Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: DWU+1U850OA5v14B88VTTmkv4+jehYTyqMx0hTRWCWA=
Subject key identifier: 05:AF:A0:F8:0D:EC:81:AD:5D:F9:3B:8F:38:8F:66:51:68:A4:5B:BE
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 019D9A3E959C15EBC710AE6865254ADCBEDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: 3xiDzGgK4e9ceC4u7RUWp0fz_SM.roa (hash: DZHEO3sSIJCigbbB46icKw7YPH6Y87vFoZ5HjcDSncs=)
2: 9pGhFTVH5XN8vbhHpytqSGENvrk.roa (hash: LhRnX4VDOkccbXWuT427U2ER9cwZLZ0V0MGvKtu8Yyg=)
3: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: sowsuUQvrNxwHflCzeuUTOhTsIlLXqOIEEwE9YB7vFs=)
4: eEZUpEtjObJ9yeYuMAQAw_0jXUU.roa (hash: nuE7s/MKLf67lp3yMJo4q3u/cNq9UefHf0q9u+Y32mI=)
5: nNax3jH-aHbv8fUxbVL4yA04BCc.roa (hash: fqwvBl3p3PjrVK5KfWPgoqVaATaBD26mauAzKvmJgv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:95:9c:15:eb:c7:10:ae:68:65:25:4a:dc:be:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=05afa0f80dec81ad5df93b8f388f665168a45bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:52:f8:87:22:1e:73:fb:80:60:c8:de:b9:
8d:da:6f:00:10:db:e3:09:bc:5f:b6:16:a5:6d:c9:
ec:86:ce:46:52:ad:50:40:3f:ed:53:3b:47:cc:d6:
6e:2d:fa:62:c9:08:48:47:9d:e5:97:db:3e:8e:2f:
a4:eb:3f:64:57:88:86:d0:f8:54:26:9c:8e:af:f5:
5d:68:31:3c:d0:87:be:a7:7a:54:26:58:dd:0d:1c:
52:53:9a:7f:7c:85:b4:69:d3:74:16:a8:05:87:26:
1d:e4:6a:45:ac:92:9f:d3:a0:59:7d:c9:9b:e1:26:
93:9a:7c:77:f1:ce:8e:cf:f9:d4:2a:18:9c:5d:aa:
e4:e6:c8:76:52:8f:a8:8a:3c:80:17:89:44:ac:66:
12:cd:a8:e6:ce:6a:99:88:ec:72:01:9d:6a:c6:64:
fb:3d:64:27:3a:9b:fd:fa:24:48:58:f9:bb:ac:6e:
95:b3:df:82:e0:0a:bd:b7:55:e7:ee:a7:89:97:bb:
1c:d5:62:7f:c6:ea:3b:2c:6c:f9:4e:e8:bd:d0:8c:
f0:cd:e4:f4:9b:e8:43:b1:db:62:e1:ab:3c:95:51:
52:68:04:43:a1:d7:6b:8a:53:d3:73:7d:6e:b7:06:
41:65:d5:a9:f6:79:9e:cf:bc:39:9f:40:d4:bd:5e:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:A0:F8:0D:EC:81:AD:5D:F9:3B:8F:38:8F:66:51:68:A4:5B:BE
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e1:7a:c4:91:ed:b3:5f:53:55:46:0f:ab:70:08:68:76:cc:
cb:65:a6:64:50:84:b4:c3:1c:af:a4:b7:6e:a9:02:4a:10:1a:
6d:dc:e6:1c:a4:39:f8:a7:08:3a:9c:81:85:10:80:42:a8:01:
97:76:e0:26:b3:60:4c:3a:f7:92:81:a8:56:94:9c:0b:09:08:
c3:3c:92:bc:c1:d1:f4:13:d4:b5:8b:b7:4d:00:b5:d4:a6:de:
43:fe:a3:7b:21:d6:dd:42:6f:84:7d:4b:35:9a:2e:51:74:55:
6c:ff:44:9e:2b:d7:06:8e:d7:99:dc:39:bf:be:4e:21:a9:c6:
93:8e:1f:87:17:5a:07:e5:f4:03:58:db:04:05:c5:ea:13:9a:
8e:e4:dc:54:32:a4:c3:41:47:9a:05:5a:eb:18:1d:68:3e:8a:
1b:03:fc:f1:9d:6f:6c:da:8f:22:f0:b5:56:ad:16:7b:14:96:
4c:c3:d7:c5:c5:90:1d:81:72:c2:6b:18:af:c3:92:70:62:3f:
eb:11:e6:75:4e:44:89:f1:fd:eb:86:67:7e:86:11:5c:7c:dd:
95:45:3d:29:73:2e:64:1e:99:b7:db:a4:49:1e:23:87:ca:db:
04:8c:21:74:1e:ed:ad:b6:a1:04:9b:3c:60:17:98:25:97:02:
5b:3e:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:27 2026 by rpki-client