Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: R0N2gwVA6JFd0pvirln3514CwO3gCYsCKSvZ58zTRGA=
Subject key identifier: 31:92:8D:22:59:E1:0C:FF:E8:8B:D0:57:B7:29:A2:90:FB:A7:73:39
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019DCE62FB1D663D1FA915944BDFB6FD0ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 10:01:26 +0000
Manifest this update: Mon 27 Apr 2026 10:01:26 +0000
Manifest next update: Tue 28 Apr 2026 10:01:26 +0000
Files and hashes: 1: DMom3rPUm8HweXvQ4-Q9jSK3W5A.roa (hash: LnHplGcwbJiDTN78KXR+EeXnQF5rJq6ndATkaGyGt6Y=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: d0NuJER9/DAPg5Q1+tBpDl9OB4rVoA9XmA9qm3MwC/Q=)
3: zo3coJXTyvhldkMVh9gvp4uyZ_c.roa (hash: XrJ9G8/whLu/oZmZ7d5+aY/tS2aPDpwbEqSKZTYhu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:fb:1d:66:3d:1f:a9:15:94:4b:df:b6:fd:0e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Apr 27 10:01:26 2026 GMT
Not After : Apr 28 10:01:26 2026 GMT
Subject: CN=31928d2259e10cffe88bd057b729a290fba77339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:e5:fd:9a:c2:95:79:1d:4a:1a:cf:b2:c4:
5e:f8:5e:44:8d:42:fe:da:92:2d:45:5e:79:c0:67:
b7:bf:9b:06:7c:74:28:1b:1d:fa:89:4e:08:a6:fa:
f5:ea:f6:2c:0d:83:5b:6f:a4:c3:5b:d1:5b:34:7f:
d3:b1:66:10:87:f1:c9:c8:f7:67:0f:5a:de:cf:4c:
1a:3a:2e:f1:d8:b2:23:eb:06:3f:12:89:2d:6c:30:
92:6b:fa:a7:6c:91:92:91:32:54:08:26:7e:7b:89:
38:d6:14:9e:3e:8a:3a:7e:90:17:e8:63:45:97:dc:
88:16:fa:04:fc:37:77:29:d2:c5:11:3e:03:bd:29:
0f:9f:b7:d5:fc:db:a5:35:ae:8d:91:50:68:b0:10:
b3:19:a3:92:c2:0a:c7:e3:82:01:e6:9f:ed:32:d0:
ff:00:e4:f9:b9:f0:f3:e1:c0:3d:ea:7c:42:79:12:
e1:00:61:9f:fa:65:c8:da:5d:96:a9:55:3d:0c:0d:
24:fc:47:c2:53:f6:73:20:3a:67:1d:8d:d1:b7:00:
0a:9d:0f:b3:b9:37:bb:a1:03:33:c5:9e:47:26:99:
13:3d:9a:9f:85:76:a2:32:2f:d9:06:6c:ac:db:b6:
10:97:13:09:79:82:35:c3:05:6d:b5:7f:80:29:cd:
a1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:8D:22:59:E1:0C:FF:E8:8B:D0:57:B7:29:A2:90:FB:A7:73:39
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1a:41:ab:a2:c0:69:65:b7:4a:97:5a:d7:24:00:8b:13:8e:
03:8b:29:e5:f9:9c:54:5b:b9:5b:c6:22:53:c7:40:83:ca:e6:
7d:a4:53:37:ad:37:59:c8:d9:55:c7:c9:af:e6:aa:b7:78:de:
54:7b:3c:34:a8:9e:6b:f3:16:a5:6b:4c:43:57:3c:20:d9:b2:
67:d4:ce:e3:25:0a:41:32:ea:fa:d9:4d:7e:27:27:4b:a1:d0:
f8:82:0d:0d:ec:45:12:5b:65:54:a5:14:d3:31:f8:ec:a3:80:
aa:af:a5:50:86:41:3e:5d:f8:f3:26:0a:d8:61:23:63:38:4f:
45:13:b0:0d:61:52:2c:1c:bd:96:18:9e:0b:37:0a:a8:c6:71:
d2:28:57:ba:e6:67:07:b9:11:af:f9:3e:af:1a:4c:f0:cd:14:
4e:ff:af:48:bb:16:45:1c:c2:1c:af:bb:11:d9:a9:8e:5b:93:
b1:0d:22:6f:74:54:f9:81:4a:a5:73:c5:c2:d6:bf:83:e7:9b:
c5:48:89:94:f2:3b:50:00:5c:5a:a3:26:79:a9:14:b3:43:50:
62:19:7d:91:77:04:bf:d4:8e:95:67:c1:72:cf:28:58:3d:48:
ce:c8:bd:31:a0:b3:63:51:e1:93:0c:9d:5d:54:8a:31:f8:e2:
e4:4d:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:10 2026 by rpki-client