Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier: p5Dax56qlYSvhNInc5fdImj4+gGIjN3h1fZsWQXZ0Z8=
Subject key identifier: 0F:02:2B:29:0E:E5:98:B3:20:5B:FE:13:05:70:6F:9E:57:ED:C4:D8
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer: /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial: 019D99622B2B9088CC6A39E4B054F46022BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number: 184F
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: 6JbzmaP2xdn3cLMc-Bm-Yx2pN-E.roa (hash: 48sCH02KoyoE9P/6e5vhQk2nQTUGu8hLX4O+xfTgtzc=)
2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: Ksz6c7HbPnTL752OHb7zSOWLJFT6lJfiCTx9P3pua5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2b:2b:90:88:cc:6a:39:e4:b0:54:f4:60:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=0f022b290ee598b3205bfe1305706f9e57edc4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:82:e1:26:5b:70:60:ea:b9:44:83:eb:60:
86:7b:cb:c1:88:ab:c9:74:55:8d:3c:1c:c9:5a:44:
f2:b9:f7:66:0c:c3:44:d8:5b:93:1c:95:39:42:f8:
4f:aa:6a:8c:8b:9d:03:84:9d:52:4e:ea:d7:3b:3c:
86:ec:6d:60:c0:97:32:b0:cb:95:49:b3:57:87:fb:
2e:11:3e:5c:95:fe:e0:23:c3:9d:4a:fd:4c:84:df:
fa:3e:8e:8c:c7:a6:b0:ed:f1:5e:a4:80:be:58:5b:
e6:d1:d6:fe:c8:a5:bf:1c:11:01:fc:08:5b:d3:80:
62:4a:57:1d:4a:84:4f:42:ae:06:37:8b:8e:d8:cf:
0b:e9:94:ef:0d:82:0c:53:a4:96:7d:1b:f0:52:04:
11:34:11:71:2a:31:0b:bf:2b:6b:53:86:fe:73:85:
8a:51:fd:e3:75:32:63:6f:4a:c9:01:a9:e9:1a:00:
63:f0:4a:b9:27:fd:45:10:28:df:59:1d:6c:8e:ca:
9a:61:f0:95:f7:d8:74:c1:63:d6:17:81:09:39:86:
e2:be:a6:c2:aa:cf:41:58:dd:9d:1d:6b:92:fe:29:
bf:e7:39:95:58:8e:46:8e:09:58:1f:16:c4:02:7f:
50:f1:04:a5:78:c1:1e:fe:e1:04:15:ba:4a:7c:c5:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:02:2B:29:0E:E5:98:B3:20:5B:FE:13:05:70:6F:9E:57:ED:C4:D8
X509v3 Authority Key Identifier:
keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:76:e0:f1:9a:ae:26:5f:4a:ce:16:87:16:11:f6:6b:49:b0:
fb:df:bf:17:6b:7c:83:b7:11:ed:f6:b6:8e:23:45:00:0b:3b:
b3:2d:60:eb:c9:e5:a9:ef:82:f1:db:2a:f1:45:2e:b6:ac:bf:
e4:29:23:5a:8c:8f:8b:37:3a:a6:4d:df:49:5e:68:2a:dd:d7:
3a:0e:c9:e6:da:f9:5f:8a:94:81:4c:80:89:5b:a9:f1:92:35:
7c:f6:26:c2:41:e8:3d:b4:1a:3a:d1:64:89:12:76:e1:7e:26:
65:70:fb:5f:71:00:0f:0a:a2:df:27:85:17:75:3a:0a:20:e1:
60:53:f5:2f:e3:0f:07:eb:5a:70:dc:c5:a5:2f:71:58:ed:b7:
f1:6a:c5:48:7a:9c:f4:b6:d9:c7:08:9f:a0:22:fe:bf:aa:d0:
80:bf:7a:ab:e4:42:a7:25:c9:0b:20:69:bd:dc:8c:f6:7b:fd:
84:ea:ce:60:84:27:94:95:88:ed:ef:d4:7c:bf:9a:82:43:9a:
fa:1b:a0:b7:85:eb:26:2f:b4:dd:57:ac:c0:99:ca:55:f7:1d:
05:93:ff:cf:2b:f2:49:7c:d4:ea:bb:a0:5a:0e:89:62:76:e2:
58:c9:61:d0:22:26:76:d3:5c:b0:11:58:f3:1a:90:fe:61:da:
b0:e5:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:59 2026 by rpki-client