Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File: jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier: 1wG00Uo2yrlKQthuZf2iDCmL+0BvHELqfYHi2GfT+lg=
Subject key identifier: 22:F8:16:C0:D1:61:F0:A1:7B:CA:97:11:73:D1:3D:AC:78:A1:73:5C
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer: /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial: 019DA45374849904E6ED7164D28791DEE86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number: 0F99
Signing time: Sun 19 Apr 2026 06:00:25 +0000
Manifest this update: Sun 19 Apr 2026 06:00:25 +0000
Manifest next update: Mon 20 Apr 2026 06:00:25 +0000
Files and hashes: 1: JYjW-QeIcYRWKin5Cm85fHuAnLg.roa (hash: wT0Z0IE6rXGq31xtB0HPl9NnDaewEv+R19XnkN3Ujm8=)
2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: N7DChvMsyln6KFaXo/X+5rk11nme3vdHiTmx3d8Pod0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:74:84:99:04:e6:ed:71:64:d2:87:91:de:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Validity
Not Before: Apr 19 06:00:25 2026 GMT
Not After : Apr 20 06:00:25 2026 GMT
Subject: CN=22f816c0d161f0a17bca971173d13dac78a1735c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:c2:92:45:92:36:2c:11:64:e0:a9:e4:72:
e7:92:4a:6f:61:4e:7d:a0:b2:5f:3d:ae:bb:e3:08:
bb:0b:2a:bf:3d:eb:5e:2f:e2:dd:8e:90:dc:d8:2a:
e9:55:c4:25:79:d2:b7:bb:7e:10:db:5f:87:83:62:
34:76:e2:9b:4c:ed:98:ec:18:4d:09:2b:1d:df:59:
56:bb:80:af:42:a3:de:04:67:33:88:53:6a:9d:7c:
0e:ec:a9:cb:b7:10:8e:3a:b7:75:7a:14:6e:e2:54:
15:76:7d:83:8a:8e:11:5e:e1:1f:65:3d:e7:74:65:
81:64:ca:45:3d:5e:47:a6:75:db:cc:3f:01:a7:f5:
b7:33:b6:06:75:78:e6:89:34:2c:87:5e:37:df:4d:
fc:b8:38:b5:fa:db:17:7f:79:59:b2:c9:4f:10:9f:
77:5b:48:72:c6:69:09:79:7e:4f:0b:37:c8:9b:80:
cf:a3:97:22:11:5a:44:44:5e:93:5a:23:41:4a:e1:
6e:f2:7f:a9:fb:9c:93:c3:5b:cc:2e:81:96:40:60:
44:d6:e8:81:16:d6:e6:d2:21:ae:d1:b4:90:f3:81:
6a:b5:29:c6:76:82:98:ae:56:3b:c2:47:c0:32:99:
ad:97:74:f6:1b:c3:df:33:1f:c6:f6:90:29:01:2b:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F8:16:C0:D1:61:F0:A1:7B:CA:97:11:73:D1:3D:AC:78:A1:73:5C
X509v3 Authority Key Identifier:
keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:81:ff:8a:0d:f3:a8:be:51:1f:91:2a:ad:0c:cd:8f:81:
58:06:c1:b8:d8:26:e1:45:fd:88:b7:83:4e:23:e4:a1:8a:c8:
7a:0c:d3:d8:c6:69:ee:88:15:7e:bf:29:d6:c9:04:44:1b:46:
a9:ed:5a:c2:6d:89:0a:5d:a3:1d:97:a2:24:10:19:ce:c4:88:
2d:da:c5:f8:9e:70:bf:e6:a7:d0:c8:9d:59:ca:51:cd:d8:35:
9a:2c:3d:f2:56:cc:bc:a6:0d:59:e4:99:b0:09:3f:99:51:8a:
70:5a:1e:6a:4e:e8:86:ec:a5:ed:8a:38:28:a2:02:b9:ea:6e:
e8:a7:26:7f:1f:79:93:a4:4c:12:cf:7c:37:95:18:30:f1:72:
98:1b:a6:12:8e:db:44:cb:fa:cb:87:65:04:2d:95:53:8a:42:
83:78:da:3e:65:85:2c:e2:b1:a0:49:7f:17:43:9c:af:d8:c0:
a8:29:90:39:ed:01:7f:b1:d5:ea:1e:99:35:66:65:33:6f:13:
a5:6e:52:93:ba:47:be:48:e2:79:9e:e2:21:c3:c8:e7:67:b5:
36:2c:1e:b7:dd:b0:93:6e:13:1e:14:ba:80:70:13:07:7c:85:
a8:55:fc:57:8a:a1:b5:b3:84:39:9d:67:24:b6:bf:a8:7f:5e:
9b:ee:a9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:01 2026 by rpki-client