Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: lvswt0Fl4JjlJlzEbATG/IdnGT66duPqYQEvisCgOFk=
Subject key identifier: D6:C0:DA:2B:E1:0B:9C:94:EA:A8:CA:31:E1:04:23:1F:88:03:48:25
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 019D9B198760DB6E8099776327FB8EE399A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0BC9
Signing time: Fri 17 Apr 2026 11:00:34 +0000
Manifest this update: Fri 17 Apr 2026 11:00:34 +0000
Manifest next update: Sat 18 Apr 2026 11:00:34 +0000
Files and hashes: 1: GlykVOikn4XnRoLuWNGdM56c2EM.roa (hash: PEeEYZ6zGRcz+bkEXEUMwgvLYtQPN6tXT1/DZfRULqk=)
2: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: XLICCsVC3VOj7uYmHWrBBlhQpbiimHhcfLIyPN6ld94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:87:60:db:6e:80:99:77:63:27:fb:8e:e3:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Apr 17 11:00:34 2026 GMT
Not After : Apr 18 11:00:34 2026 GMT
Subject: CN=d6c0da2be10b9c94eaa8ca31e104231f88034825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:b1:3a:a0:b4:6b:ad:3d:7f:44:c4:38:44:
08:d2:ae:9e:13:2f:04:c8:8d:ff:57:c4:bb:9d:ed:
2a:d4:ef:2f:70:06:44:f5:df:de:e4:e2:9b:33:d1:
7f:82:66:f5:2a:60:67:97:11:6f:20:42:ec:f8:f1:
7c:24:bd:73:13:2d:36:45:b6:77:35:8d:db:44:b9:
a5:60:6f:ac:30:c3:34:80:1f:76:05:ec:a0:60:8c:
42:8b:b7:bd:73:96:64:6e:a6:85:3e:73:99:5b:41:
80:23:3b:fc:47:fb:62:3e:9f:00:08:26:d6:78:19:
fa:ad:63:f0:7b:2e:9c:a8:96:af:65:c7:d3:fd:13:
b6:ad:ed:b9:91:e4:f2:22:89:64:6f:61:f9:5b:37:
ea:dd:af:02:52:0b:96:b7:2f:ea:b7:b9:46:b2:e3:
8d:2c:ab:99:a6:4b:44:6f:25:50:cd:c7:92:24:3f:
41:49:7c:db:7e:61:27:70:97:5c:51:7d:e2:b1:3f:
c7:d8:05:da:ea:43:02:15:9e:03:79:d0:9e:e0:20:
cd:74:d7:a1:22:30:56:bc:14:7b:7e:08:3e:15:65:
89:af:e8:90:33:c4:0b:bf:b6:7b:96:d3:73:0b:0f:
6c:c7:75:21:01:7d:41:7c:28:69:83:9e:8c:94:52:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C0:DA:2B:E1:0B:9C:94:EA:A8:CA:31:E1:04:23:1F:88:03:48:25
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:84:3f:1c:db:72:aa:a8:a7:2a:f7:b8:e5:36:4f:37:97:
4d:76:1f:ad:6c:71:39:8a:da:d6:f5:45:51:1c:2f:98:67:ed:
8a:2d:2a:0b:17:84:37:da:85:11:6e:41:c8:5f:80:9b:5e:7e:
c9:1c:d8:06:60:52:db:ea:f9:41:6f:d3:81:fa:82:ff:4d:22:
e7:02:26:48:fb:81:02:cf:99:0b:bf:a4:9b:9f:8c:48:c3:78:
bc:e8:a5:bc:b1:43:83:01:55:d0:e1:f8:be:a3:b4:61:a7:9b:
e4:3b:df:85:72:eb:43:03:eb:80:7b:f3:ed:fd:ac:0a:e3:51:
19:38:12:a6:d3:7d:24:a6:5d:e3:42:bc:a1:61:28:1e:0c:be:
89:02:86:8a:1e:0d:f9:af:9a:53:49:f6:40:b7:f5:7b:c1:f7:
6e:17:d4:50:77:c3:b2:26:bf:12:78:d4:d7:c5:79:b1:e1:35:
f3:3b:e4:85:52:b8:f7:d7:d4:ca:f7:fa:25:b9:95:3e:2c:b0:
f5:ea:be:c8:35:42:71:be:9f:40:26:45:86:dc:1b:03:c0:73:
2c:db:cb:67:98:8b:b5:b5:c1:65:fb:47:8e:04:7b:48:33:d5:
cd:1a:92:33:9a:58:f0:af:c7:38:c3:05:8d:e3:8e:9f:df:b1:
47:83:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:23 2026 by rpki-client