Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: M3wE7idbxXnMGGIpZajt2XEYTKDwo5or0vTfwOHPcBg=
Subject key identifier: 58:9C:B4:37:C3:84:64:C1:E5:13:27:91:D4:46:40:70:5F:C9:4D:E2
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019DADFBDD2872CE229C30EC31913BECB7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 185F
Signing time: Tue 21 Apr 2026 03:00:57 +0000
Manifest this update: Tue 21 Apr 2026 03:00:57 +0000
Manifest next update: Wed 22 Apr 2026 03:00:57 +0000
Files and hashes: 1: jn9K_pC0GX4USuWZkNDQAr2-7bI.roa (hash: aZdHO+TkGWUBAKzieBcFCMZv2bHsKGiPJwYHudRBqcI=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: EblAN87LHg5JCxrVnPVOeZ/vrGk4TjeuN4aLBoHi/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:fb:dd:28:72:ce:22:9c:30:ec:31:91:3b:ec:b7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Apr 21 03:00:57 2026 GMT
Not After : Apr 22 03:00:57 2026 GMT
Subject: CN=589cb437c38464c1e5132791d44640705fc94de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:bd:e4:de:36:3b:6b:64:40:21:74:80:b4:
56:49:98:9b:1e:7c:30:ac:d8:40:e0:e9:3f:5e:95:
6a:d4:8d:a8:d4:23:52:4f:fe:77:9b:b6:13:97:04:
cb:a5:03:84:43:80:66:46:94:d3:93:1e:c5:c9:56:
8a:d4:ee:4a:00:bf:7d:94:2a:0d:cd:87:c0:d6:ae:
82:9b:2b:30:5b:18:aa:31:16:ed:06:06:64:ae:58:
1b:bb:5d:b2:37:8e:10:6e:70:a3:6a:7b:1a:4d:f0:
23:13:19:42:06:40:c1:ed:b0:4a:92:9f:e0:59:a1:
a6:92:83:a6:c0:db:74:82:e7:5c:d4:83:b9:9c:76:
db:bc:81:5e:a9:cd:0e:81:d8:9e:4d:c3:69:3b:91:
6a:9d:a2:25:ef:47:56:da:21:95:83:0e:9d:db:1d:
45:b9:00:dc:f9:b0:06:ab:85:e0:d8:2f:2c:56:1f:
f0:6e:ad:de:1c:bc:f0:08:c0:f5:0b:6c:ab:90:04:
5c:c4:3e:10:79:99:f2:66:a7:6d:3a:99:f8:df:5b:
45:ad:24:e8:85:27:c2:74:aa:8f:ba:8e:6b:09:c9:
cd:db:de:c6:ff:a4:c8:f3:9f:4d:24:d9:17:22:36:
78:4e:e2:78:24:7a:fd:1d:bd:46:d5:d1:f7:0c:a4:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:B4:37:C3:84:64:C1:E5:13:27:91:D4:46:40:70:5F:C9:4D:E2
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:9b:c9:60:7b:00:3b:ce:27:22:3e:de:18:69:a9:a6:8f:
96:73:e8:e9:76:a0:bf:d3:36:48:09:37:11:a8:d3:41:0b:37:
00:b1:82:13:58:44:bb:a6:0e:3b:a6:3c:b7:ac:ce:0d:d2:28:
6d:56:04:63:f7:17:b3:9d:82:ae:5f:39:1d:87:f2:2f:2f:6f:
dc:16:fb:23:e6:a7:04:2d:a3:9a:93:79:bd:c5:b8:79:49:57:
1d:e8:af:ca:d2:0c:58:c9:58:36:bd:fe:0a:31:df:53:4b:8b:
c0:c2:e8:e4:e1:38:e9:f4:a8:89:01:e5:69:4f:91:6c:d1:4b:
27:6a:04:c0:cd:0d:53:a9:cd:fd:e6:ee:cb:9b:40:91:12:d8:
54:64:de:5a:ee:b9:0d:e8:ad:55:62:37:c6:69:16:75:d0:a0:
94:5d:50:a6:7d:6b:03:3c:83:bd:f0:87:9d:6a:bc:dd:26:5f:
a0:5a:46:29:70:35:c2:c3:c1:11:63:34:a4:e4:e8:e7:13:cc:
be:b9:c5:fd:7e:ff:d9:70:87:af:5c:f1:c2:09:b3:26:6e:b6:
c9:13:bc:36:4b:a0:88:a2:23:bd:ef:9f:af:36:c0:22:41:f7:
14:21:11:f9:33:0e:11:34:01:e2:26:4a:fb:05:74:a0:87:68:
69:77:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 08:38:46 2026 by rpki-client