Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: vdE93O7iOQtp3+IvFLn8pHKQcSXrrxhw2m5BC2LS4oc=
Subject key identifier: 52:21:E6:B1:79:C6:70:62:A0:EA:41:7B:DF:C0:0B:A9:CA:91:82:26
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019D9BBF4D73E31118706EC74FA0E6F3F40B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 1604
Signing time: Fri 17 Apr 2026 14:01:38 +0000
Manifest this update: Fri 17 Apr 2026 14:01:38 +0000
Manifest next update: Sat 18 Apr 2026 14:01:38 +0000
Files and hashes: 1: 9cLaCRMmkUSsyxFDOIgTHYqGjrA.roa (hash: M8D9X9HUQkQdMWCylk5MMocwUSM9A6MJTfk46/lEGqw=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: wpHXAPYfuljgnNYYQ4+oUHeFgR+s8Npnw2ZmPfeZGl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:4d:73:e3:11:18:70:6e:c7:4f:a0:e6:f3:f4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Apr 17 14:01:38 2026 GMT
Not After : Apr 18 14:01:38 2026 GMT
Subject: CN=5221e6b179c67062a0ea417bdfc00ba9ca918226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a5:ba:5e:4c:90:30:01:24:9e:25:84:db:b6:
76:cb:5d:e5:54:56:bf:12:5c:30:dc:b1:60:e1:45:
df:4f:56:fd:46:fe:d8:6a:56:a2:30:ba:60:b3:4e:
0e:54:7f:16:44:c2:d1:43:9a:46:76:a6:e1:75:2a:
98:e8:52:19:00:f6:41:03:38:56:56:2b:ba:9e:8a:
92:54:3e:a9:46:98:90:10:94:14:2d:0e:ab:75:78:
02:18:3b:86:a1:99:bc:03:0e:20:05:e7:a9:7d:21:
bd:0f:f4:9c:ae:65:e6:0c:be:1a:15:c3:6b:43:f1:
d6:1e:66:71:88:74:e6:2c:ed:71:74:c9:76:6f:39:
1e:b2:11:0b:28:b0:fd:38:da:61:ed:90:5f:d4:ca:
b7:5f:34:06:0d:b5:c3:36:93:14:7e:0d:29:5b:fb:
17:a3:2a:28:3a:ad:57:5b:80:09:b3:36:2a:61:19:
50:ed:04:58:02:6e:ef:ca:d9:fc:79:36:f4:1c:9d:
25:cf:40:14:39:bc:52:2e:26:44:b2:29:3e:12:2e:
a6:2f:05:63:db:e2:0c:8b:9c:e8:f7:02:9e:da:2e:
dd:8e:a9:6b:7a:34:3c:0b:33:f8:cd:0a:cb:ed:8e:
76:74:8f:ea:af:ff:ff:04:2a:fa:a7:1a:46:b9:eb:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:E6:B1:79:C6:70:62:A0:EA:41:7B:DF:C0:0B:A9:CA:91:82:26
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cf:32:86:79:9d:4a:dc:bf:cc:2c:6b:a4:f1:26:ae:09:cf:
c2:4f:10:72:8d:52:88:f1:21:11:29:24:c9:3f:d5:03:6c:6b:
38:92:c2:e4:7c:8f:03:6d:3f:a1:05:cf:16:ae:11:82:79:d5:
c1:0f:a9:70:3d:61:1d:44:aa:75:30:2c:a0:0f:3f:86:e8:3e:
0b:ab:77:b3:bc:3e:6b:5e:59:3c:af:dc:32:d8:9b:98:82:45:
b8:9f:6c:32:7d:5c:7f:66:f6:0d:6e:30:ae:7d:e4:c3:c1:08:
68:52:ef:02:09:80:47:4b:38:b0:a2:3c:67:02:e7:96:e4:b2:
50:94:bf:0b:f9:4e:53:4d:1d:89:63:9e:ad:f9:bb:56:ee:aa:
3e:d3:34:66:6c:d1:d7:a9:57:5e:91:dc:8d:bf:56:b1:f5:87:
50:ce:a8:0a:7c:1d:c3:b4:39:0b:2f:d3:53:c3:45:99:9e:32:
b9:16:e1:5e:bd:df:49:f5:5b:f3:5f:d3:83:6e:27:14:9e:5f:
1c:66:d6:ce:13:3e:d8:d2:37:21:cf:67:35:dc:ad:9d:6a:df:
f2:14:06:1c:6e:88:c9:87:08:f6:65:c8:d7:d2:34:3a:da:3f:
7e:e6:1b:d3:1e:9a:01:b3:1b:ce:0e:38:11:ad:40:a2:a0:d4:
16:5f:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:52 2026 by rpki-client