Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: GYDSxCZg0+9nSkTEJUhrqPkQ6dIv3Bs6MoVGfRX9GLA=
Subject key identifier: EF:64:0C:D5:31:F0:33:3A:6F:22:AD:DB:09:08:23:8A:03:4B:20:6C
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019D9BBE45587BF226CBB8910FD8F0868FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 14:00:31 +0000
Manifest this update: Fri 17 Apr 2026 14:00:31 +0000
Manifest next update: Sat 18 Apr 2026 14:00:31 +0000
Files and hashes: 1: Jo4sL8lXLvyWdPSWoSkZwZCVJ04.roa (hash: bS0A196A1VxcXT/9qLUtNV5FjCCPOQid0Srt7nWffI0=)
2: bMn_23nrCl28y9SYIcSyjUBIZLU.roa (hash: CTefdSkQHU087fuAHIXzkavwf4EoaAetVJZcdLfAn7c=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: m5ngHcx0hrqMy+CpzxY+iqT+heUgUy2+ZoxQ1DEaLac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:45:58:7b:f2:26:cb:b8:91:0f:d8:f0:86:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Apr 17 14:00:31 2026 GMT
Not After : Apr 18 14:00:31 2026 GMT
Subject: CN=ef640cd531f0333a6f22addb0908238a034b206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:8c:ba:5c:d5:9c:a5:8d:9d:c6:2e:88:91:
7a:9e:a3:18:6e:68:ba:c8:0d:b3:fd:80:cf:40:e7:
fa:3c:4a:75:5d:83:2f:55:6c:0a:a2:48:81:75:cd:
4e:60:2a:9e:1c:61:29:6c:31:5d:19:95:90:aa:3b:
58:fe:c0:79:3f:12:e3:be:69:eb:30:9b:de:0e:ef:
97:77:12:c2:54:36:54:b0:46:07:cc:91:ea:b5:0b:
a2:89:ac:9f:1f:42:b2:dd:ef:9c:60:a7:2c:3f:15:
0d:c9:17:6b:ff:f6:ae:4c:ff:dd:8b:0c:95:ab:76:
32:f4:ee:2e:c1:49:3f:2f:74:79:b6:ab:99:60:4f:
cf:6e:99:ab:e6:6f:86:d5:97:e4:56:88:aa:87:af:
a0:b1:59:5e:26:06:65:ee:18:6d:88:50:78:e6:7d:
4f:22:39:d7:c1:a3:6d:db:10:d0:81:44:f7:3c:37:
f6:cf:42:13:99:24:14:45:06:84:c4:a6:13:99:37:
2f:dc:4a:d2:29:ed:04:21:13:a0:82:95:a2:be:d9:
52:5e:67:94:2f:a1:41:68:ca:42:0e:93:b2:83:ae:
f2:3b:a0:66:11:ed:2a:51:2f:b5:c9:85:a6:4c:ca:
bc:12:54:e0:2e:69:5b:c3:08:be:2c:fb:6f:3f:7c:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:0C:D5:31:F0:33:3A:6F:22:AD:DB:09:08:23:8A:03:4B:20:6C
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d6:ec:9d:f9:73:d7:f7:8e:c7:2e:09:51:fc:82:d7:81:cd:
8e:ad:ae:ec:78:cf:da:b7:d0:02:30:f2:48:a2:e8:4a:98:58:
15:69:0d:0e:73:7c:5f:24:91:88:93:7f:a4:d9:a8:39:f3:f2:
a8:f2:d7:92:99:f8:92:ac:78:dc:a8:7d:e7:92:70:97:9c:55:
a9:d8:01:64:82:6b:dd:a1:45:d2:f9:14:35:6c:90:06:f5:ec:
8f:03:72:ce:2e:db:27:32:a5:1d:9f:4d:13:4a:9b:ee:86:23:
0a:15:dd:c8:d3:3d:cc:fa:7d:4f:84:96:ee:33:d3:ac:6a:d4:
93:1d:cb:d4:9f:c9:5f:3a:27:89:79:d0:3a:22:13:82:ec:86:
eb:6e:35:61:50:e8:bf:d3:47:24:e6:86:5c:24:60:42:4e:c3:
9b:59:d6:47:01:12:1c:3e:24:2d:a3:1b:e1:58:79:bc:21:6c:
c0:e2:5c:d1:a1:79:20:51:69:06:51:ad:c3:d8:c2:f6:67:c9:
6d:ef:86:88:26:82:69:09:00:50:6b:bd:69:b1:dc:9f:d1:ee:
fe:22:22:d2:80:6f:78:00:4f:a2:b1:27:6f:17:78:72:fe:99:
bb:7d:12:e3:aa:ed:82:b6:4c:a5:21:13:76:0f:97:c5:aa:31:
fe:83:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:35 2026 by rpki-client