Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: rhED0GS4lUDGTvqKvF/9vJX32ykV0pMBa3CAPhIOum8=
Subject key identifier: 63:2D:98:62:9F:E8:D6:35:92:4B:B0:21:84:F9:34:BE:35:71:CF:6D
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019DA3E653B9BA543C913D45488847DF2D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 078D
Signing time: Sun 19 Apr 2026 04:01:14 +0000
Manifest this update: Sun 19 Apr 2026 04:01:14 +0000
Manifest next update: Mon 20 Apr 2026 04:01:14 +0000
Files and hashes: 1: 13QEtilMsPvjSBACtmSM2gevovs.roa (hash: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU=)
2: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: bYJixulKkhIxaf8CSfAVaLM+m5gIlGmA11S2qc0lnTw=)
3: UvLYNIhvwJQmFVsOPpU_BD36ddY.roa (hash: yXxmCleC93S0pqurn9Uelv8pljT932UA9IhlOEdPEeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:53:b9:ba:54:3c:91:3d:45:48:88:47:df:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Apr 19 04:01:14 2026 GMT
Not After : Apr 20 04:01:14 2026 GMT
Subject: CN=632d98629fe8d635924bb02184f934be3571cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:01:3a:3c:20:50:5a:a1:39:9c:58:46:3b:
08:da:e4:36:b9:09:d7:07:18:90:e4:be:a8:bb:3d:
b8:72:15:f4:77:7b:8d:48:67:da:7e:6d:c2:54:e9:
bb:93:c0:63:3b:30:74:00:07:4d:10:01:30:bb:f4:
64:a3:0f:91:9d:fa:79:8d:c3:a3:c7:38:3d:88:bb:
1f:8a:27:61:bf:9c:fa:e8:78:eb:5a:dd:af:00:1c:
84:ea:27:07:5c:b0:0f:91:f1:cd:fe:57:31:3a:f2:
ba:97:2d:8c:13:70:62:71:ff:a2:e8:c3:4a:b9:8a:
90:46:40:66:8e:ae:26:b1:ff:89:41:ff:f7:4f:07:
18:24:e0:5b:20:ec:b8:cc:18:bd:45:e8:4f:52:d2:
a5:4f:e1:c5:60:8b:17:90:93:d1:32:e9:0b:05:7b:
1f:a6:40:0a:76:6a:86:51:82:26:0b:fa:4a:3b:16:
af:fe:96:c4:38:d4:6f:e8:de:2e:94:b8:0f:13:99:
55:2a:81:d8:6a:17:e2:6b:c9:78:fe:00:ef:73:ec:
7e:2b:c3:97:8e:7a:e2:ac:1d:6f:36:2e:ed:59:18:
b5:4c:ba:a6:2e:de:d3:dc:d7:e4:7d:12:35:e2:bc:
ff:42:fe:de:0d:da:7e:44:67:77:f8:2f:b6:87:35:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:98:62:9F:E8:D6:35:92:4B:B0:21:84:F9:34:BE:35:71:CF:6D
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5c:1d:50:cd:fa:af:4c:47:3f:39:f6:89:23:36:0b:9a:fd:
c0:0e:8b:8c:ae:a8:54:7a:af:89:46:02:cc:b4:d5:0c:03:7c:
51:96:14:6e:32:97:35:df:41:07:8c:55:c3:3b:7e:af:ce:84:
5d:74:57:0e:41:c7:ed:b9:01:52:9d:5b:ef:a0:50:67:d3:b4:
ca:2c:80:11:ee:5f:f2:d8:23:0d:57:cc:93:55:cd:00:22:1e:
42:5a:11:6a:a9:65:bf:e8:9c:19:b6:f0:dc:43:da:85:39:f8:
e4:3e:16:fe:5a:fc:84:d9:8b:94:7d:01:e0:45:88:1c:08:76:
17:92:ed:08:c7:1a:cd:81:8b:63:2a:2d:71:aa:b8:bc:05:1c:
27:7d:d6:fd:10:72:57:59:36:2d:39:b0:4d:16:87:ae:eb:9b:
9e:4c:41:29:82:31:71:b4:16:3d:df:51:2e:0f:0d:34:f0:da:
56:68:b4:a3:5b:2b:45:8f:e3:85:73:84:68:88:7c:6f:04:bc:
7d:3e:f1:42:5f:3e:c7:23:79:17:79:ec:72:08:92:1d:f9:0c:
de:56:15:5d:1a:b2:3a:10:2a:56:37:30:ac:37:83:c8:88:94:
de:3f:b4:9a:d0:1b:73:a5:62:da:e5:7e:be:96:f1:e0:5d:b8:
cf:9b:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:09 2026 by rpki-client