Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: nJLLwfEVCPUhVAEw0GehDDbnPPlIZ5SzssfATe9cZ4c=
Subject key identifier: A3:37:7F:D7:44:05:46:85:CF:E2:9C:43:AB:B8:28:68:16:F1:FF:3A
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019D98BD6BD5C62D5E63EDE1878A69B560A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:00:43 +0000
Manifest this update: Fri 17 Apr 2026 00:00:43 +0000
Manifest next update: Sat 18 Apr 2026 00:00:43 +0000
Files and hashes: 1: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: 2oO/mhtZzz8sCm3SYLSH9hzTC1gQ3SOrKhIpPV0Ojqk=)
2: w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa (hash: q5Br3i/0tMxLM8djHNXqPKfHBcAZeWinp2LOD2kGfo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:6b:d5:c6:2d:5e:63:ed:e1:87:8a:69:b5:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Apr 17 00:00:43 2026 GMT
Not After : Apr 18 00:00:43 2026 GMT
Subject: CN=a3377fd744054685cfe29c43abb8286816f1ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:fc:d4:d5:c0:48:ae:a4:ce:c7:1c:6c:fa:
2c:44:2a:b4:99:6f:e0:81:58:7e:d6:2e:65:a3:6c:
eb:52:57:7c:a4:17:02:7e:1b:26:62:f5:b6:dc:49:
48:af:e1:5f:be:b7:4a:5a:22:27:73:1e:d5:51:8c:
33:24:c1:d6:38:75:03:09:80:4d:72:e0:ca:c2:cd:
12:aa:23:a0:d3:9c:15:d5:da:a5:71:cd:bb:ed:6c:
fa:18:c4:22:48:41:9c:f1:30:08:02:9f:e8:95:25:
93:d3:f7:d3:cf:31:7e:91:b2:97:d3:0b:da:15:55:
26:3d:5e:f6:d1:5a:49:f3:c0:58:84:94:79:05:ce:
99:27:2b:ac:43:bc:1b:34:35:1b:5f:61:ac:45:0b:
5a:0f:9a:2c:27:3e:03:9e:fa:fb:7d:29:77:fc:1a:
71:eb:a7:a6:5e:64:9b:ca:d1:8e:a8:de:2b:ad:0c:
b3:3f:84:d2:26:3f:38:63:10:51:cf:4a:a8:f1:b5:
57:ca:0e:b3:12:49:79:ad:70:14:1f:88:f2:78:09:
f8:22:2a:92:69:1f:00:b8:8f:80:a3:5c:c3:15:5e:
a8:95:93:9e:75:20:e2:19:5e:d4:4f:a9:c4:c8:10:
72:eb:37:7e:59:68:90:b1:34:44:45:7f:d6:9c:65:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:7F:D7:44:05:46:85:CF:E2:9C:43:AB:B8:28:68:16:F1:FF:3A
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:38:e8:dd:c7:14:cb:74:76:17:4b:d8:42:fe:d2:c7:1e:48:
af:ea:ac:29:9a:24:b2:58:b3:48:4b:8f:90:05:84:2b:e5:be:
b3:85:6f:e6:e0:dc:ca:dd:ed:e5:42:52:3a:4c:17:4e:86:32:
3f:16:13:bc:42:68:f5:b6:e9:65:62:3c:6a:ec:36:be:e9:a6:
c9:4e:87:1a:2f:d6:1e:1f:39:16:2b:64:53:ae:f9:f1:cf:af:
70:64:1c:88:0e:53:6c:fd:c0:69:71:fa:fa:c7:e6:dc:a7:4d:
67:3f:86:4a:2c:56:67:5b:7d:60:85:26:de:c2:41:20:1c:01:
1d:37:9a:09:eb:7c:e2:ee:51:c9:f0:58:2f:cd:08:aa:d7:f3:
ff:a0:1f:b5:3d:1d:e2:11:ca:89:2b:1b:aa:68:50:b4:93:2c:
64:73:c2:05:5e:a0:49:10:7e:5c:5f:4f:83:18:c8:b7:cb:fe:
7d:8c:28:c5:b0:1e:ba:d0:72:99:23:e8:21:6d:73:25:03:31:
ec:90:53:8b:d9:1f:60:ff:ad:a1:46:24:8f:c0:7a:29:74:e2:
62:8f:8d:0c:3a:08:98:d1:7c:3e:50:2d:94:bb:94:c7:ae:ec:
66:0e:da:30:30:cc:85:66:73:c7:22:df:53:06:9c:25:8b:48:
90:43:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:00 2026 by rpki-client