Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
File: jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft (raw, json)
Hash identifier: 1wUL+t4/0SBhbjVTLi7TMGv9AeuC9s6NwB9T8l5krdw=
Subject key identifier: 64:8D:67:7D:E5:2F:59:C9:1F:9D:3C:01:B7:E0:6A:93:31:F9:DD:1B
Authority key identifier: 8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
Certificate issuer: /CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Certificate serial: 019D9818A75E1374A97FA2E90974E37E325B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
Manifest number: 0FCF
Signing time: Thu 16 Apr 2026 21:00:45 +0000
Manifest this update: Thu 16 Apr 2026 21:00:45 +0000
Manifest next update: Fri 17 Apr 2026 21:00:45 +0000
Files and hashes: 1: WixuCuv6oK2h_hFTQCqiu7aJKaY.roa (hash: q9PZjoZVbTamxQQPVsYxw6N358GhwOGzbBLOqLT/7OQ=)
2: jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl (hash: IMIUpb/7miI44feVUecqbE/u4SLFnmWXcu3Oxw3WYkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a7:5e:13:74:a9:7f:a2:e9:09:74:e3:7e:32:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c810edc51abd61e69f3c69ee49d88e9896a6f09
Validity
Not Before: Apr 16 21:00:45 2026 GMT
Not After : Apr 17 21:00:45 2026 GMT
Subject: CN=648d677de52f59c91f9d3c01b7e06a9331f9dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:cc:05:a0:33:60:e6:e0:7f:43:38:06:0c:
88:56:46:fa:cf:20:5f:98:73:c7:a6:03:a6:cf:75:
e0:18:60:7e:f4:e7:7c:3b:11:da:c6:bc:a2:68:95:
d4:78:59:52:68:dd:db:9a:a9:8a:8e:89:87:e0:ac:
bf:68:3e:a5:f7:31:a0:d9:de:39:ee:3d:2f:b1:c6:
46:42:d3:3f:43:3b:89:07:07:13:e6:4e:f8:06:46:
58:46:24:be:b5:80:5c:2e:1d:b8:14:57:b9:4e:ed:
80:8f:4f:ef:ba:a5:7c:91:ff:e8:62:47:cd:29:37:
19:25:e8:0f:29:bf:98:57:5d:72:5e:77:08:4f:32:
98:01:f1:c3:f6:52:72:fb:ab:fb:8a:f7:8b:94:ac:
c8:0b:b4:01:6a:e9:c0:60:09:86:14:6a:e0:04:f4:
79:98:86:c1:47:d1:82:fb:9f:56:81:dd:de:cd:87:
05:dd:39:c6:4c:12:96:6e:fe:ad:b2:ca:b4:56:ac:
52:5c:75:9c:b4:57:25:26:2a:d3:81:55:79:86:1e:
9f:d2:1d:e0:ac:77:bd:11:32:6a:8a:c7:9f:ca:e9:
39:7a:03:09:7a:93:67:4e:0a:a9:c1:2c:3d:a2:78:
4b:58:21:60:60:16:2e:92:bd:31:a3:9a:75:63:7e:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:67:7D:E5:2F:59:C9:1F:9D:3C:01:B7:E0:6A:93:31:F9:DD:1B
X509v3 Authority Key Identifier:
keyid:8C:81:0E:DC:51:AB:D6:1E:69:F3:C6:9E:E4:9D:88:E9:89:6A:6F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIEO3FGr1h5p88ae5J2I6Ylqbwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/39254c-5286-4b84-b691-4014478bb6c8/1/jIEO3FGr1h5p88ae5J2I6Ylqbwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2d:a2:27:b9:4b:78:f8:98:79:58:0f:22:7f:9f:ae:ef:62:
a0:ed:d7:d5:b7:e7:21:3b:89:a7:22:f6:75:21:6a:5a:d9:a8:
88:4c:68:78:91:b1:80:fc:a6:e2:77:1e:54:19:5e:0e:9b:85:
48:a0:51:6b:69:69:74:bf:c9:ba:2b:c9:6a:64:9a:67:b0:47:
d7:54:23:f0:5f:23:33:94:35:88:b4:b6:1d:c7:0b:19:71:ae:
e6:1d:b0:5a:e8:6e:37:db:09:c3:80:e5:3c:04:29:a7:23:53:
9a:41:c7:7e:9b:f0:fc:ac:a9:1a:33:06:69:64:06:94:6c:26:
63:ba:cc:24:5d:f1:0b:18:64:97:52:67:0c:c6:a7:d2:e0:5b:
64:62:11:02:f5:c5:6d:dc:18:24:7e:b3:d8:84:0a:2f:6d:2b:
68:f8:05:64:36:2d:6f:37:0e:2c:44:cc:6d:c9:0e:7c:c5:59:
2b:b2:7c:28:af:25:90:22:03:91:41:98:74:01:59:8c:05:fe:
a7:1c:41:39:08:37:2d:f9:d5:77:3b:27:9c:0f:87:36:9e:34:
8e:6b:5f:e6:a0:9b:b8:6e:a2:e2:d1:1c:ee:eb:51:28:16:da:
d5:6b:55:ee:1f:3e:bd:14:cd:14:53:45:af:8d:02:8c:2d:e5:
d5:49:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:20 2026 by rpki-client