Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: Hz6pewdvleigi2IuKzfPOnXqowM3stEpL68V0Fg4kZo=
Subject key identifier: 6F:B3:14:AB:F2:88:2F:6B:82:B3:D0:B6:66:4E:01:BC:CC:EC:18:CF
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 019DA34102A1ABDCADF0704CDAEAFE1988F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 01:00:39 +0000
Manifest this update: Sun 19 Apr 2026 01:00:39 +0000
Manifest next update: Mon 20 Apr 2026 01:00:39 +0000
Files and hashes: 1: G1NkqVj8Yr6VTyyoWcdSUhUvvCw.roa (hash: CZnYGn2RTJItTzBITrNscqi0v2S9GDn0ujpdRLMbDD4=)
2: _Vs0Q32Z46fRXhG-kxJxEYZXxtg.roa (hash: xyogZ8QKw5nxXSVIno+0JDHOn4OpmuVmDGIYgg6rJzo=)
3: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: EfaRQxOvUa+A+7qOHNT3l64hvGBthvXvD+LXTi/1Xzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:02:a1:ab:dc:ad:f0:70:4c:da:ea:fe:19:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Apr 19 01:00:39 2026 GMT
Not After : Apr 20 01:00:39 2026 GMT
Subject: CN=6fb314abf2882f6b82b3d0b6664e01bcccec18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:a8:ea:8a:eb:d4:db:19:99:5a:c9:3c:6d:
47:c8:0b:e8:23:65:23:89:76:a5:ec:77:2b:62:55:
72:c1:55:16:03:49:d6:c9:dd:c9:18:7e:67:3d:01:
be:a7:b5:6c:7e:a2:a6:ad:2b:5d:8a:63:8e:e4:a2:
63:6c:fc:f7:e2:c9:60:65:b5:1a:67:7a:0e:6f:7a:
45:9b:d2:a7:10:9c:d9:30:28:6f:6d:3e:d9:96:54:
2e:81:92:2d:91:87:da:80:79:f9:8d:01:9f:0b:06:
a3:e1:16:5e:b9:dc:d9:63:cd:26:4b:3a:92:c6:62:
e2:c4:c0:99:bf:d3:9d:73:14:25:d7:f6:1e:9e:fe:
be:6f:e7:f9:c4:c8:18:42:a4:59:c7:e6:c6:5d:84:
2b:80:9d:bc:5e:71:10:50:6b:75:6d:b1:8c:29:3d:
b4:51:ce:0f:12:39:15:81:91:76:64:34:53:0e:d0:
98:9f:1c:af:8a:33:6a:28:6e:77:2d:df:03:f8:ec:
82:89:e0:3f:59:09:3c:23:0d:8a:37:6a:03:8f:fc:
ca:08:e6:c3:f1:ae:b0:4c:2d:60:76:cc:3a:e5:68:
3d:05:7a:8c:69:ca:ca:b8:18:aa:42:e3:9f:ae:b4:
00:49:a6:df:13:50:a1:94:a4:bd:f2:1a:11:20:f4:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:14:AB:F2:88:2F:6B:82:B3:D0:B6:66:4E:01:BC:CC:EC:18:CF
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e0:43:8a:55:83:a8:65:ec:95:3a:4b:d5:7e:99:3d:d8:d3:
c9:27:97:83:94:74:94:74:36:c0:8e:48:3f:5f:cb:b9:d5:57:
5a:08:fd:7d:3a:78:34:eb:a8:4c:c4:73:96:16:03:1e:58:71:
55:5a:86:13:08:d5:dd:a8:9b:65:2a:94:be:ad:29:9f:27:a3:
f7:6d:31:1b:21:d1:27:91:08:47:6c:5b:94:40:f1:47:e0:34:
45:37:84:23:45:fc:3e:b4:43:c0:64:4d:ce:27:21:0c:1a:8e:
e2:aa:b6:c6:79:0f:d2:d3:76:ed:53:d9:5e:3c:c0:d8:b7:ae:
dd:82:8a:42:d6:df:1c:3a:b1:42:c2:33:80:97:cf:7d:08:5d:
b7:7c:56:99:4a:d2:b6:ee:b1:71:03:5d:92:50:f2:2d:f4:da:
92:ea:5c:d8:33:83:ef:01:cb:d3:87:02:c2:0b:f9:9d:32:e5:
68:c6:0e:c1:6d:28:8a:39:b2:54:e6:9c:75:53:72:1d:0c:b5:
73:65:0e:9e:8c:13:4e:7a:ec:37:d3:67:42:fb:d1:6b:54:49:
24:8b:7f:94:34:f0:e1:dd:b4:04:28:f3:7a:2b:d9:fc:71:22:
a6:fc:1c:91:23:f3:d5:0c:a3:0d:b5:02:4c:b5:6b:b6:2b:99:
31:9a:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:10 2026 by rpki-client