Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: 8M/kDsGtDPqsGbXtdWnRkJcEjIrB1fgpAMP5rSP7NmI=
Subject key identifier: D3:82:12:89:23:8F:1B:DE:90:7B:29:74:94:E7:D2:7D:96:71:22:8F
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019D9C6308067CBE1C944D6098D5FB0E3941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 17C4
Signing time: Fri 17 Apr 2026 17:00:28 +0000
Manifest this update: Fri 17 Apr 2026 17:00:28 +0000
Manifest next update: Sat 18 Apr 2026 17:00:28 +0000
Files and hashes: 1: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (hash: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw=)
2: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: hHPeX5tiVdcr2dknwyZ/A5d+hH1EO8xHELNmJl5T/8s=)
3: xCi0G_e0Q695aPNT6gcJGjk5Aik.roa (hash: 5ipSKU666jOWKtI/B+Mronv23Zfmy4lLPWtuX/CkhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:08:06:7c:be:1c:94:4d:60:98:d5:fb:0e:39:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Apr 17 17:00:28 2026 GMT
Not After : Apr 18 17:00:28 2026 GMT
Subject: CN=d3821289238f1bde907b297494e7d27d9671228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:ac:6c:62:8d:2d:f1:54:59:b5:6d:cc:31:
2c:35:47:ed:4a:72:9b:22:91:25:ba:6d:65:17:a7:
da:16:31:2d:e2:96:e2:95:88:00:87:db:ac:b0:0a:
59:57:e8:e9:be:1c:ca:a1:5e:05:5c:8c:2a:3e:7b:
3f:de:0d:9e:82:14:0b:df:b7:d0:74:83:0a:65:cf:
0d:21:14:cb:51:75:64:09:ab:ce:9b:7e:0c:33:0e:
6c:76:10:38:fa:06:be:a1:8b:22:a4:6e:42:19:3d:
49:de:4c:26:6c:f5:c2:ef:a6:62:e8:fc:4f:31:1e:
cf:ce:e4:cd:b9:6a:02:f2:08:71:d9:67:47:6d:c7:
8f:f8:f1:5f:d5:20:50:01:37:26:8b:cc:49:26:1a:
43:a5:cd:ec:00:be:fc:74:8d:a8:c2:b3:e5:3f:f9:
40:bf:a8:9a:4d:07:54:82:19:4b:71:3b:61:7a:f7:
aa:e8:fe:90:68:1d:2d:26:be:15:70:1b:91:13:7d:
db:f9:4c:ce:f9:79:a8:b5:d7:bd:1a:6e:cc:24:7b:
e8:f6:d8:e1:3a:6d:0e:b7:c9:f1:a7:4d:73:63:a5:
21:42:47:6c:74:e7:6a:9e:79:c6:5e:5e:1d:56:d3:
dc:92:9f:75:5c:08:d2:46:90:50:59:e3:50:dc:b2:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:12:89:23:8F:1B:DE:90:7B:29:74:94:E7:D2:7D:96:71:22:8F
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:72:0f:7a:62:56:dd:70:85:86:61:87:27:68:b8:d0:72:81:
66:39:db:b1:bb:ae:b0:67:5a:c9:db:9a:5b:d3:81:ea:b9:3a:
fe:3b:a9:21:79:fb:17:0a:27:68:42:be:be:d0:79:7e:37:b5:
77:a8:a1:e4:21:45:a9:06:66:01:af:f7:e5:a4:48:b4:fc:e3:
a2:98:c0:c4:4c:f8:7f:3b:34:69:be:0a:91:63:9e:1f:06:39:
ef:8f:9f:08:6f:ad:39:2b:c3:2e:da:de:77:95:d5:91:11:5a:
d1:6e:e5:25:df:75:b5:8a:f9:8c:1d:35:f2:a3:02:0e:a7:8f:
d6:d8:60:d9:72:80:fb:a0:d4:96:2f:22:f6:9d:a7:09:42:e6:
4f:36:c1:d4:55:a5:1a:01:a5:b6:8e:3b:71:0e:d9:1a:05:5e:
ec:5c:80:0d:55:2f:b9:b9:b2:e0:33:e1:87:79:83:31:ec:20:
f7:ec:db:2b:49:1f:9d:a6:6e:63:1f:4d:bd:ea:59:24:57:eb:
cd:d5:ed:d2:ac:3b:ac:a7:9f:88:a5:03:d6:7f:b0:98:69:41:
d2:db:e8:3a:02:35:98:00:4e:72:46:39:73:a3:cb:c1:31:dd:
a7:fb:12:3e:ef:15:e0:d9:58:07:94:23:16:f1:ba:58:02:79:
24:f7:bc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:30:01 2026 by rpki-client