Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: XOow78LJZdD8/GdhBSgQTwfRA36Ay3yqKPdXQ7CUpOI=
Subject key identifier: 4E:30:2A:9E:A4:C2:4C:1E:BA:BE:C3:03:CD:1C:19:9B:E9:79:D4:6A
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019D8F165860FDEC42EC10DF65F34B803174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 18BE
Signing time: Wed 15 Apr 2026 03:01:39 +0000
Manifest this update: Wed 15 Apr 2026 03:01:39 +0000
Manifest next update: Thu 16 Apr 2026 03:01:39 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: FDPLpqjRQqK+D9hwG99gyQmbPWTC3tXpL1u0SyE6DCA=)
2: TaLcMniYP68W_xpID_YTmpPHJQw.roa (hash: FpN6wFwhf5u/rLDXXLg50HkAwzUqczd5OywdW3G3qdY=)
3: dfxqd7-EbGdffyLZ8A8olZcFYug.asa (hash: HTZdeFHh36s+CBI2gsv3WBt1hDMpM6ApTTwTmbGKXCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:16:58:60:fd:ec:42:ec:10:df:65:f3:4b:80:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Apr 15 03:01:39 2026 GMT
Not After : Apr 16 03:01:39 2026 GMT
Subject: CN=4e302a9ea4c24c1ebabec303cd1c199be979d46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:96:f2:55:15:eb:ef:23:8f:d3:91:f4:de:
f7:81:e6:19:99:ed:c7:d6:29:dc:cb:d9:7c:02:6b:
cf:5f:4c:21:9c:6a:a0:1e:59:5f:10:76:bd:00:23:
d1:ce:0f:93:a2:fe:1a:2c:4a:ed:81:0f:13:f9:ab:
52:73:73:d2:6f:97:8f:9a:36:85:58:b7:1c:5f:c6:
fe:c7:6c:79:f0:a1:13:73:2d:f1:7f:46:53:c4:37:
f6:05:96:51:97:6c:f9:6d:92:b0:84:24:a3:00:c6:
8d:46:a4:eb:11:95:e7:9c:6b:04:32:c8:9b:fa:7a:
33:2c:a4:c9:bd:e5:f5:34:02:45:9e:9e:4d:a1:8a:
e2:2b:31:c2:5e:65:52:4e:26:53:42:83:1e:f2:00:
83:34:bd:3d:d2:ed:dc:af:2d:ca:47:f9:23:ee:ee:
04:27:52:13:82:95:9f:4d:a9:7b:0d:d7:4a:df:89:
47:6a:14:47:0a:a3:8d:a8:22:75:6d:14:37:72:52:
83:36:c6:28:c7:ba:d3:19:f8:ad:47:6c:28:34:e5:
c8:b2:f3:f8:5d:02:c5:97:84:42:3d:9f:03:ea:cb:
1e:93:36:2a:41:29:2e:ec:4c:73:a1:c6:35:6a:63:
0c:81:a9:22:3c:c2:4b:88:32:a1:73:4a:03:72:84:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:30:2A:9E:A4:C2:4C:1E:BA:BE:C3:03:CD:1C:19:9B:E9:79:D4:6A
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:1b:f7:ab:06:4a:33:c9:ee:3d:32:33:80:3d:08:2a:92:
97:83:dc:5d:9f:e5:b7:ad:75:f6:07:f9:3d:c7:26:65:24:44:
5b:cd:64:5b:43:03:dd:20:83:41:0b:bb:6d:37:0d:6e:a2:af:
1e:d0:14:6f:94:36:55:36:ad:47:4a:30:b0:f5:13:f4:d3:a7:
6d:1b:fd:4e:f6:3a:d5:61:92:a3:18:fa:43:11:94:6c:1d:2e:
0c:34:d3:54:94:c5:7a:f8:98:03:cf:69:80:a9:e8:c2:5a:67:
b2:67:b5:30:de:25:c9:89:a1:61:49:58:9f:95:4c:d0:a5:eb:
99:7a:a8:0a:d4:29:51:73:3e:f0:de:a8:e4:f8:b0:61:23:22:
74:d8:3c:74:f2:93:59:09:80:b0:25:2f:78:75:61:92:12:0c:
55:89:c5:42:40:c5:85:5b:14:27:2e:2b:01:22:e1:64:6d:72:
e6:8b:73:0c:67:c4:16:93:0b:f9:6c:9f:c7:b0:6a:61:d8:9b:
c2:a1:e6:7f:ab:21:dd:93:a8:83:f0:a2:3e:79:07:fe:f6:ae:
79:90:f1:fe:a1:44:d4:c4:93:0c:ac:79:10:6d:70:a8:34:f2:
aa:54:e7:aa:e8:63:57:9e:59:17:7a:ea:44:df:ed:95:6c:2b:
27:d4:40:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 12:30:32 2026 by rpki-client