Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: cE/Gs1l1sQsaWQfzN+MIAnBbSzFYsjFMeD+uOAsD+Nk=
Subject key identifier: 91:8D:58:A0:DD:34:30:EC:9E:28:32:AC:87:17:16:B8:D9:CC:A0:81
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019D992B54685F0A4108F9932DA0D22BED5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 167F
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (hash: 9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=)
2: lNDMKb0aTV8SXs00e18A81qWIek.roa (hash: herRhJivtwm2jHvfa8VAdymtufMvK+b5YDKOa9xoFaM=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: HhAP6l0RBDOQVqWDDk5pHEpaF94234o/4B2ZgIxXoWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:54:68:5f:0a:41:08:f9:93:2d:a0:d2:2b:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=918d58a0dd3430ec9e2832ac871716b8d9cca081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:3f:11:4a:c0:66:23:5e:02:1b:93:23:7d:
0a:66:41:c0:39:08:b8:c7:d4:3b:96:5a:c9:52:85:
80:fd:a9:ea:37:ba:90:55:99:47:32:14:5b:cd:26:
eb:26:5d:97:04:77:61:2a:0c:0b:ca:0b:10:6d:7b:
19:66:57:c6:b3:0b:9d:ce:82:00:23:13:29:b7:3a:
f0:33:07:18:1d:5e:cd:c4:0e:d3:b7:24:68:df:eb:
a6:ca:89:7e:06:f4:b1:15:21:a6:5c:cf:7d:aa:98:
3d:d5:1d:7c:f2:f8:22:0f:21:08:66:39:e9:f2:85:
4d:95:77:b8:bd:87:06:5c:e6:d9:e9:6a:e8:56:82:
87:21:79:07:8d:8f:83:74:c4:69:6c:79:8d:3a:db:
08:9e:e0:78:86:d2:08:6f:91:39:bd:d4:11:ff:86:
18:c4:77:12:00:04:2c:a3:59:cd:53:1a:16:13:9e:
d0:94:17:5f:65:5e:84:1f:8c:1f:73:1e:72:26:06:
c4:28:1e:46:48:1e:f3:07:e6:56:51:27:05:a1:02:
c5:c2:c7:23:6d:ab:00:c9:9b:df:23:c2:40:dc:39:
9a:91:0e:67:ca:b2:6d:b2:e4:00:81:aa:78:16:ae:
4d:16:0c:b4:1e:7a:60:63:f0:cc:e6:ee:ae:4f:ba:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:58:A0:DD:34:30:EC:9E:28:32:AC:87:17:16:B8:D9:CC:A0:81
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:48:2a:63:89:92:45:48:8a:57:ea:29:ff:b2:1f:70:3e:c5:
a7:6c:bc:13:db:82:f5:c2:da:78:34:b4:2e:c2:32:2a:69:cd:
78:bc:cf:e0:5f:a1:6c:c9:de:6e:af:04:9f:2e:48:35:19:7b:
48:fe:db:f7:f4:c1:1b:be:dc:3a:60:f3:89:33:bc:2f:1d:e2:
58:35:97:9c:15:30:ae:ec:7d:f7:10:46:9d:5f:69:94:b3:7b:
e8:28:35:a1:54:f7:04:3b:15:18:e8:a8:1c:14:da:e2:2c:f5:
ff:3d:78:bb:46:21:f8:50:03:34:c4:50:5d:50:f9:3e:a3:76:
35:8d:2d:68:16:a2:0d:96:f2:96:77:3a:c5:20:56:eb:43:07:
38:0e:68:2b:d7:23:3a:92:6c:23:07:b7:9b:9e:b5:e2:01:3a:
1b:57:eb:f4:d6:c3:d7:df:e8:77:a1:b2:31:21:ce:c0:ed:22:
9d:92:ef:dc:2b:9f:90:36:dc:65:85:fd:a1:34:17:67:79:ea:
67:94:cd:a0:e7:64:00:ef:06:ac:b2:44:95:d4:e4:3c:82:c3:
b9:e6:82:b5:35:10:58:07:de:6f:2b:a6:08:f6:71:1d:cb:94:
3a:d4:2a:41:05:51:4d:b1:85:b3:7d:79:ba:51:81:61:1f:67:
57:c9:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:29 2026 by rpki-client