Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: 2UaeI7GeizDxrZIPwG9dl6RRSJIVBXdHIpzk/OHVd98=
Subject key identifier: 58:7D:8D:D2:EB:FC:65:92:90:37:0F:C7:B8:08:4B:63:D3:F9:3C:25
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019D9B87EBCAFC6CB29F6A7FF5A28FFDEC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0FA4
Signing time: Fri 17 Apr 2026 13:01:09 +0000
Manifest this update: Fri 17 Apr 2026 13:01:09 +0000
Manifest next update: Sat 18 Apr 2026 13:01:09 +0000
Files and hashes: 1: S3xjSwjayGWQbrifgsC5G7Sh0Xg.roa (hash: tQnt0AxldpTLTefUEnKzHOLj+HzmMNDMI0YZ04Hh8vg=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: /dd4/ZdVGzxX9WO5ldl2HMKA/rio0JKNE9Ve7XCnftc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:eb:ca:fc:6c:b2:9f:6a:7f:f5:a2:8f:fd:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Apr 17 13:01:09 2026 GMT
Not After : Apr 18 13:01:09 2026 GMT
Subject: CN=587d8dd2ebfc659290370fc7b8084b63d3f93c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:88:0e:0e:d5:97:e5:e5:ad:bf:2b:99:83:
f4:d9:e3:63:e2:e9:cb:34:cf:2b:f5:3d:48:85:e0:
1a:b5:7d:e6:ab:1c:42:98:ca:b7:fe:df:72:14:db:
f7:44:76:91:6f:ab:26:56:39:f4:9a:5a:f2:95:ad:
a9:c2:b4:02:fb:6c:35:b3:bd:53:0b:b5:33:cb:23:
c6:10:34:a9:9c:2a:72:74:eb:3c:9c:3e:ce:3a:0d:
a5:c4:80:30:4f:b0:26:9a:47:a1:d4:14:cd:c9:91:
32:22:3e:25:47:7e:31:d1:8c:08:ec:92:02:b6:a2:
94:d4:01:47:43:43:ac:90:ec:dd:b3:b3:45:a8:78:
eb:15:f1:f6:f3:e5:13:48:10:06:cd:f8:75:d1:68:
07:82:51:7c:42:d0:aa:4d:4c:41:02:10:bc:f0:f5:
e3:a9:10:75:6f:b9:78:07:9a:d7:da:5d:f2:17:81:
65:1c:e2:63:2c:95:68:49:84:5d:e7:16:6e:95:73:
d6:97:73:fe:b0:ba:88:79:5d:48:c0:50:5a:0b:4b:
2a:75:f0:02:25:8b:b9:67:8e:77:b2:db:88:06:42:
19:79:01:94:3a:57:ce:a8:82:41:e1:3e:78:d1:5d:
33:5b:53:bf:a7:44:ef:bc:5d:7a:ab:59:39:bf:7d:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:8D:D2:EB:FC:65:92:90:37:0F:C7:B8:08:4B:63:D3:F9:3C:25
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c4:a4:ba:f8:49:d5:8b:62:06:56:d1:f8:b7:38:4f:9f:43:
e1:48:64:6c:9e:b9:63:a7:ec:0c:d7:96:7a:6a:91:7d:a3:6d:
ad:2c:9c:27:cd:97:2f:71:eb:c3:2b:48:b6:a4:4e:40:50:6f:
b2:91:0a:dc:85:1a:86:82:e0:bf:6e:fd:a1:98:1d:cb:b3:f1:
90:0c:d9:73:51:5d:3b:df:05:9a:f1:98:0c:b8:f1:d0:96:43:
c0:78:10:6d:91:59:5b:98:9e:40:ea:ac:00:4c:c2:1d:e9:90:
f2:ac:9c:17:5b:7e:5b:dd:7b:96:32:84:22:ac:50:b6:3a:10:
14:ab:c2:ce:66:63:db:bf:ad:9a:68:13:44:0c:9a:ec:a5:c8:
36:c2:61:52:ff:10:79:2f:9e:46:24:7f:a3:b7:fe:69:7d:b1:
31:7e:6e:ab:cb:a2:ba:5a:ec:05:cc:ff:a3:b6:59:bd:6c:05:
b1:81:7b:6c:ea:27:f5:be:78:9c:83:09:14:b5:d1:14:10:97:
bb:ac:49:2b:76:52:0c:a3:a4:84:22:fb:61:05:25:fc:ae:f2:
ef:e8:be:af:6f:ed:76:cb:ec:db:89:b4:ef:de:81:c6:9d:5d:
5b:59:1f:ee:67:e6:4e:dd:0d:d0:59:9b:b2:de:8e:3b:07:6c:
9d:e3:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:40 2026 by rpki-client