyB8uc7WvyA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:20 2026 by rpki-client