Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
File: JsydUAfABYmTKbzuNmMwijfUDq4.mft (raw, json)
Hash identifier: 7YvcQhZIN4iG8+mXbFEtzfRorMrz8YqpwnOB5UaGHZk=
Subject key identifier: D1:4D:AF:5A:AC:2E:07:B1:0F:B5:82:C2:2E:A9:9E:20:BB:2D:88:57
Authority key identifier: 26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
Certificate issuer: /CN=26cc9d5007c005899329bcee3663308a37d40eae
Certificate serial: 019D977499B2B50E9797824B66289945148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
Manifest number: 087C
Signing time: Thu 16 Apr 2026 18:01:34 +0000
Manifest this update: Thu 16 Apr 2026 18:01:34 +0000
Manifest next update: Fri 17 Apr 2026 18:01:34 +0000
Files and hashes: 1: JsydUAfABYmTKbzuNmMwijfUDq4.crl (hash: fk0CXkMi4F6a+EgBJx6tDwucRcVVKipYCvXybWhnQSY=)
2: gW_qGfKQeIjCzm5uq8uaZ6bICSo.roa (hash: kRJ+XX/gU6aPLqrNsFhQwdwg4zAQl3rYc3y2VSOo9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:99:b2:b5:0e:97:97:82:4b:66:28:99:45:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cc9d5007c005899329bcee3663308a37d40eae
Validity
Not Before: Apr 16 18:01:34 2026 GMT
Not After : Apr 17 18:01:34 2026 GMT
Subject: CN=d14daf5aac2e07b10fb582c22ea99e20bb2d8857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:f8:41:86:50:1a:31:ac:46:5f:29:d7:83:
5c:b7:77:00:5f:ab:a3:a3:e8:cd:b4:b1:90:25:67:
ea:cf:4b:4b:46:04:5b:b8:f0:b6:f0:6d:cb:e1:87:
6d:57:3e:e5:19:a6:5d:63:df:22:b5:a0:4e:d6:6c:
e9:95:b7:28:62:b6:c4:b6:64:bc:5f:e8:21:fb:f0:
aa:40:ae:01:d0:04:3e:58:9b:54:52:f6:ed:7d:c2:
53:d8:42:d4:c2:a0:fd:cb:23:56:aa:08:00:a9:30:
2e:35:5c:91:83:f3:df:60:d4:ea:17:d5:f7:f9:82:
2f:bd:2a:07:a8:c9:94:9f:1e:5b:45:1a:37:cc:a6:
f4:0e:5e:c1:0e:2b:bd:22:a9:4f:a4:ed:78:24:e7:
28:b8:ec:9c:2d:17:1f:5b:db:38:b0:a6:66:1f:6a:
85:52:d6:2c:6e:6e:73:cb:7c:46:28:b1:48:89:2d:
39:f5:bd:fd:9e:ae:37:20:36:ae:20:c2:5e:e1:83:
0c:f7:e0:54:88:68:35:3f:bc:c4:d3:59:cc:02:0a:
4d:e3:e6:4d:c8:80:15:af:9e:f9:e9:73:43:96:c0:
27:d2:64:33:81:be:df:32:b9:70:d4:27:ed:4c:4c:
8e:41:9f:cf:6f:e6:4e:5c:ef:44:90:6d:6a:25:c1:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:AF:5A:AC:2E:07:B1:0F:B5:82:C2:2E:A9:9E:20:BB:2D:88:57
X509v3 Authority Key Identifier:
keyid:26:CC:9D:50:07:C0:05:89:93:29:BC:EE:36:63:30:8A:37:D4:0E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsydUAfABYmTKbzuNmMwijfUDq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1dc45a-21eb-4cc8-90b8-3cba4be4c29e/1/JsydUAfABYmTKbzuNmMwijfUDq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f2:54:c7:b9:f6:b5:d7:b5:3b:96:f7:e2:45:a7:c5:32:0b:
48:2a:f1:cc:a2:16:52:8d:fc:9e:8e:a6:f2:fd:20:b9:2f:c6:
8c:1f:58:0c:22:a8:86:f1:bd:7c:cb:85:bd:57:19:da:e0:65:
1a:08:31:bc:77:5a:47:b6:c1:b3:33:d2:b5:11:99:0f:f6:42:
5b:ae:0e:71:92:b7:91:33:90:1a:bd:54:2c:d9:bb:a4:99:b5:
c5:5d:6f:41:fb:f1:e4:3b:26:e1:69:92:41:44:d9:45:cb:9d:
bb:bc:dc:cf:90:02:a9:04:41:3a:53:9c:48:2b:33:f1:dc:c0:
5a:bd:58:7f:a7:a2:14:38:84:6b:d1:2f:6f:f2:e7:0d:11:1c:
59:21:d9:8b:f8:cd:93:db:00:b9:e1:b3:b3:bc:87:07:80:dc:
a5:c1:14:3b:d3:ca:55:b7:ca:ad:d2:b8:6a:4e:0e:46:9c:c6:
6d:5d:92:e6:6e:08:b6:e9:e5:ba:7a:b7:82:a7:3a:eb:26:06:
27:a9:a7:d2:64:ac:d4:0f:a5:52:ce:4b:a1:18:f3:ee:fe:aa:
e3:1c:a7:52:dc:6c:0e:e1:5c:2d:06:15:ed:60:e8:ca:44:36:
c8:f2:84:d4:4d:33:f1:23:ef:ed:7b:51:ff:c3:21:29:e9:41:
81:3a:ab:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:54 2026 by rpki-client