Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: E3ZHL3ysk6rNIAyi5ZlspDmaEkcHwHWk/B5oguCpGxQ=
Subject key identifier: 75:2A:49:9F:9A:EF:11:D4:9C:25:E1:50:EE:0B:85:F2:35:75:7D:35
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 019DCF07B5D8A30892BEE65EA67F3D35D04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 13:01:22 +0000
Manifest this update: Mon 27 Apr 2026 13:01:22 +0000
Manifest next update: Tue 28 Apr 2026 13:01:22 +0000
Files and hashes: 1: Wup1Q1uFK5aAm0q7_cAA8x0spSY.roa (hash: d/XhcWFuK+yDoXR1POg4vJ7o5/6q+n/d2c4kmBYqIpk=)
2: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: F4ZEEk939TMjN65u+XFAlWApx/9Vyqo1visFUme2A/c=)
3: ocDruih2yibbf6CAeSAG3oeE1I4.roa (hash: OFqknVm6G0kk+aIE7XbTQXvAldWSJ1pjOrT88QpbMe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:b5:d8:a3:08:92:be:e6:5e:a6:7f:3d:35:d0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Apr 27 13:01:22 2026 GMT
Not After : Apr 28 13:01:22 2026 GMT
Subject: CN=752a499f9aef11d49c25e150ee0b85f235757d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:15:8c:85:8f:41:ef:76:55:a4:e3:72:11:
a9:0a:11:85:24:b8:57:91:20:f6:1e:89:ee:6a:ec:
c7:50:76:23:d2:a6:1f:ec:06:00:b1:0e:87:bc:14:
7f:5b:43:4c:15:35:40:70:cc:ea:63:9f:88:7c:67:
36:44:de:41:87:ea:7a:db:56:b4:58:8a:89:af:01:
2a:55:26:28:19:cf:f0:03:80:a1:b0:57:af:9c:a3:
f1:b6:76:35:5c:67:01:95:89:1a:25:7e:9d:9a:a3:
31:73:f3:99:82:79:48:78:75:a6:0a:9d:bb:45:e0:
9f:4d:81:c4:ef:64:61:80:91:47:c3:c2:4f:c6:74:
81:75:1e:25:35:1b:a1:8e:e0:6c:c7:af:25:ba:2a:
ad:6f:07:2d:f5:26:d9:7d:5a:68:d9:72:71:c3:cd:
da:b4:aa:c0:dd:8f:66:d8:5b:cb:13:b0:0e:ef:7f:
d9:a6:eb:18:7d:13:5f:7e:34:8a:c9:89:54:c0:44:
e7:14:91:37:9f:eb:e1:3c:4f:b2:db:18:87:39:f3:
03:29:18:17:65:92:3c:c1:74:e3:ca:8d:2d:43:80:
65:d0:04:d2:61:0a:04:76:59:2a:12:2f:15:27:1c:
5d:20:3b:0f:d4:7d:5b:db:dc:f5:97:82:20:b4:3f:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2A:49:9F:9A:EF:11:D4:9C:25:E1:50:EE:0B:85:F2:35:75:7D:35
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:85:20:46:3c:59:e5:b4:1b:2e:c0:80:e9:42:c0:b3:c2:8c:
c2:7c:12:74:1f:e0:09:42:10:da:4e:d8:27:29:b5:09:cf:9c:
af:cb:c1:94:5f:11:5b:09:60:1a:37:78:6c:93:81:08:ee:92:
ce:a8:fa:95:25:dd:76:22:94:e5:6b:01:9f:56:bd:08:49:c0:
2f:17:4b:04:b4:61:7e:d2:6d:f2:d7:ab:3a:a3:af:8e:c4:c7:
91:4a:b7:ba:88:02:a1:7b:54:c5:84:32:26:c4:cd:08:37:a9:
c6:2e:30:33:43:5f:12:a5:c1:1e:b9:01:04:57:37:2e:2f:de:
7b:36:b2:c1:3d:a6:a9:f1:1f:22:0a:75:7e:68:ba:64:2e:f0:
2a:24:d8:38:5f:fc:14:01:33:d3:72:68:db:44:a5:58:03:f0:
a4:a7:71:ed:b4:92:8c:2e:11:25:fa:d0:1c:87:35:b9:c0:ce:
7e:2a:c2:7c:6d:46:f9:5b:1b:c6:d0:40:95:84:53:16:64:27:
e8:7d:8e:b8:45:0b:c8:c0:36:78:a8:f9:9d:15:00:d3:ff:59:
d7:fe:15:c6:59:2b:3f:ed:fe:9b:b4:97:25:0b:74:7c:87:b3:
20:d4:40:38:23:2e:6c:c8:8c:8a:ac:e7:1c:13:67:2d:c8:db:
ce:1c:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:49:06 2026 by rpki-client