Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: 8wf5BK6bsRVUF2wsjG9zNlif3lpoxFCuQjKBUHdHumo=
Subject key identifier: 99:D7:50:F4:93:55:BB:D3:A9:6F:3E:C6:A0:8C:BC:21:8F:7A:8F:63
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 019D9A752C6455FDCC23754589CDC6BE7878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 14A5
Signing time: Fri 17 Apr 2026 08:01:03 +0000
Manifest this update: Fri 17 Apr 2026 08:01:03 +0000
Manifest next update: Sat 18 Apr 2026 08:01:03 +0000
Files and hashes: 1: jispgru9Q4t6sawE42wYgPOMato.crl (hash: LGVpzFpWJqQK810K5qDtlBbC2P0ZaQu1bh8aw/BYjY8=)
2: rpLLN-zEc59BcyaW_IW8fwJMCgE.roa (hash: coMYH2LK5We0hlfFCOPDMsdK4brnDNXm6xfRfXEZv9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:2c:64:55:fd:cc:23:75:45:89:cd:c6:be:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Apr 17 08:01:03 2026 GMT
Not After : Apr 18 08:01:03 2026 GMT
Subject: CN=99d750f49355bbd3a96f3ec6a08cbc218f7a8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:da:fa:cf:60:0d:6c:3b:f3:b4:f5:32:74:
70:94:a5:6f:d5:c4:29:d9:fe:e6:5f:fa:ca:8e:32:
35:d7:fd:aa:d4:2e:13:cb:21:cb:da:14:e6:eb:3e:
ba:0f:36:e2:89:3e:eb:d0:0e:6c:a2:f5:c6:08:94:
f8:21:a1:e1:67:63:ee:42:e8:bf:14:36:f8:c7:55:
78:d0:8b:10:72:35:0b:e8:51:78:28:7b:10:d4:af:
a9:81:a6:3d:8d:e5:2d:1c:56:de:34:2c:fb:9e:24:
32:d5:47:17:00:9e:7e:43:3f:97:5b:4b:24:8d:39:
81:58:09:f0:84:bd:84:35:77:71:b2:db:4f:7f:11:
48:07:a7:5d:9c:b6:34:71:47:05:ff:02:32:16:cd:
b3:1e:9d:2f:00:99:69:9c:e4:b3:27:0d:96:2f:21:
ab:e8:f9:6d:cb:36:eb:20:3b:c0:df:df:f6:01:cd:
49:af:6d:d6:a5:d5:0a:e9:15:a6:73:e8:56:6d:a0:
81:f2:74:31:d4:64:66:fb:ef:b8:d9:65:18:6c:53:
78:78:11:fe:7e:c0:d0:15:0a:38:37:f6:86:de:b2:
ff:08:fa:7b:f3:df:48:9e:7d:2b:a5:e7:f8:ed:cd:
a4:75:ec:07:74:d4:b7:51:4c:1e:a8:2a:45:f0:06:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:50:F4:93:55:BB:D3:A9:6F:3E:C6:A0:8C:BC:21:8F:7A:8F:63
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:08:ef:b4:cf:50:92:aa:43:7c:79:ba:07:10:22:b8:b7:
47:a2:2b:37:ea:82:02:b1:12:a5:af:b1:ee:16:24:2e:1b:d7:
3d:29:eb:15:df:2b:80:6e:a6:3f:cf:2a:29:6c:87:f4:a2:d1:
b5:eb:18:1d:4f:26:3b:94:3f:c3:81:f0:b8:82:ce:90:5d:ea:
23:29:0d:86:90:8c:b6:e9:bc:62:60:eb:5d:bd:0b:fe:05:2a:
69:3d:cf:26:e3:6c:5f:f4:cd:59:d1:7b:9c:89:3c:9a:9e:a5:
79:66:5d:d8:ce:46:52:2a:a4:10:58:99:b6:ae:8e:4d:64:60:
fe:74:e3:2a:68:23:54:40:50:26:92:98:5f:04:82:5d:ee:b4:
a9:f9:83:3c:b1:70:13:e4:9a:c7:01:aa:21:7c:27:3e:f0:79:
17:d1:d4:ca:16:67:90:16:e9:a7:54:69:c3:c9:6d:d4:d3:7f:
f1:8d:10:97:5d:e7:ed:1d:e3:8b:c1:04:26:11:28:f2:93:e1:
f7:15:a7:00:c2:ee:a4:ec:67:b3:42:2f:e1:e7:cd:4e:d4:42:
8b:be:8c:ce:66:cd:9a:40:f8:0c:21:e2:94:e0:0f:96:a5:a8:
61:f8:ab:39:c2:3d:b6:1c:77:d6:7b:a1:5f:7d:07:fc:b7:f7:
38:af:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:58 2026 by rpki-client