Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: r3Z9uq2KSw6iELIqcOnmMwJPTWEZ5KAJ6LUjrtMdyd4=
Subject key identifier: BD:38:41:81:7A:22:81:13:9F:9F:70:4F:DA:AB:6C:E5:8F:B8:77:E2
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019D984FACCC625BAB36C3E2AEFADB667487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 22:00:51 +0000
Manifest this update: Thu 16 Apr 2026 22:00:51 +0000
Manifest next update: Fri 17 Apr 2026 22:00:51 +0000
Files and hashes: 1: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: uZRIHlGIo1bMy86JaSsd60GaMw091pi9QMmaxNyTUGs=)
2: jj1QCdoz6DIRBrESW5B-wlAqOc8.roa (hash: ZaZ7JhsHU0NSgwU2H6qsoPOdqLQB7G06Y4u8Nuaw8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ac:cc:62:5b:ab:36:c3:e2:ae:fa:db:66:74:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Apr 16 22:00:51 2026 GMT
Not After : Apr 17 22:00:51 2026 GMT
Subject: CN=bd3841817a2281139f9f704fdaab6ce58fb877e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2f:49:1c:c4:fb:b9:ce:b1:4a:3e:f3:ec:ba:
3d:3e:38:60:47:4c:c9:23:60:f9:1a:7f:a5:f8:c6:
2d:e8:41:aa:af:21:41:2c:22:4a:60:d1:8a:16:21:
22:b7:56:a4:13:a7:49:6b:64:3c:d1:b7:22:cb:68:
25:c9:e3:d9:92:f3:d4:82:0c:13:3f:10:1b:ab:1c:
1c:81:b1:38:49:dd:e3:86:03:d4:3d:43:b4:c8:c8:
54:64:ba:c9:13:3c:4a:ce:52:f0:53:f6:59:ff:74:
3c:bd:82:ae:91:03:88:22:0e:99:48:e9:d7:1a:66:
8d:c9:e6:74:44:12:62:ca:c5:4a:0b:11:55:2e:d0:
82:51:46:a1:8b:aa:44:f0:42:b9:0b:81:9e:5f:3f:
95:42:ac:bb:b6:64:6d:3d:b0:8b:c6:26:db:3e:09:
54:83:af:f3:3f:8e:9d:7c:80:b0:95:76:33:c8:9e:
26:8a:b1:3e:5a:31:72:b7:bd:40:7e:84:b8:9c:9b:
65:3c:77:11:b7:b8:a8:5b:a0:cc:23:c3:61:a9:7a:
05:e7:6e:56:c1:4f:fe:2d:86:7f:80:0f:ad:20:da:
61:6e:06:fd:fa:d4:1a:3f:6e:c4:19:f4:94:3e:4e:
68:d4:0c:c6:40:41:70:21:09:90:5f:6f:31:0a:ac:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:41:81:7A:22:81:13:9F:9F:70:4F:DA:AB:6C:E5:8F:B8:77:E2
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bd:66:2e:0a:4a:f4:75:0f:5d:67:72:8f:ab:e5:d4:c9:74:
bc:64:f2:9d:05:a8:50:a3:7e:e8:5c:06:0b:c4:b5:6a:15:8f:
ab:89:60:b6:51:4f:f0:72:04:30:ae:50:1a:bb:55:07:88:14:
db:b7:5b:b4:4b:cf:da:27:47:c5:5a:bd:ad:70:f0:51:24:6b:
62:8f:6a:aa:f2:ea:1d:93:1a:c9:5c:33:2a:91:cc:3f:5a:24:
5d:73:14:81:d4:f6:cd:90:e9:bf:ec:35:17:59:cd:66:34:82:
ef:f8:a5:11:82:c0:44:c5:18:97:69:3f:88:59:6e:0b:e1:16:
ee:96:4b:aa:94:90:8b:49:f4:59:c7:b9:c4:78:9e:ff:44:e0:
48:b8:f2:32:3e:ad:57:fe:5e:8f:bf:ce:04:9d:0a:e1:6b:0f:
7a:e5:5b:ef:7d:c4:00:f2:c4:87:57:d1:d5:37:18:2a:01:aa:
1a:a6:b3:72:ba:09:99:c4:57:4f:ac:99:f7:fe:ca:e8:83:38:
c1:78:68:02:1a:8d:92:c2:81:92:35:e8:61:dd:e1:70:71:12:
c5:da:3d:fc:47:de:2f:9d:e2:5f:50:26:b1:cc:2d:57:83:24:
f1:0e:e0:ac:84:87:64:b8:e3:1d:ae:6c:13:4e:4e:64:26:67:
71:5f:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:02 2026 by rpki-client