Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: JAC7VTZ3/Rvl81ZyJ3wMPKlznHywPl5DAjB/BmjQc4Q=
Subject key identifier: 34:F8:3C:3D:47:AF:88:13:C2:BE:9E:95:13:7D:83:AD:E6:9C:BD:A3
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019D9AAB9DCA0DFAD1E876DB693BB9FE2FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 12BD
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: OM4KLQmzyd_Wm52APVHhgRe4ToE.roa (hash: yWOF8Zx5ObpIqx5RDQmGc/nckpLK3IVHrsfnnr9/bl4=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: wjVjWkb5pq24vKDQ93K0yI4DfL96hAme7LQxHmLigvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9d:ca:0d:fa:d1:e8:76:db:69:3b:b9:fe:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=34f83c3d47af8813c2be9e95137d83ade69cbda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:6f:df:30:a6:82:df:fc:63:3f:4d:0e:3a:
bd:a3:a7:8a:ab:bb:82:c0:af:f6:75:71:21:34:3b:
c9:e1:da:21:8a:7f:6e:13:72:de:d5:a6:d4:a8:3b:
56:35:02:a6:26:00:fc:d5:ee:64:ff:0d:1d:44:e9:
4b:f4:15:a8:71:9a:6c:38:86:ad:78:2b:35:91:b6:
4c:42:a5:ab:bc:01:3b:23:73:08:8a:e2:fb:28:1d:
e0:a3:66:ab:73:b6:ad:12:67:7e:67:a3:71:49:fd:
1b:9e:8c:33:f1:80:6f:56:3d:c0:f7:eb:7f:2e:a9:
d2:fc:86:4b:2b:85:dc:cb:83:2d:6a:f9:d9:77:49:
fa:32:9e:a2:33:47:85:de:b3:df:3c:cb:bf:bf:9a:
5b:46:88:9e:3e:f9:92:87:e0:9b:c5:7b:0d:a4:46:
f3:30:74:5f:9d:5f:f4:95:70:86:e6:c1:b6:d4:9b:
c8:13:95:9a:6d:93:d9:6f:46:03:e2:c3:f3:a6:c6:
a0:6c:03:1e:c2:50:0f:3d:49:53:20:af:3f:b9:01:
af:af:b6:f5:27:05:f6:7d:77:c4:0f:07:4c:df:58:
74:6d:a7:39:f1:ac:f5:54:ad:d9:10:fc:1e:6e:59:
ce:c6:7e:94:39:f1:6f:b4:2d:bf:d4:10:e9:58:ab:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:3C:3D:47:AF:88:13:C2:BE:9E:95:13:7D:83:AD:E6:9C:BD:A3
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:40:2d:7b:5d:d3:20:4a:b3:e9:88:8f:64:b1:0d:89:88:a8:
40:0b:7f:16:53:35:f4:9c:4e:f6:8a:52:c5:5a:a2:1e:6c:b9:
bd:a6:36:a3:4b:94:f0:57:1c:d4:ee:c9:82:51:69:c5:78:41:
8e:9b:0b:c1:77:68:e3:44:90:19:d1:f1:7e:82:bd:9c:20:9d:
69:e3:ea:7c:61:37:f7:25:65:13:8b:e0:13:5a:fd:3f:3c:63:
09:49:d1:b5:2d:7c:bc:18:d5:d0:f4:50:f4:01:a0:69:dc:fc:
5f:0a:20:14:4c:6e:de:20:29:ec:2a:3d:d3:56:0e:ab:2b:d2:
b9:8f:5b:65:5b:fa:56:33:24:f5:40:09:9a:04:3b:9f:a6:2a:
13:e0:17:d1:0d:6d:f9:1a:62:a1:84:00:79:e4:8d:bd:66:4a:
53:79:67:e6:a5:5b:69:53:67:7e:88:b0:da:de:e3:95:ab:cf:
db:18:07:bd:67:f5:cf:d3:57:38:a3:84:76:73:42:46:13:60:
9f:b2:e6:8a:3c:97:34:79:bb:4c:fe:a1:09:8c:21:05:80:2f:
21:88:da:dd:db:2a:9b:47:be:8f:ae:de:40:99:b4:6e:1e:74:
51:1b:5f:3a:51:a3:b3:7c:f8:e0:ed:55:e7:f1:eb:27:25:d4:
5b:47:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:10 2026 by rpki-client