Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: XTqYOmDPSzfb/zpKFzvA1L5RIs6FhGpcd9eY4kgp1tc=
Subject key identifier: 8B:9E:F7:10:C6:F3:68:B4:33:C0:08:89:F4:42:DF:A7:9B:38:51:C9
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 019D9AABB8138704E032F2B3B4013D32F4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 1608
Signing time: Fri 17 Apr 2026 09:00:38 +0000
Manifest this update: Fri 17 Apr 2026 09:00:38 +0000
Manifest next update: Sat 18 Apr 2026 09:00:38 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: Vpi1kN+aWkgqYzHOkMARDnyCMgQM/zvSPBbW+agpv3Q=)
2: rc_J4XOHhixLylCcfyExPkYQnWs.roa (hash: kaE6EoD8hyc9JZvUwXOFpWk4FxFp7L/CsoCCjqyPHoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b8:13:87:04:e0:32:f2:b3:b4:01:3d:32:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Apr 17 09:00:38 2026 GMT
Not After : Apr 18 09:00:38 2026 GMT
Subject: CN=8b9ef710c6f368b433c00889f442dfa79b3851c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:ea:83:d2:bd:d4:bd:dc:40:81:e7:0c:47:
4b:1a:03:6d:d7:4f:30:8e:b7:b7:84:d0:35:00:2b:
b5:b5:7f:47:f1:4f:45:3d:96:ab:b9:ec:8a:3a:eb:
9c:32:1b:00:96:9e:1a:e5:15:22:70:db:1f:1a:56:
7e:53:d5:90:82:f6:9c:1a:51:5d:56:e2:88:9c:cd:
af:a0:83:15:f6:fa:5c:8f:19:1c:a4:9e:02:b5:42:
ed:73:bf:02:ff:b0:92:d4:50:6d:16:53:84:f7:1c:
0e:2d:c3:90:b0:5e:09:0b:6a:75:ac:56:72:79:3b:
a5:1b:c2:9c:e0:95:aa:dc:90:95:19:83:96:b7:9f:
6d:69:68:b5:3f:a8:ca:31:c9:6e:e9:7e:6b:71:32:
8b:3b:00:0c:07:30:ff:22:11:53:d3:0b:b3:dc:de:
24:b5:a2:33:98:4d:59:78:29:85:a5:82:b7:9e:58:
49:58:8d:57:ec:19:33:b1:1f:57:76:f1:f1:57:5b:
04:53:23:3c:ac:9a:43:b1:9e:f9:53:da:41:5f:ca:
6e:91:19:e9:d1:1f:47:46:a3:53:e1:6a:46:24:0c:
6f:02:c2:a9:55:80:b5:10:3e:4d:0a:ae:72:04:e4:
26:0f:bf:66:ab:ef:89:8b:a9:8e:81:31:d4:89:85:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:F7:10:C6:F3:68:B4:33:C0:08:89:F4:42:DF:A7:9B:38:51:C9
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ef:ed:8c:39:9c:67:85:07:9b:f4:2c:e5:6e:a1:ba:bc:aa:
49:4f:68:d7:8f:92:bf:bb:75:97:85:1a:0f:18:6f:a7:c0:21:
90:61:19:23:36:39:c5:eb:d4:c0:3b:5a:0f:ed:60:a7:c8:bf:
07:fa:4c:e7:fb:55:ef:06:a2:d4:68:14:a4:2b:c5:20:55:f9:
0e:11:1e:0b:49:2c:c4:cf:e9:be:a5:bd:86:13:bb:e1:ba:63:
96:7b:8e:60:2c:da:25:88:23:93:2c:38:5d:0d:08:b9:e1:55:
90:49:72:e7:56:de:6b:85:12:3f:9b:97:8c:7b:02:38:2f:e4:
bc:33:9a:7d:9f:f3:88:21:df:35:c4:eb:cf:0b:18:bc:87:60:
6e:24:2f:82:81:a1:2f:a8:0e:84:ca:8d:83:23:e2:9f:83:27:
f5:0e:9a:0e:24:9c:d6:a8:71:d1:f6:7c:8d:85:b4:61:cc:bb:
6a:68:19:ed:85:80:3f:b6:2b:f8:35:1d:fc:55:19:6d:ff:e2:
20:e9:c0:83:25:c6:34:2e:fe:1a:1a:a2:39:bd:6d:a5:58:cf:
86:bd:d8:84:40:42:d6:e4:57:e1:e0:69:96:0e:04:f6:a9:48:
c6:7d:a6:25:31:f2:94:53:de:b5:71:b4:2b:15:5c:76:11:e9:
b0:a9:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:28 2026 by rpki-client