Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: vKxn4NH6E3Lmtb2L3hUPMc55iGOPiyOX6KweTvKOR00=
Subject key identifier: CD:1A:5A:E2:22:B0:33:CD:07:31:95:02:5F:3C:E5:BC:E9:BC:2D:6D
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 019DCE638240B02209C15B8648EA44DBAC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 10:02:00 +0000
Manifest this update: Mon 27 Apr 2026 10:02:00 +0000
Manifest next update: Tue 28 Apr 2026 10:02:00 +0000
Files and hashes: 1: T-A-44juLtTcwFnkF5SXhOQIQ9I.roa (hash: 5FV/i01IPIqBUOBQNZQFuPYhK8LFfHjFfgoQlpXFS0o=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: 3N+X1jjDKUMR2iCiNIUy6Cx7Y7C332xSgX38aLR1se4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:82:40:b0:22:09:c1:5b:86:48:ea:44:db:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Apr 27 10:02:00 2026 GMT
Not After : Apr 28 10:02:00 2026 GMT
Subject: CN=cd1a5ae222b033cd073195025f3ce5bce9bc2d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:8d:f5:3a:8a:f4:06:ba:1a:ac:c4:b1:19:
53:09:20:6d:14:bc:8d:d6:b7:36:60:c7:45:70:c1:
61:52:85:6e:2f:8c:48:53:aa:27:9c:3a:bf:40:d4:
99:25:09:8e:18:6b:dc:7e:ba:f2:e7:1a:f9:a5:73:
7d:6d:27:fa:b1:49:42:88:0a:98:97:62:89:8d:9b:
31:b1:d4:57:e7:e0:d6:92:50:14:70:4d:4f:89:6f:
79:bd:6c:12:60:5f:55:b2:0c:f1:96:64:82:45:f7:
90:16:89:6a:38:bc:b5:6c:81:c4:a8:ab:f9:d1:8b:
c7:9a:45:7c:b1:ff:e6:05:1a:50:42:8f:77:30:61:
95:0e:80:b5:f9:32:f0:1d:fe:8a:f6:0f:0a:45:66:
79:52:cd:e9:89:38:b4:e3:9e:82:b1:9b:ad:b4:d6:
9d:30:4f:bf:c0:e3:4d:5c:6f:e6:12:21:e9:3a:0a:
8c:85:38:21:bd:1d:58:04:a0:2c:9c:4e:c8:b2:98:
24:a8:ab:a9:cb:bb:45:ee:1d:bb:cb:e5:65:75:bb:
c4:58:9f:03:eb:63:ae:1f:cd:59:7c:a5:36:a6:0a:
3d:9c:76:3f:bf:0e:8e:e1:9b:32:a6:78:df:9e:6d:
cb:af:c4:fd:4f:d6:09:5c:0d:19:b3:e6:b3:b7:6f:
6c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:5A:E2:22:B0:33:CD:07:31:95:02:5F:3C:E5:BC:E9:BC:2D:6D
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:19:ff:aa:cf:52:bc:c6:31:f8:55:17:67:a4:cf:d5:90:
43:08:35:29:9e:cd:c9:c8:e3:14:0b:1b:86:9e:a6:cc:fe:cc:
ce:a8:78:af:47:59:74:07:01:fe:5f:95:2c:91:94:7a:93:9e:
82:de:a7:13:8e:f9:7b:2a:f3:cf:7d:5c:df:08:1f:40:b0:d1:
84:71:91:a2:1d:a0:78:4d:e5:ae:09:4d:df:9c:a7:9c:d8:21:
d7:f3:a0:7e:cb:13:79:10:c4:52:e1:75:21:bf:2e:77:53:d2:
91:ac:c0:a4:f5:24:c1:78:b9:b8:92:27:12:4a:82:4f:f2:79:
bb:e8:c2:b5:78:85:d9:1f:13:75:c7:bb:8e:40:83:20:2d:99:
99:88:24:76:9c:81:a8:4e:41:01:21:b2:27:5d:7d:1b:4f:5f:
b4:56:24:05:8b:69:46:d9:c5:cc:10:e8:a6:06:55:d6:cb:9f:
56:f4:32:97:1e:bd:d3:6e:70:85:b4:3d:e2:ce:23:4c:6b:49:
71:67:53:89:30:f1:20:5c:20:88:56:4b:43:e8:28:c6:20:e2:
94:42:b0:b1:9a:05:b3:d1:1c:e0:ca:6a:d6:6b:c8:7f:bd:be:
d8:a0:aa:96:ec:5b:9c:50:30:e0:ed:d1:84:37:8b:b1:83:35:
14:42:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:02 2026 by rpki-client