Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
File: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft (raw, json)
Hash identifier: G2aqbCc5l3dVjy9+o3GWhrsvJ1tDrcrHexD5C089ryw=
Subject key identifier: B8:5B:DB:B7:88:A3:6E:A9:F0:48:8E:D1:81:06:46:1A:5A:18:98:0D
Authority key identifier: 8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
Certificate issuer: /CN=8f9805f64801dd93599414a62509b12a5402f868
Certificate serial: 019D9A74F2091AB6176DACBFE44F58652035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
Manifest number: 0611
Signing time: Fri 17 Apr 2026 08:00:48 +0000
Manifest this update: Fri 17 Apr 2026 08:00:48 +0000
Manifest next update: Sat 18 Apr 2026 08:00:48 +0000
Files and hashes: 1: MTWvaT-KZib9yb4FWgpaDciaIa4.roa (hash: udiDof62oIqMZQkTZswgaISYaPILO26piyBTi1c5Vbg=)
2: j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl (hash: VmFl9RlOyQ+o4q+8o8v+Q/8sxpkPyD44iU0EU77pXcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f2:09:1a:b6:17:6d:ac:bf:e4:4f:58:65:20:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9805f64801dd93599414a62509b12a5402f868
Validity
Not Before: Apr 17 08:00:48 2026 GMT
Not After : Apr 18 08:00:48 2026 GMT
Subject: CN=b85bdbb788a36ea9f0488ed18106461a5a18980d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:15:ec:53:1a:4e:75:9f:35:e9:61:95:95:
f9:a2:ae:e4:2b:41:25:24:d1:bd:bb:07:08:f1:75:
cb:49:56:0f:84:f2:90:9c:6a:7b:32:92:18:05:71:
3a:42:70:2c:4f:ef:81:94:41:90:53:d0:b8:8d:e8:
e9:05:80:e2:41:4a:cf:f3:ce:6b:bf:3e:68:ee:ad:
38:70:2f:8f:f5:29:45:6f:67:50:b2:ff:4b:c7:4e:
f0:85:9b:36:c1:72:54:0b:34:84:8c:df:ca:b4:09:
08:da:dd:57:47:fb:c7:d7:ee:3b:2f:31:89:46:78:
ee:39:ba:7f:12:93:b1:4f:23:8b:a7:ba:42:70:64:
e3:5e:8c:69:95:07:4f:3c:d1:e4:73:6a:49:e7:82:
6b:e8:55:7c:c4:1d:d2:a0:b7:2e:ce:43:a1:3b:e0:
69:b9:35:bb:55:67:ce:b8:22:6a:f2:bc:cb:49:8a:
de:72:12:30:a0:b5:4b:b5:ad:ad:90:cc:af:a2:2d:
03:01:64:dd:d5:bc:94:d6:8e:48:8d:5c:db:de:00:
f4:37:e2:97:4c:c9:00:ec:4e:08:ed:8b:a8:07:23:
b3:97:dd:e1:3b:27:fd:dc:d9:a9:42:ee:93:2d:03:
4a:d0:30:2e:f4:ce:58:03:bd:c6:ba:db:e1:f5:f3:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:DB:B7:88:A3:6E:A9:F0:48:8E:D1:81:06:46:1A:5A:18:98:0D
X509v3 Authority Key Identifier:
keyid:8F:98:05:F6:48:01:DD:93:59:94:14:A6:25:09:B1:2A:54:02:F8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/53f9bd-7f54-4bd2-b5a4-e584cd5f8d11/1/j5gF9kgB3ZNZlBSmJQmxKlQC-Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:3b:8c:f0:b3:82:ad:72:9a:d9:e6:d3:d7:65:30:7d:ff:
ff:dd:62:89:17:fc:22:3c:31:90:2e:e2:44:ef:ab:fb:02:e8:
9e:c7:3c:ad:0f:72:32:57:b5:24:e3:a1:66:83:19:6f:02:f7:
1a:dd:37:42:c0:af:e6:22:33:2b:08:2d:4d:5d:93:9a:3e:ba:
59:fa:07:1f:81:26:89:10:26:90:b2:b7:7b:44:60:84:05:ed:
e1:c5:27:cd:f2:f5:e9:d1:e5:ef:dd:af:73:9d:92:d9:f3:3d:
a4:14:1e:e6:a9:69:56:28:a7:90:79:b4:36:03:c1:e5:b7:73:
e5:68:a6:fe:93:15:d8:90:54:60:5f:d3:24:db:c6:7f:6e:1e:
1f:c7:2b:45:32:c9:5a:af:ea:f8:c8:3b:1c:26:10:35:3e:72:
df:c0:1b:01:90:23:38:b1:4f:36:68:56:9d:df:93:3a:5b:a2:
8c:88:0c:14:03:ec:8a:ab:5a:b1:7f:c6:e7:c6:69:8d:76:9c:
dd:a5:7d:a9:48:80:e6:cd:1f:af:a0:1c:cb:f0:d2:6d:9c:84:
62:77:24:72:7e:f5:17:25:cf:49:70:84:15:3d:b8:59:2d:9b:
68:89:83:f6:c5:ef:cd:7f:47:b6:81:26:af:4d:02:2d:1a:3a:
b2:be:46:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:27 2026 by rpki-client