Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: 32ohAFdS8nsipHKCCFo+MkqkMTgLO0baHsspbNljM5E=
Subject key identifier: FD:0D:C4:D8:BD:16:AC:6C:F0:D1:50:00:1F:12:87:F3:19:B5:A4:3F
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019D9A3E27B1120EE060231794D19B6A6DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:00:57 +0000
Manifest this update: Fri 17 Apr 2026 07:00:57 +0000
Manifest next update: Sat 18 Apr 2026 07:00:57 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: EhYAvD4jtDicExV9SD3Do6O3WnVS0C4g0R6AKhLlNsc=)
2: _n04tbHejANq8Ug_J-BPx0EeIOY.roa (hash: XtKxscitCuMv9T8d0VZ6njYDJbqu3csyAljLvKPr+l0=)
3: y_SBLUhzBtU72NxeeIak4RRDnEU.roa (hash: x10yvxp0EebXuA7j4nfdDlIV0rhNw6PWqLB8KW20YOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:27:b1:12:0e:e0:60:23:17:94:d1:9b:6a:6d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Apr 17 07:00:57 2026 GMT
Not After : Apr 18 07:00:57 2026 GMT
Subject: CN=fd0dc4d8bd16ac6cf0d150001f1287f319b5a43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:49:4f:46:05:96:1f:f6:a1:be:2a:39:47:
7d:14:df:00:aa:08:dd:76:cb:de:b6:e2:0b:56:37:
62:b2:5f:ed:ae:68:5d:e8:2b:95:81:c0:b7:5b:1f:
0b:23:55:6c:31:fb:8e:a7:ec:38:31:39:9f:39:22:
f9:cc:96:49:e3:e9:9d:ea:69:09:1c:83:24:51:5d:
40:39:2b:7e:40:37:0b:e0:ce:06:fb:7e:cd:28:6c:
59:ef:22:69:16:1c:67:3e:03:8c:2c:c2:bf:26:f9:
4c:e7:09:80:32:bd:0c:bf:e4:11:ee:3b:7e:14:ef:
02:a9:e9:27:90:8e:75:ec:11:0c:9c:06:f0:21:48:
4f:2d:2e:8a:94:96:8f:8a:66:33:48:38:38:76:1e:
ec:26:b4:a4:75:a2:fa:38:5d:ee:29:b3:33:21:c2:
78:b5:4b:41:0c:63:3c:9d:10:58:88:1e:0b:28:04:
41:df:1a:d6:07:a1:35:48:44:bd:4f:70:e2:84:49:
c1:21:70:0b:2a:cf:d8:1a:ee:53:5f:9f:17:0d:5d:
30:dd:51:72:34:0c:46:d1:ba:69:ff:3f:d2:35:6f:
91:bd:9a:cf:7f:a3:5f:f9:2f:4a:a2:8c:ac:67:2f:
86:c6:a4:78:cb:62:43:2a:1e:74:48:4b:b4:78:66:
f2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:C4:D8:BD:16:AC:6C:F0:D1:50:00:1F:12:87:F3:19:B5:A4:3F
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dd:4b:05:64:17:e6:1b:90:8d:7e:a0:1d:11:35:ff:46:25:
c6:00:ad:5f:7f:10:8f:e4:dc:43:a4:6d:1a:50:88:e1:fe:d4:
40:37:a6:65:d9:c8:97:fb:8a:a4:46:ee:9f:9a:9b:9e:73:43:
ea:43:b5:b0:ec:b7:2b:da:6e:b9:9a:14:ff:14:7c:7e:2b:0a:
8a:01:96:63:55:ee:9a:1a:3a:9d:dd:2c:80:ac:bd:2c:17:7e:
96:dd:dd:c1:27:67:33:f8:b8:7a:6e:c8:c7:17:51:cb:65:f9:
42:3e:51:17:0b:16:3a:ae:ad:bb:81:d3:0b:07:52:7d:57:68:
81:a1:e3:06:19:47:3c:34:66:a3:12:2e:3e:2c:3a:3d:e4:8f:
a2:24:e1:45:7c:7b:0e:fe:5c:36:89:99:68:fb:11:54:3f:4a:
f4:cf:d4:94:c0:83:cc:6c:f8:0f:55:ad:39:86:51:d1:df:0f:
54:47:7a:5e:e0:e7:a7:4d:3c:d6:7a:9f:6a:31:30:51:bd:e2:
9b:b4:69:5e:17:dc:bd:5e:64:e8:fa:3c:5e:21:50:5d:7f:ff:
f7:f0:a1:d1:95:26:66:44:3d:e8:b1:04:24:9c:40:fa:44:3b:
0e:ce:7d:ad:dc:13:0a:26:36:8d:80:83:72:09:4d:92:f9:07:
1c:4c:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:05 2026 by rpki-client