Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: f4FEE5R2XNb/jHz+gelM4iiDUaTGLaEUQoG7m7M3oiY=
Subject key identifier: C4:FE:44:B9:93:6D:E2:BF:5D:F5:1E:0B:55:12:34:D0:3E:FC:3D:39
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019D9B198DD01E1978135C92E93DF0C7E63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0920
Signing time: Fri 17 Apr 2026 11:00:36 +0000
Manifest this update: Fri 17 Apr 2026 11:00:36 +0000
Manifest next update: Sat 18 Apr 2026 11:00:36 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: iCHmOvI8IwrHEBfFJguBcsIBSkPk3hl4YwgWNv5jMMI=)
2: rx7GC_CHfYxl4Ofnp8MOvM23hM8.roa (hash: 81lkujtMvuC5mIlhZHNqQoKSuJAiHrlt9j7cnoTOQdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8d:d0:1e:19:78:13:5c:92:e9:3d:f0:c7:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Apr 17 11:00:36 2026 GMT
Not After : Apr 18 11:00:36 2026 GMT
Subject: CN=c4fe44b9936de2bf5df51e0b551234d03efc3d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:69:7e:bb:52:f5:58:10:9e:21:32:b8:e6:
0b:a4:db:da:70:2e:43:c6:22:8e:05:68:8e:5d:e0:
79:c5:ef:1e:6d:0f:d8:28:4e:aa:13:d5:bf:58:33:
e7:25:e0:02:97:a5:ec:6c:d5:66:92:7e:99:9a:1d:
85:7d:f9:11:b9:59:bd:4a:80:de:c1:17:a9:f3:33:
91:62:11:42:35:e7:c2:3a:0f:ab:7e:eb:7c:2b:10:
4e:49:9c:a5:c4:41:f1:c0:a1:d7:5a:6b:aa:ed:36:
62:84:b3:e7:f0:0e:14:97:15:3f:da:c2:0b:1d:e4:
1d:92:75:7e:1d:ab:80:80:c3:cb:d9:50:49:4c:7f:
d2:1f:43:f5:1c:d8:d5:45:1d:7a:65:31:45:84:92:
53:ab:1e:b2:40:43:2e:af:0b:dd:84:9a:8f:69:20:
ef:fb:fe:b6:c7:0b:29:4a:f0:94:0f:e5:b3:92:15:
9d:4d:86:2f:5b:7d:7c:d6:94:0f:f8:d0:06:78:4f:
fe:a5:ad:54:63:c3:12:6e:99:ec:f6:f4:ef:22:60:
e4:37:d9:c7:d6:e9:59:a5:aa:6c:d7:d3:73:1c:cd:
c4:3e:41:81:42:09:23:e6:84:f4:6e:a8:e8:fa:71:
9e:4c:13:93:e4:c6:7a:69:e6:ad:87:57:f6:a1:bb:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:44:B9:93:6D:E2:BF:5D:F5:1E:0B:55:12:34:D0:3E:FC:3D:39
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8d:20:87:fb:b8:e1:f6:47:a6:67:4d:fd:3c:31:9e:32:b2:
a3:a5:2e:d8:61:db:1e:7b:c1:7f:6f:86:64:3c:40:4c:49:e9:
00:44:cf:44:f0:e5:81:ed:a4:3f:7f:36:36:9c:75:9e:ab:29:
87:23:5e:93:3b:cf:bf:a6:47:a7:2c:45:01:39:47:29:8b:46:
fb:76:52:dd:e6:ee:29:bd:ee:86:6f:75:43:14:fa:cb:18:ae:
ce:31:bf:88:bc:a0:86:d7:be:ce:3f:72:03:60:52:38:f5:b7:
be:26:8d:de:e8:c4:1c:4e:fa:ea:fc:53:2c:05:3f:4f:bd:c3:
f9:0d:33:c9:dc:06:53:7f:94:50:b7:80:fe:a3:84:0e:3d:1a:
c6:a4:73:2a:64:b6:86:22:46:7c:3d:fc:c7:57:48:81:4c:37:
62:49:89:cc:fe:ec:e2:46:82:a6:11:d9:b4:7f:64:d7:34:27:
fc:ce:d4:82:84:e7:bc:eb:06:96:fb:14:ee:73:69:07:77:e3:
ef:93:8e:eb:83:e6:d2:62:bd:46:31:67:f9:1d:58:ee:1e:07:
4e:fa:f1:5e:be:6c:40:87:48:ef:51:a0:e1:a1:20:8f:2c:d1:
1d:0f:93:4d:de:32:89:e9:f6:24:10:60:c8:ca:67:03:18:9c:
20:8c:73:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGY3QHhl4E1yS6T3wx+Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl
YjVhODQwHhcNMjYwNDE3MTEwMDM2WhcNMjYwNDE4MTEwMDM2WjAzMTEwLwYDVQQD
EyhjNGZlNDRiOTkzNmRlMmJmNWRmNTFlMGI1NTEyMzRkMDNlZmMzZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtpfrtS9VgQniEyuOYLpNvacC5D
xiKOBWiOXeB5xe8ebQ/YKE6qE9W/WDPnJeACl6XsbNVmkn6Zmh2FffkRuVm9SoDe
wRep8zORYhFCNefCOg+rfut8KxBOSZylxEHxwKHXWmuq7TZihLPn8A4UlxU/2sIL
HeQdknV+HauAgMPL2VBJTH/SH0P1HNjVRR16ZTFFhJJTqx6yQEMurwvdhJqPaSDv
+/62xwspSvCUD+WzkhWdTYYvW3181pQP+NAGeE/+pa1UY8MSbpns9vTvImDkN9nH
1ulZpaps19NzHM3EPkGBQgkj5oT0bqjo+nGeTBOT5MZ6aeath1f2obvINQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT+RLmTbeK/XfUeC1USNNA+/D05MB8GA1UdIwQY
MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt
MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi
LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm40gh/u4
4fZHpmdN/TwxnjKyo6Uu2GHbHnvBf2+GZDxATEnpAETPRPDlge2kP382Npx1nqsp
hyNekzvPv6ZHpyxFATlHKYtG+3ZS3ebuKb3uhm91QxT6yxiuzjG/iLyghte+zj9y
A2BSOPW3viaN3ujEHE766vxTLAU/T73D+Q0zydwGU3+UULeA/qOEDj0axqRzKmS2
hiJGfD38x1dIgUw3YkmJzP7s4kaCphHZtH9k1zQn/M7UgoTnvOsGlvsU7nNpB3fj
75OO64Pm0mK9RjFn+R1Y7h4HTvrxXr5sQIdI71Gg4aEgjyzRHQ+TTd4yien2JBBg
yMpnAxicIIxzWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:16 2026 by rpki-client