Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: xOABIqRXnbq4aeDxtEItQE+VwXIjxgj7to/JDnCVdqc=
Subject key identifier: 45:06:43:8E:67:0E:1A:49:22:77:04:D8:29:41:85:07:A9:15:28:7F
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019D9BBE64C58B1B47381415AEF7EBD01F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 09AD
Signing time: Fri 17 Apr 2026 14:00:39 +0000
Manifest this update: Fri 17 Apr 2026 14:00:39 +0000
Manifest next update: Sat 18 Apr 2026 14:00:39 +0000
Files and hashes: 1: 6ckN970H7cpuN5SlW3wkVE1-uM4.roa (hash: 4RC2uU6qxyV9bc9Cvszgx0ISOMF1kgJvTGxyXOpdXhI=)
2: LdSpOpsyc-7BV3CaoUeOBlbAHE4.roa (hash: sCGRtI2KCA+jQQtUTNpqZX8j5KBH3bE/D1f4nUTBd00=)
3: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: RTcSVkZgZPuYgd6LfdKDFLsZsp1TnMbEw/z+DO4FhLk=)
4: yQpjhvw8i6e9KzrpvjEnSpkHzwc.roa (hash: tuojuZc92088axUvGHKz4onECSlWfJI0kA5M4lGnMdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:64:c5:8b:1b:47:38:14:15:ae:f7:eb:d0:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Apr 17 14:00:39 2026 GMT
Not After : Apr 18 14:00:39 2026 GMT
Subject: CN=4506438e670e1a49227704d829418507a915287f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:64:d4:8f:0f:ea:de:3c:bf:4e:a1:aa:27:
d2:9e:b6:8c:b1:0b:71:73:be:8d:5e:3d:88:ec:ac:
58:8c:5e:16:28:2b:15:54:d4:70:a5:b4:35:1f:c7:
ca:59:41:5a:d3:0d:cb:8e:f7:d0:fe:cb:86:f3:9b:
47:05:48:af:4b:11:8e:e1:e1:e2:1f:86:50:10:f7:
13:92:e6:d8:f6:9b:9c:57:e9:59:8a:2f:65:a3:10:
f0:b4:5e:bb:2f:8d:77:17:f3:ab:4b:23:fe:5c:b3:
62:da:04:20:1c:ef:6b:1a:4c:1e:c9:80:5c:0b:1a:
61:a2:35:09:69:74:b5:e4:ad:3f:02:09:20:95:53:
11:f2:ae:e9:2e:18:2d:e3:c2:7d:91:06:44:a5:23:
a3:34:ef:a1:35:0e:e2:0b:3e:68:dc:28:d0:c3:d2:
dd:81:3e:b9:06:e4:2e:1f:8a:c4:2a:1b:5b:7c:7e:
5b:d7:e9:7d:28:08:f1:11:69:8f:0d:ef:78:28:e3:
4b:f2:d5:37:f4:8a:85:1d:80:c8:32:40:3f:eb:07:
93:9d:c6:96:66:19:08:42:d6:4a:e8:24:74:c0:b9:
23:34:6e:2e:83:89:c0:ad:a8:19:d3:90:22:89:08:
db:08:e3:42:7e:f8:ca:8f:9d:59:98:85:8e:a8:00:
e5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:43:8E:67:0E:1A:49:22:77:04:D8:29:41:85:07:A9:15:28:7F
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d6:c2:43:c1:48:4b:09:31:af:b3:13:53:bf:a2:0a:a8:8b:
0b:86:aa:39:29:ed:6c:c0:64:aa:ec:c6:0f:c7:6a:9f:62:1b:
c2:1d:cf:e1:81:78:2d:44:d4:8a:e2:f6:1a:84:95:7c:59:16:
9f:1b:c3:1a:68:f3:66:aa:03:d2:58:d5:b5:a1:c0:53:5e:9a:
16:1b:8d:02:c7:83:53:67:a7:3f:56:3e:5e:f3:74:ae:a5:de:
a1:81:1a:b9:01:84:64:2f:22:92:93:6f:6a:43:c7:61:f1:ec:
68:f0:d9:71:9c:00:ba:63:d4:7f:6f:4c:9a:0f:e4:a7:22:e3:
7b:9f:0e:f9:49:55:8a:1c:38:43:cc:43:da:87:9c:6e:41:4f:
43:ec:35:8f:b2:5c:23:85:b7:73:1b:4a:68:a0:3c:1f:a5:22:
d8:9b:eb:fe:2c:6f:49:76:b6:3b:64:14:4f:60:a7:36:24:7c:
f1:d4:28:e2:81:52:b0:ce:66:b7:bc:34:ed:3d:69:fb:14:33:
7d:bc:61:e3:d2:e5:c4:ea:92:6f:66:68:38:d3:da:e3:7f:57:
6d:7a:84:dc:13:b3:53:09:1c:9e:4c:22:cf:27:28:91:75:33:
66:2e:55:77:31:63:ab:ea:74:a3:fa:d9:4c:7f:11:bc:61:7e:
ee:66:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:55 2026 by rpki-client