
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: P/oVMIyBvKKneDCg6FPOgADumJ5C8qfmViNJZmVs71A=
Subject key identifier: 02:C2:91:A6:E5:65:E4:C6:BF:9C:7D:5A:FF:E0:44:5E:D0:C3:CF:3D
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 019D992B8D054F49A89DF1BE5A55EF5363EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 02:01:01 +0000
Manifest this update: Fri 17 Apr 2026 02:01:01 +0000
Manifest next update: Sat 18 Apr 2026 02:01:01 +0000
Files and hashes: 1: OZhWUwGTJJgySO4m4Q-1c3zg7BI.roa (hash: fGvKZaOlhgdkgyxl6/1AuWFmm3crcDp6VjKR5yKK6Ms=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: XCmTHdK4g1MDOeW8NxQk5R2vupTR1Icmp6jwBnSECto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8d:05:4f:49:a8:9d:f1:be:5a:55:ef:53:63:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Apr 17 02:01:01 2026 GMT
Not After : Apr 18 02:01:01 2026 GMT
Subject: CN=02c291a6e565e4c6bf9c7d5affe0445ed0c3cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:b8:2c:7f:5b:11:a9:ef:84:30:e7:b1:d9:
a8:ba:bb:41:87:f2:d9:4d:52:74:80:67:23:f0:58:
e5:1e:20:9b:fe:f3:c5:3f:9f:0a:86:b5:c6:79:61:
25:e8:d7:0a:0c:15:d7:49:ce:8a:43:6a:b9:b9:5e:
27:63:d5:3f:e2:6a:e6:f3:39:1b:e5:21:c3:f8:14:
08:94:18:96:11:e2:33:51:1f:98:fe:75:ad:78:54:
bf:e0:1b:41:42:83:4a:e1:78:5b:80:6b:cb:3d:c5:
67:11:c8:a6:01:1b:62:6d:e6:b1:46:00:7e:4f:22:
b4:37:7a:2c:86:8a:7d:94:0d:b4:44:75:ef:e3:e0:
2a:a3:c0:ea:51:cc:78:32:7e:5a:ca:7e:57:42:11:
53:8a:c7:5f:25:fb:a6:ba:f7:c2:55:90:97:78:1f:
55:6a:0c:27:a7:98:de:a1:60:77:0d:78:4d:9a:9e:
cb:fb:d7:b2:cc:3e:0b:99:c6:cd:33:93:f0:70:b6:
70:96:05:e1:53:30:c6:97:cc:f3:87:20:55:fe:ab:
cd:17:13:31:13:c8:a9:a4:d3:9e:db:82:33:ad:85:
3d:e6:8f:3b:8d:be:ec:47:2b:ef:06:62:5a:58:e0:
23:9e:be:a9:69:d6:42:54:91:35:93:3c:c7:9d:66:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C2:91:A6:E5:65:E4:C6:BF:9C:7D:5A:FF:E0:44:5E:D0:C3:CF:3D
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:e2:c0:83:af:b1:63:13:9c:81:ed:1d:f0:72:5f:5a:d0:b4:
52:66:60:ac:06:88:24:54:7a:11:76:8f:e1:f5:87:67:3a:8b:
b7:cd:17:f8:eb:b5:af:cb:7f:a2:b1:ec:9b:ee:31:6a:6c:3e:
30:eb:e3:d0:d1:5a:f9:78:08:0e:71:d0:c9:97:b0:d9:7e:22:
ca:22:37:dd:7d:00:b0:16:df:7c:c2:dd:41:22:35:94:ec:de:
72:71:18:88:66:24:33:e6:bb:5e:7c:71:0f:17:8b:0f:ab:87:
3b:60:db:12:69:a2:79:b0:cb:51:66:a9:bd:30:3f:3b:b1:8f:
e6:80:21:61:6f:8f:13:20:df:f4:8c:f1:5a:d4:d5:d6:be:f8:
17:3e:fe:de:d3:3f:6e:5d:bb:c7:b2:9b:63:ed:81:44:9d:a4:
f6:15:14:07:8c:71:16:ba:1f:7f:c8:fc:f5:45:0f:39:d9:a8:
ed:2a:2e:8b:67:18:38:7b:d4:42:ce:7a:24:a1:a2:12:8a:6b:
e6:25:dc:1e:c5:d5:76:ef:79:4c:0c:75:5b:45:13:10:3f:00:
19:b8:b2:23:e2:6f:a4:d8:f5:60:16:ce:cf:b8:69:ed:37:b8:
49:04:96:56:39:40:3f:30:08:5c:24:49:9b:76:d6:ac:e5:77:
ed:0b:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:19 2026 by rpki-client