Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: Y5izkZcLbIqqK+Km3e5+RBJdYFs5uEF7Ju9XCeeQago=
Subject key identifier: D4:5D:FB:3B:F5:10:4E:4F:61:60:9B:F1:48:5C:AB:33:04:C5:41:5A
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019DCE99B57D0367C87A02F0FFD8EBB88C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 1504
Signing time: Mon 27 Apr 2026 11:01:12 +0000
Manifest this update: Mon 27 Apr 2026 11:01:12 +0000
Manifest next update: Tue 28 Apr 2026 11:01:12 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: jNyb/LWOuuZjad5gACDanUzc0s5UHx3pCPkuSb/7s0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:b5:7d:03:67:c8:7a:02:f0:ff:d8:eb:b8:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Apr 27 11:01:12 2026 GMT
Not After : Apr 28 11:01:12 2026 GMT
Subject: CN=d45dfb3bf5104e4f61609bf1485cab3304c5415a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:b5:6e:81:0c:4a:df:1b:bc:7d:3d:0f:09:
78:5a:be:72:a3:d8:eb:d4:69:16:a8:5b:28:e6:72:
3b:39:c4:91:91:16:08:8b:dd:05:8f:44:8f:2b:77:
a4:2a:03:8f:0a:83:12:5d:90:69:50:4c:96:bb:b3:
a9:e4:db:2e:79:fd:f5:26:3d:fe:e6:19:bb:02:65:
37:d4:42:f0:da:46:15:b6:83:c7:53:ef:cd:69:0d:
26:8d:fb:80:f4:14:70:ca:6e:f8:4a:40:32:dd:25:
8b:db:78:22:63:85:11:49:7b:fa:2e:81:bb:2a:c4:
8d:4f:cf:d7:d8:12:14:74:87:08:02:8d:60:79:f2:
fd:63:05:b1:1f:f6:9b:95:15:9d:c9:41:62:25:84:
ae:23:e5:03:74:02:91:81:2f:73:cb:2c:df:24:7c:
a0:5c:58:ae:03:95:a1:60:ae:8e:09:ae:27:2f:c2:
e0:b6:b2:38:da:4e:ee:7f:b3:48:41:70:9a:da:7c:
49:c7:45:65:32:23:84:6d:fa:9c:f7:83:49:7e:27:
3a:7e:9c:20:5f:ba:28:00:13:6b:8d:e9:be:93:27:
2f:10:a2:24:58:ea:0d:4a:39:ea:ea:7a:03:47:27:
38:82:66:40:c5:4d:34:d4:90:c2:dc:8f:a3:6b:31:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5D:FB:3B:F5:10:4E:4F:61:60:9B:F1:48:5C:AB:33:04:C5:41:5A
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8d:17:82:67:03:f1:a3:bd:f8:8d:84:ee:8a:55:6c:f3:e0:
52:45:e8:10:30:72:76:02:af:10:73:e5:45:e4:48:3a:b9:50:
a1:c8:39:1f:19:75:cf:31:64:90:6f:88:84:fe:a2:14:90:47:
88:bd:ef:47:16:6e:65:7a:b7:c2:7c:3f:a3:a5:ed:96:70:7c:
ec:94:77:7a:a3:4a:e8:c7:54:5f:09:ff:50:d5:f2:c2:f5:7b:
74:45:f3:29:c0:9f:73:c8:56:79:a9:d2:7d:ec:33:03:03:3f:
be:ab:e4:f2:78:91:19:2a:09:11:64:fd:5f:32:37:3c:8e:cf:
5a:90:40:98:2c:b9:02:af:2e:c5:af:46:c1:83:44:6e:43:f2:
34:2b:f5:96:e8:27:13:b1:a5:47:d7:6a:8c:c2:3b:5b:68:08:
cb:5a:e8:7e:6f:74:de:e5:09:99:1b:b0:71:a7:34:ef:20:15:
79:80:65:76:75:04:ae:8c:8c:5d:d8:6a:6c:d1:85:65:67:9a:
30:6b:d7:61:be:3a:04:a7:f2:49:20:81:ee:c0:53:07:0d:8c:
5b:d4:3a:92:0c:bd:8a:e6:64:de:aa:ac:ea:44:0b:89:93:91:
8e:7e:63:f6:bd:5c:a1:bd:ed:d4:38:1f:dc:f0:20:3b:ac:11:
89:9a:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:32 2026 by rpki-client