Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: H78H9hA3X+ypjzTtYOzHg3X5I9Pg/siem2SY5ZVliHk=
Subject key identifier: 4B:9B:37:58:12:99:49:3E:E3:DC:B4:8D:59:F9:16:80:1A:48:D4:B5
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 019D9B19FCB70D93059D298012AAE4EB2DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 129E
Signing time: Fri 17 Apr 2026 11:01:04 +0000
Manifest this update: Fri 17 Apr 2026 11:01:04 +0000
Manifest next update: Sat 18 Apr 2026 11:01:04 +0000
Files and hashes: 1: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: Iy2uWPRNPStUpZsg0xJQiM8IuQ/78pjXv+DdDOLorJA=)
2: Y0kWTJNEeoRy8MGbIFO5TAU7Xjg.roa (hash: FhwuGsqg5qv9vqOR+yg/RFF7XmZsYJAD0kJ1Rn+2ar4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:fc:b7:0d:93:05:9d:29:80:12:aa:e4:eb:2d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Apr 17 11:01:04 2026 GMT
Not After : Apr 18 11:01:04 2026 GMT
Subject: CN=4b9b37581299493ee3dcb48d59f916801a48d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:e5:05:31:9b:9a:b6:f3:97:ef:ed:25:8d:
36:a0:19:b2:72:02:c5:7f:d2:eb:0f:d9:6c:52:bd:
1e:70:be:86:38:90:1a:14:ec:fa:22:f4:42:ed:1e:
6d:e0:37:8a:8b:82:aa:d3:41:ad:9a:2f:cf:67:e3:
95:1b:c1:dd:95:1b:ba:2f:22:c4:f7:9d:c2:9a:89:
55:75:dd:cf:da:e2:fa:e6:3b:76:30:9a:7b:72:51:
e1:77:08:ac:ba:a5:67:92:6a:56:82:aa:bb:3e:96:
95:39:44:f9:58:69:02:24:8a:bc:38:db:29:2e:a2:
21:32:43:00:c8:de:88:87:cc:bf:42:99:95:7d:d3:
5e:65:37:7e:ae:4d:d4:02:e8:66:71:d1:22:4e:c0:
36:81:a0:a3:2a:ce:c5:92:e1:05:08:3c:c0:e4:1c:
15:81:42:9d:66:51:23:5c:db:98:f8:e6:40:75:9c:
43:ab:87:9e:2b:d4:9f:16:72:ab:56:e4:e1:10:5e:
16:97:c4:f0:52:d6:11:9a:75:cc:27:ff:67:7d:d3:
cd:52:02:19:54:4b:f3:6e:3f:53:40:af:75:53:21:
ce:f2:5b:56:0e:da:d8:ec:1b:83:69:2c:67:59:3d:
1a:c6:79:94:bd:d2:78:1e:0c:f5:17:11:1c:51:cc:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:37:58:12:99:49:3E:E3:DC:B4:8D:59:F9:16:80:1A:48:D4:B5
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:b8:0b:57:a9:9a:24:ba:5a:f7:6e:4d:2f:54:cf:7d:3b:
4f:36:9d:07:cb:a2:e3:04:08:22:1d:1a:b1:1d:7d:2d:de:c5:
a6:56:ee:d9:3a:9f:6f:fd:7e:78:fd:93:47:e0:ab:ee:aa:f9:
70:c0:45:c7:46:f7:2d:cc:18:63:6a:17:a0:24:00:1c:9b:95:
e9:1f:05:3a:45:c5:3d:55:b1:dc:77:46:8f:59:69:6d:98:60:
bd:77:d3:10:39:31:62:84:91:20:4a:c2:58:32:9e:23:8d:06:
b8:3b:87:81:38:52:42:cf:81:7f:6a:2d:3b:91:1c:50:5e:c9:
3c:54:90:82:5e:a1:b3:59:73:f7:ac:18:14:d0:d5:f9:66:6c:
65:93:30:2e:4e:af:5e:e0:46:41:ee:5b:c4:97:26:b8:01:cb:
45:f4:d0:22:85:b7:01:6b:d8:87:0c:b0:31:9f:38:ab:ba:63:
5a:cc:18:89:56:b0:d5:1e:87:94:85:a1:bc:ae:48:fc:5b:ca:
ea:8f:1b:e5:73:f4:53:a7:0f:cd:f0:cb:f9:c3:bb:29:54:73:
c3:02:bd:a9:62:a2:36:4a:cb:53:0e:c6:6f:aa:69:01:cc:c3:
80:65:9c:bc:df:5e:2c:0b:fe:84:b5:b1:85:ac:27:37:2e:33:
b3:a7:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:25 2026 by rpki-client