Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: lkMyjlm1Fc1mtgycCtPIKmI9hJ1oGWBtxX6n/fDzjCg=
Subject key identifier: AF:12:ED:47:71:28:DF:17:7F:4D:8B:01:21:6C:70:1B:38:80:08:9E
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019D99D0878F9264A9C641A489D15943E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0DF2
Signing time: Fri 17 Apr 2026 05:01:13 +0000
Manifest this update: Fri 17 Apr 2026 05:01:13 +0000
Manifest next update: Sat 18 Apr 2026 05:01:13 +0000
Files and hashes: 1: L_9BG5xd7E-WvM8wNKg3JhMyHn0.roa (hash: fYhGLFm7hYXm5Z24lpdXxQv/bqEknOrei0vZwgl2Blk=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: TBJHZNvur4odFGtOh6etLAM++7E3SMogtVUCkbS2whE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:87:8f:92:64:a9:c6:41:a4:89:d1:59:43:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Apr 17 05:01:13 2026 GMT
Not After : Apr 18 05:01:13 2026 GMT
Subject: CN=af12ed477128df177f4d8b01216c701b3880089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5e:82:69:f4:ae:80:b8:16:64:a6:e2:24:6b:
88:bc:29:05:24:0b:55:d3:f4:4c:10:a1:e0:f4:0a:
22:52:01:c1:b4:c8:da:21:78:ba:54:1b:ee:3c:45:
13:f0:b1:ba:94:8b:57:a4:5b:4e:db:c7:0f:29:cc:
ae:81:36:9a:d7:55:3b:61:70:7a:5b:11:9d:71:aa:
75:c2:de:e7:f3:a8:11:d0:ea:52:03:b2:16:41:b6:
76:28:27:fb:e3:f7:29:3b:ea:1e:c6:f2:e6:75:37:
4c:fa:79:70:f7:4c:05:f4:02:18:a0:a4:dd:e9:0a:
7b:7b:e9:64:a5:b5:d1:3c:1d:0a:06:af:6d:37:b4:
02:5d:d6:9c:8c:d5:39:b2:4c:89:9a:6d:08:39:be:
c2:19:c1:2a:23:6b:cb:9a:07:2e:ad:1d:ad:cd:fe:
a1:7a:2b:71:d3:77:d9:f7:02:f7:b7:a9:9c:36:44:
58:8b:32:b1:6a:e5:8a:88:f0:7a:60:b7:22:ef:22:
af:5b:f5:70:93:78:a6:b5:2e:dc:9f:be:e6:18:c9:
11:1b:69:f0:2e:86:a6:83:70:b4:92:29:38:a6:3d:
d2:c8:51:bc:9d:ad:0c:66:ee:ed:ad:9b:d0:50:24:
b4:a7:1f:99:78:23:2a:c5:9a:14:57:9b:49:d6:1c:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:ED:47:71:28:DF:17:7F:4D:8B:01:21:6C:70:1B:38:80:08:9E
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:e1:45:14:89:ce:00:f1:b7:89:ec:4f:4e:db:6e:19:b8:
ff:f1:7b:91:04:09:f3:29:fc:76:43:d0:d8:ba:7b:8f:27:43:
d1:c2:00:5c:92:71:9a:4f:50:28:14:18:a9:a6:f1:6e:74:9f:
b2:e5:8b:de:b2:a5:59:46:e4:85:e6:e7:94:98:83:68:d1:93:
6f:7e:10:76:87:59:1d:cc:5d:f4:8d:25:d8:3b:3a:bc:8d:b1:
41:dd:ab:b5:0b:b6:03:9e:1f:83:43:05:b7:ae:37:2b:4b:68:
32:a3:44:df:bb:ae:07:c2:aa:a1:e1:bc:6d:00:2c:f2:3e:03:
e2:8a:70:52:2c:ba:d2:b8:f9:a3:a8:6f:87:ef:77:d4:46:91:
ae:24:64:cd:95:90:6f:67:76:cf:71:57:86:34:78:96:8c:6a:
f1:cc:0d:9f:18:84:03:1b:f3:e2:67:0d:15:24:d7:7e:90:97:
34:a8:98:47:73:b0:a1:7f:4d:4e:e5:24:50:33:17:92:62:fb:
88:56:17:09:98:49:c7:ee:f1:16:4f:ee:ca:64:34:c0:31:a0:
90:83:da:32:8c:ab:cd:04:3d:61:c6:ae:c4:d5:9f:dd:4b:2a:
cf:44:b9:d5:33:37:e9:c6:8a:11:33:ca:d2:b8:2d:ad:44:a1:
3e:a1:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:18 2026 by rpki-client