
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: SYTgMA/4QfbasA8vQ0ld2kI/gG+w1QKHlB/5NmXOCwg=
Subject key identifier: D4:56:6D:84:13:DF:69:B4:70:07:36:BB:22:EB:AB:B6:D5:8B:3E:00
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019DCF0740E8A2EC912F71D87FBBE3CFE818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 18B1
Signing time: Mon 27 Apr 2026 13:00:52 +0000
Manifest this update: Mon 27 Apr 2026 13:00:52 +0000
Manifest next update: Tue 28 Apr 2026 13:00:52 +0000
Files and hashes: 1: 5F8fCYtrrQdfgsAoVZA3OcbnHm4.roa (hash: AzqyrkcpbN1w6j6KveyH418q6t/qMGxkXX4rVFhWMOc=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: 2qMxirDrw2j3sohY0+D3I/jIzr89But9gsHwqhwx89s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:40:e8:a2:ec:91:2f:71:d8:7f:bb:e3:cf:e8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Apr 27 13:00:52 2026 GMT
Not After : Apr 28 13:00:52 2026 GMT
Subject: CN=d4566d8413df69b4700736bb22ebabb6d58b3e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:bc:d7:df:26:f3:76:1d:7b:1b:28:2a:72:
18:92:d3:61:83:ff:3b:42:aa:68:d5:60:a9:21:ea:
1d:5c:18:24:5c:13:ed:51:31:a6:3a:e3:a9:40:38:
fb:a6:63:82:95:47:94:17:20:6f:dc:23:cd:e3:cf:
b9:29:c5:ce:de:4c:18:11:6e:14:56:67:de:34:c1:
4a:61:2f:69:2f:49:3b:35:1b:c5:ac:2f:85:90:7f:
a7:b1:80:56:e3:6b:6c:cc:7b:25:2f:99:e0:12:91:
3f:04:60:b9:23:d7:44:57:54:e0:b7:04:db:a6:66:
5c:5c:5d:1a:df:ae:96:f6:41:de:50:1b:f8:65:1a:
41:5a:1b:c8:85:3e:32:bc:ac:67:26:e8:0c:89:67:
b4:cf:c3:a5:ac:85:7b:98:b4:ba:0d:35:72:e9:e6:
0b:6f:cd:4f:24:66:0b:e2:64:26:20:b7:5d:88:81:
6d:6e:4b:c7:fc:97:34:a4:d7:86:1e:26:dd:0c:4d:
4c:47:45:8a:ec:8d:43:10:66:c4:59:37:5e:44:b7:
6b:5d:33:93:f6:7a:c4:b6:e2:b5:99:d9:60:35:0f:
fb:74:97:1b:5d:1f:e7:e6:90:64:e3:44:b7:db:76:
8d:c7:3c:b5:0f:9b:89:e2:df:60:37:0a:27:30:77:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:6D:84:13:DF:69:B4:70:07:36:BB:22:EB:AB:B6:D5:8B:3E:00
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:95:ee:10:a8:fb:98:ec:b1:55:05:07:d1:f2:63:62:3c:c3:
40:59:73:2e:53:1a:be:69:16:61:4a:ba:e7:99:08:9a:8a:d1:
e8:e4:9b:8b:61:ed:10:55:74:47:b2:94:4e:da:50:3f:af:ae:
ed:a8:4f:b3:9b:53:c5:e4:ed:25:61:0d:48:1c:1c:44:d8:ae:
cd:25:22:62:e2:a7:e6:11:8a:86:39:80:5e:77:c4:da:95:a6:
d3:49:96:f5:78:5a:97:38:0f:ab:9c:c1:fb:6c:9d:4e:f2:dc:
ef:70:9b:55:98:36:29:68:71:78:8a:9b:04:46:fe:13:dd:6d:
8b:a6:f0:3a:53:85:e2:ce:14:98:33:31:9f:a5:73:a1:7d:a1:
32:04:2c:31:54:fc:82:55:69:bd:f2:84:9c:ed:0a:c3:6b:c2:
35:45:70:ac:ab:7d:50:b3:78:2a:30:ca:06:ea:97:5c:ee:d0:
b9:8c:99:c3:1c:6b:e6:8a:31:01:e5:89:73:91:e4:27:b8:59:
1b:5d:f4:34:0c:4f:f5:2d:b8:a3:02:01:f2:82:26:42:86:e8:
8d:50:1e:4f:36:e4:bc:ab:86:19:7d:51:ae:71:31:d4:f9:d8:
b1:a3:10:9e:2b:70:e6:57:d4:40:a8:dc:18:65:87:af:56:f1:
ae:63:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:25:09 2026 by rpki-client