Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
File: JojvNz-PAOAcJc-SS08ujsaiGdE.mft (raw, json)
Hash identifier: MYIg8szwm7LI/NdlehscbQb1c+OuYz7eTgnR5f5fBCY=
Subject key identifier: 2F:3C:28:1E:A4:F8:12:71:04:17:80:5E:0C:CC:22:AD:49:06:FD:0E
Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Certificate serial: 019DCFAC00034CE098A75C36CFB7E88BBBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
Manifest number: 18E1
Signing time: Mon 27 Apr 2026 16:00:49 +0000
Manifest this update: Mon 27 Apr 2026 16:00:49 +0000
Manifest next update: Tue 28 Apr 2026 16:00:49 +0000
Files and hashes: 1: JojvNz-PAOAcJc-SS08ujsaiGdE.crl (hash: cLhls/frpjPx6EkPTQLMHqfIjqIKe5q3+aq9RMsqXaM=)
2: lMxeGirQXYR0GmDk4V1MklHdGZ0.roa (hash: FHwqA5/kX+tzwJy24N20vnc6oaI1ZNK+QVCJ/kD2Qfg=)
3: w71z6e1nnczS-eMiXSgzScyOD6k.roa (hash: IC3JerQQwAfGduvYY+qJSAnye5COvgk3vpfNs1yG+I4=)
4: zkOZlou0wZ6me2DfEVkQRqyFe8k.roa (hash: pU85jXVjO3BbHeMnI95HpijaHL/9kMqJ0g5Ywj9M28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:00:03:4c:e0:98:a7:5c:36:cf:b7:e8:8b:bb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1
Validity
Not Before: Apr 27 16:00:49 2026 GMT
Not After : Apr 28 16:00:49 2026 GMT
Subject: CN=2f3c281ea4f812710417805e0ccc22ad4906fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0d:b6:3b:68:35:b5:09:2e:2c:67:4e:3f:9e:
06:94:dd:5b:5a:21:66:78:29:ed:10:e5:26:08:c4:
37:54:3e:19:74:70:ae:e7:39:a3:97:9a:3d:d3:82:
72:0f:93:e6:03:70:31:e0:d2:5f:12:c3:95:4d:ac:
33:74:99:24:58:91:3a:8b:21:96:ef:6c:a7:2d:93:
b9:0c:de:9f:61:39:c5:6c:a0:2a:eb:2e:11:72:4c:
70:0f:b2:cd:39:56:ca:73:be:d9:e8:cb:77:c7:08:
f2:c2:10:c3:69:4d:e3:9b:04:1a:b3:7f:4c:b8:89:
e5:e8:b2:15:8c:53:89:9e:5f:ae:d8:db:78:38:95:
16:25:7f:7e:83:5b:f9:b1:52:c9:7f:58:db:f1:04:
3f:de:35:e2:e8:ec:a6:80:fd:d8:ae:07:04:74:7d:
82:e0:86:29:74:89:a8:15:19:a2:62:13:33:74:b8:
ed:bd:51:97:90:72:0e:c3:ed:9a:e7:7b:08:53:de:
04:95:da:40:af:a8:13:76:87:b0:72:58:6d:17:bb:
0b:f1:90:3e:35:4d:50:90:61:50:14:c8:5f:de:63:
ff:83:2c:dc:a2:84:2d:cf:63:3d:46:3b:21:cb:43:
63:8a:f7:64:6c:f9:63:cf:de:e0:e7:26:65:ae:82:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:28:1E:A4:F8:12:71:04:17:80:5E:0C:CC:22:AD:49:06:FD:0E
X509v3 Authority Key Identifier:
keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:ba:ce:40:dd:c3:4d:68:89:a6:f5:ce:1b:88:ef:69:c7:
33:41:c6:14:49:17:82:d0:05:ad:2d:9d:51:13:e1:77:ca:84:
a7:bc:81:23:9d:2e:81:26:d3:70:28:9a:9b:00:aa:fd:31:af:
4d:29:12:30:46:7c:c3:3c:27:cd:1e:3e:cc:82:b6:4d:34:43:
1d:34:48:59:e9:d6:f0:a7:13:6a:8c:64:1d:9c:c8:0f:40:8a:
1b:d8:b9:f3:a1:9c:6b:35:c0:46:3b:1b:3e:9a:5b:4f:c8:bf:
67:ca:07:6d:60:29:b5:d8:5e:13:a9:e5:1f:2b:f4:90:ce:da:
4c:75:d9:49:4a:70:5a:92:2a:83:ca:d0:ff:c9:2c:44:97:3f:
9f:dc:8f:e9:5b:10:6e:ab:39:1e:0f:34:82:6f:fd:e2:07:09:
e4:73:33:12:0a:fd:87:83:06:7d:d5:47:9e:6a:74:41:cd:7a:
20:86:05:27:e1:cc:74:83:f4:b4:bd:4a:0b:04:be:84:38:83:
c0:4d:66:a8:81:20:6d:7c:4b:a3:36:ae:bc:14:40:e1:f2:bb:
6f:c1:e4:b7:56:96:54:91:44:50:cc:7d:50:38:d2:b7:c0:aa:
69:29:a4:f3:a9:99:bd:35:f5:46:6f:1d:db:e6:66:e3:db:3b:
a4:bd:dd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:26:27 2026 by rpki-client