Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: dEmvRaHJHFJJzCI8TiM5I2U9g/B5i52/SYuPJLA+eeg=
Subject key identifier: E6:F4:10:2A:54:05:B0:C0:46:5A:A6:BA:8F:73:8E:4E:2B:E8:FE:2B
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 019D9A3DFFD3888B7F398D269DE7343A37A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 041A
Signing time: Fri 17 Apr 2026 07:00:47 +0000
Manifest this update: Fri 17 Apr 2026 07:00:47 +0000
Manifest next update: Sat 18 Apr 2026 07:00:47 +0000
Files and hashes: 1: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: ZfMJwTX2wDt7MnqTpq0Q+9eoOVFvksuCkfP/I8pGsh4=)
2: ljWbO3xgpVVnVuPfMgl7G3F39B8.roa (hash: Bdl5BL0jpRyEhLx4reL1/D3qaLttRyXVouVa2c42GeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ff:d3:88:8b:7f:39:8d:26:9d:e7:34:3a:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Apr 17 07:00:47 2026 GMT
Not After : Apr 18 07:00:47 2026 GMT
Subject: CN=e6f4102a5405b0c0465aa6ba8f738e4e2be8fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:c8:c0:c5:94:6c:36:9c:9f:f8:c6:d2:20:
04:61:1e:7f:24:4b:b2:96:92:88:11:49:cf:bb:be:
4e:73:fa:50:ea:87:6f:66:d2:45:97:b0:bf:5e:f9:
87:9a:67:d0:20:d1:61:fc:d5:f5:76:e3:dd:d3:f2:
91:70:83:8c:d7:fd:c8:30:50:6d:1e:00:14:70:58:
41:58:9b:f8:3a:83:96:28:58:c0:1c:22:ed:63:c6:
64:4b:4c:6d:38:60:bf:6b:58:32:7e:3f:d3:5d:a8:
4f:25:80:60:c7:55:b4:0d:d0:eb:c9:6c:04:cd:1f:
39:80:4a:e1:fc:7c:0d:f8:b4:4e:f2:d7:0a:ff:a9:
22:5c:af:d8:96:2e:b7:28:b0:f6:6c:25:d6:0c:29:
14:12:4e:4c:3a:2e:56:51:a0:56:c8:a6:71:08:b9:
f1:04:e3:91:2d:29:ca:f6:88:a5:c4:cb:4b:53:e8:
bd:55:8e:9e:53:c5:aa:7a:cd:4f:2e:36:28:64:11:
d3:26:95:b6:d8:9e:4b:17:c6:89:3d:3b:80:15:5a:
d6:ac:cf:70:8b:29:5d:44:29:3a:96:7a:c5:5b:0c:
7e:05:c7:7c:bf:fc:04:69:01:4e:36:52:a7:93:08:
2a:92:aa:51:c5:14:70:82:35:9b:e8:e0:8f:f9:56:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:10:2A:54:05:B0:C0:46:5A:A6:BA:8F:73:8E:4E:2B:E8:FE:2B
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:26:60:7e:6d:70:a4:62:4e:09:24:06:c5:62:ff:69:36:
b4:25:1c:5a:62:86:d3:de:d4:91:89:ce:e8:bd:5e:08:ed:4e:
ce:fe:92:0c:36:a2:82:cd:fb:c7:7e:0d:84:be:a6:3e:2b:63:
69:04:34:eb:b4:50:65:94:5b:38:9e:46:e2:69:52:2f:a6:e2:
f1:2d:c1:75:11:70:73:fd:b2:e2:41:5b:7b:05:7a:2d:c0:43:
d2:2c:29:40:aa:bd:56:c3:cf:de:87:e1:f9:f7:0f:47:02:0f:
d1:1c:a0:26:ad:e1:fd:5a:fc:31:9b:e8:48:aa:a2:d0:88:a3:
39:66:f6:e2:1e:a1:e8:c1:25:29:fc:00:ae:8c:9c:1d:e7:5f:
78:b4:11:91:38:51:3a:43:ba:7c:6a:ee:72:2c:b7:43:a9:b5:
39:4c:a9:9b:3b:3c:28:aa:42:e1:46:20:35:51:52:5a:f2:7b:
42:e6:7a:19:d9:94:7f:77:46:61:ce:0b:6f:89:c1:41:35:92:
98:92:07:4a:30:ba:d9:d8:8d:b7:de:92:66:0d:d5:24:7a:c7:
df:92:9d:5b:ce:e6:63:dd:cc:79:d8:17:a0:d0:5e:ad:ce:08:
40:b7:a8:2a:09:2b:39:e5:15:93:be:17:79:02:73:66:55:e8:
a0:5e:bd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:36:46 2026 by rpki-client