Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: YXbJT/EJEgEMHEOcYZa3gy1xttIWnhMV6sjkFE6d1zQ=
Subject key identifier: E7:DF:07:D0:40:50:A5:55:F7:C7:3D:56:A9:FF:76:C8:AE:2F:30:E0
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019D9C638729A2077D59B683364D4B0F5DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 17:01:01 +0000
Manifest this update: Fri 17 Apr 2026 17:01:01 +0000
Manifest next update: Sat 18 Apr 2026 17:01:01 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: oQGDdXiVNElrSxApaxzXkywZ1criA8tkBAPZiQWrK7Q=)
2: e-pIqroMx8ktOvBXKbMUSY489PA.roa (hash: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18=)
3: tg82jIBHH5LcgWYYM7zJbYrlVt0.roa (hash: n6rCSA1xOIDb4YmG15TQjoYexybekFDUsJodZaNLnM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:87:29:a2:07:7d:59:b6:83:36:4d:4b:0f:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Apr 17 17:01:01 2026 GMT
Not After : Apr 18 17:01:01 2026 GMT
Subject: CN=e7df07d04050a555f7c73d56a9ff76c8ae2f30e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:7a:27:f0:28:d5:71:7c:26:c6:18:27:37:
c2:61:c6:3e:35:27:a8:13:de:1f:2e:aa:ba:1c:e8:
e5:81:da:f3:f2:7a:1f:19:d2:54:74:1a:36:2a:7b:
a3:9b:9c:ef:12:39:69:f3:f5:91:29:1e:84:e7:cb:
43:c3:3a:51:67:c2:70:67:dc:3f:61:b2:7a:81:4b:
e3:aa:11:cf:84:a0:d6:14:f1:ea:74:ff:66:20:11:
49:ad:13:52:f7:ea:9c:1d:44:dd:47:3a:95:43:2a:
2f:9c:48:1d:5e:c6:7b:09:d9:64:e6:52:ba:3b:a6:
93:43:74:c3:67:55:81:a3:a5:9a:0f:cf:10:b0:08:
c8:39:b4:9d:b9:3a:b1:e6:df:2f:5c:09:3e:b5:86:
65:40:be:dc:cd:f7:b8:05:79:b0:6a:31:f7:ff:11:
27:46:d5:68:44:17:c8:ff:b4:88:ce:e7:ac:34:c7:
9d:74:73:55:76:e2:13:b0:1b:c3:a5:7f:66:4f:40:
23:58:77:b7:72:d3:c8:5f:db:f1:11:d0:c0:09:7e:
66:bf:7b:8d:f4:3e:e2:af:de:52:6b:be:73:d7:9a:
ec:53:91:9e:76:d7:32:ab:f1:29:64:1a:8c:44:af:
f6:99:24:86:2a:ab:bd:e0:17:77:21:7e:f8:18:92:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:07:D0:40:50:A5:55:F7:C7:3D:56:A9:FF:76:C8:AE:2F:30:E0
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:2d:4d:45:ec:a8:35:59:4c:12:d6:84:7d:6d:0e:4d:0f:
98:4c:de:85:c8:eb:ed:28:a7:74:4f:65:ab:11:66:78:a8:50:
44:e2:06:0c:cd:4d:e0:e3:c9:d6:3f:26:94:5c:05:61:c1:5f:
6e:0e:9d:c9:db:60:b5:82:98:be:07:02:3b:05:63:7a:67:2f:
75:2e:08:ec:18:e3:13:71:31:ce:39:b2:2d:77:86:91:cd:71:
c1:ab:f1:96:34:27:8a:b0:4a:4c:95:88:03:6e:9c:03:dc:5b:
38:96:43:14:6c:ae:17:c8:6d:c9:a2:bf:b9:21:60:d3:19:ce:
34:cd:70:7f:3b:53:09:bb:ae:1f:dc:7a:9d:bb:00:e3:bd:cf:
92:ab:96:eb:d8:11:dd:6f:f3:49:7a:ec:7d:35:fc:26:7b:0d:
4a:85:b9:5b:e9:99:7b:9c:82:05:bf:c1:28:51:8c:a0:f3:e0:
57:e8:01:9b:95:bb:9a:5e:5a:70:4d:ee:89:cf:6c:02:72:e7:
04:42:c7:5a:a9:ae:02:1f:c7:56:4e:59:27:64:81:ad:33:81:
a8:e8:80:e1:7f:6b:5f:08:ad:cc:d2:32:cf:37:c9:a7:99:ce:
ce:85:50:b7:d6:a8:44:c8:f0:a2:b1:bf:c2:58:6e:51:22:44:
d5:84:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:58:44 2026 by rpki-client