Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: qQuqcx7N7E/5WR7rnx/bUVs+RtMf4XBcY/X4aB0IM+k=
Subject key identifier: E4:14:07:37:A8:3F:17:52:E2:02:E1:E0:DE:7E:B7:2C:E2:F4:EF:66
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 019D9AE2CE66BF007D2AD0084A5B26C2D361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0E6A
Signing time: Fri 17 Apr 2026 10:00:48 +0000
Manifest this update: Fri 17 Apr 2026 10:00:48 +0000
Manifest next update: Sat 18 Apr 2026 10:00:48 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: wJ6shKy1UY8D1I//hvTWqrTT7uwd5ISucVaCEkzREpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ce:66:bf:00:7d:2a:d0:08:4a:5b:26:c2:d3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Apr 17 10:00:48 2026 GMT
Not After : Apr 18 10:00:48 2026 GMT
Subject: CN=e4140737a83f1752e202e1e0de7eb72ce2f4ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:56:5a:2d:1a:7d:03:9f:6e:bf:a4:81:df:
cb:22:22:b1:e6:47:03:1f:bb:b2:03:51:81:9a:bd:
0c:e4:a7:bc:56:05:f5:46:16:54:0e:6a:f1:67:73:
fb:ad:35:d0:62:17:9f:92:a3:ac:4c:df:32:c5:c1:
64:a6:b8:0b:ce:cf:10:35:cc:be:42:cd:ee:ac:91:
ac:69:cc:1a:02:b4:68:a9:2b:78:a3:50:07:72:83:
bb:18:ae:78:db:d5:ca:1a:a4:43:ec:db:a4:1e:dc:
b0:f3:02:6b:a4:40:6c:92:5f:07:18:1e:83:66:ac:
c8:52:c9:64:84:79:9a:17:7f:5a:f7:56:ad:19:1f:
29:8e:9d:1f:fd:5a:52:8c:83:24:2c:0f:76:71:fb:
8f:21:c3:fb:be:2e:1a:29:e8:2c:da:28:fe:0b:5e:
88:a3:4f:4d:4d:e1:4f:02:63:65:1b:49:b7:5e:c4:
9b:ba:4a:18:0a:2c:83:5c:05:c5:69:b2:ac:be:6c:
2d:e3:71:d8:05:aa:3c:53:aa:1f:ab:f3:58:4b:32:
9f:7e:15:9a:6c:ee:18:7a:bb:a3:10:75:bf:3e:66:
e4:9b:4e:b3:f3:a4:96:b5:cc:c4:bd:06:b1:85:c4:
79:94:15:22:ca:7a:d8:b3:ea:bf:27:ee:85:09:1f:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:14:07:37:A8:3F:17:52:E2:02:E1:E0:DE:7E:B7:2C:E2:F4:EF:66
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c4:e4:60:e1:c4:f1:2d:ea:b8:8f:b2:09:b2:02:1b:1c:16:
32:9a:64:90:3e:90:61:e1:f5:a9:79:16:6d:0f:ef:ed:9b:e7:
ce:47:a2:7c:0c:03:f9:c0:c9:0f:74:97:45:31:f7:87:d4:7e:
f2:59:d7:d0:55:8b:ef:aa:7f:f9:eb:dc:c9:9e:7f:79:02:4b:
9c:39:c6:93:55:2d:c1:42:ad:31:c2:ae:3d:6e:68:4e:2b:01:
84:9a:6d:ff:8a:4d:12:97:37:58:3d:8e:fd:ed:a5:d3:d7:2d:
d5:45:45:bb:3a:90:cb:ef:6f:2d:fc:97:8f:cc:4f:a4:b5:65:
78:6e:30:b4:95:33:10:37:8d:a2:fe:99:c0:9e:1e:4e:99:e1:
a8:1a:1c:5d:44:6d:2e:29:4e:d2:e3:02:f2:48:ea:f9:30:23:
3f:00:9c:5b:e0:22:fd:0e:51:20:44:31:24:5d:c5:3d:f3:84:
5e:8a:8f:cb:f4:f4:54:0c:7d:88:88:c2:6d:82:3d:0c:ca:b1:
45:c6:b9:be:0e:2b:ab:db:c7:d6:b9:10:e1:78:49:4b:2f:44:
5a:62:e0:b4:0b:5b:2e:44:9e:d8:d3:0b:d3:05:06:79:de:cf:
fe:a7:73:c3:3c:e2:da:37:fe:32:a4:73:8c:92:ee:9d:a4:53:
e3:54:e3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4s5mvwB9KtAISlsmwtNhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5
OTcwZWYwHhcNMjYwNDE3MTAwMDQ4WhcNMjYwNDE4MTAwMDQ4WjAzMTEwLwYDVQQD
EyhlNDE0MDczN2E4M2YxNzUyZTIwMmUxZTBkZTdlYjcyY2UyZjRlZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FBWWi0afQOfbr+kgd/LIiKx5kcD
H7uyA1GBmr0M5Ke8VgX1RhZUDmrxZ3P7rTXQYhefkqOsTN8yxcFkprgLzs8QNcy+
Qs3urJGsacwaArRoqSt4o1AHcoO7GK5429XKGqRD7NukHtyw8wJrpEBskl8HGB6D
ZqzIUslkhHmaF39a91atGR8pjp0f/VpSjIMkLA92cfuPIcP7vi4aKegs2ij+C16I
o09NTeFPAmNlG0m3XsSbukoYCiyDXAXFabKsvmwt43HYBao8U6ofq/NYSzKffhWa
bO4YerujEHW/Pmbkm06z86SWtczEvQaxhcR5lBUiynrYs+q/J+6FCR8b0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQUBzeoPxdS4gLh4N5+tyzi9O9mMB8GA1UdIwQY
MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt
ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh
LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsTkYOHE
8S3quI+yCbICGxwWMppkkD6QYeH1qXkWbQ/v7ZvnzkeifAwD+cDJD3SXRTH3h9R+
8lnX0FWL76p/+evcyZ5/eQJLnDnGk1UtwUKtMcKuPW5oTisBhJpt/4pNEpc3WD2O
/e2l09ct1UVFuzqQy+9vLfyXj8xPpLVleG4wtJUzEDeNov6ZwJ4eTpnhqBocXURt
LilO0uMC8kjq+TAjPwCcW+Ai/Q5RIEQxJF3FPfOEXoqPy/T0VAx9iIjCbYI9DMqx
Rca5vg4rq9vH1rkQ4XhJSy9EWmLgtAtbLkSe2NML0wUGed7P/qdzwzzi2jf+MqRz
jJLunaRT41TjMg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:51 2026 by rpki-client