Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: nsBt65Oq6aYIR3A5S6AB1620OCZ1mpqr3MPc5nsaVOw=
Subject key identifier: FE:0C:2A:50:6A:EF:4C:61:48:F9:23:5D:C2:D0:2E:38:B6:C1:A7:6B
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019DB08F80F283CC49DAF5708E70AE00897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: 22
Signing time: Tue 21 Apr 2026 15:01:27 +0000
Manifest this update: Tue 21 Apr 2026 15:01:27 +0000
Manifest next update: Wed 22 Apr 2026 15:01:27 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: 0Y6eNlnZuZxAH6PdmzYB83TTH5I+gOG4z5wYJy6h4YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:8f:80:f2:83:cc:49:da:f5:70:8e:70:ae:00:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Apr 21 15:01:27 2026 GMT
Not After : Apr 22 15:01:27 2026 GMT
Subject: CN=fe0c2a506aef4c6148f9235dc2d02e38b6c1a76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:04:ad:01:b1:7a:8a:96:64:c2:e1:11:4a:
ed:7e:a3:c6:c2:31:fb:a0:88:5e:93:89:a8:df:ff:
d1:7e:e1:78:0a:a0:95:ae:7f:04:83:c4:4c:7d:fb:
f9:66:9d:d8:eb:79:b0:30:b5:8a:65:26:08:d8:99:
d3:63:f9:c9:a4:c0:f8:76:61:c8:5e:4e:f9:df:9d:
cf:04:e8:76:68:b4:10:a4:75:23:fb:3a:0d:d7:c9:
b6:ce:31:78:c9:78:86:d7:82:ff:b0:79:78:a8:21:
57:b4:b1:8c:10:40:87:4b:81:fc:f4:46:15:e6:65:
cb:0b:dd:25:a2:e0:42:8f:74:3a:69:83:84:53:9f:
aa:89:a0:89:ce:56:5f:63:22:5f:fc:a5:ef:8e:bc:
95:00:dc:c3:6f:0f:bb:bf:95:0f:fe:73:8b:20:ca:
b0:c2:93:52:a3:a7:49:0c:4c:81:dd:fa:25:16:05:
05:bf:ec:f3:9b:8b:bb:c6:6d:f0:1a:92:89:20:7c:
cd:b5:cd:a5:c6:7d:38:d2:5e:9c:af:16:4c:c8:92:
5d:8e:37:7b:b7:2b:b6:96:4e:bc:bc:3a:d6:c5:7c:
5e:8e:dc:08:5c:f7:a1:97:1f:7c:e0:20:ae:c7:98:
c2:a7:03:4a:ed:b8:5a:bb:9d:db:a8:c1:a2:11:f7:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:2A:50:6A:EF:4C:61:48:F9:23:5D:C2:D0:2E:38:B6:C1:A7:6B
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:13:af:de:87:ea:d9:67:53:0a:b9:bc:59:38:0c:2c:67:
6b:47:a5:47:0b:bb:c1:64:d0:8c:f3:31:5a:a6:37:7d:48:e4:
39:be:26:65:65:9e:6d:1f:78:df:bc:9b:64:3d:47:84:90:ff:
e7:bc:0c:54:d8:6b:a5:5c:f4:9d:ae:cd:a5:79:3b:55:67:c5:
66:ca:62:71:49:77:de:34:56:98:ab:58:3a:0e:07:58:68:83:
22:ef:24:3e:48:42:68:55:6c:48:70:ca:d5:a1:33:8a:f6:9f:
53:1b:82:a8:4a:13:46:e7:6c:54:0a:86:da:6f:69:18:8d:1f:
a7:2c:d1:73:3c:d0:b5:32:cb:d4:25:bf:39:55:2a:d0:a7:43:
75:65:20:26:f8:c6:7e:cb:a0:7f:ed:0d:3c:e0:cc:43:56:51:
98:42:b9:2a:c2:b0:1c:aa:1a:8a:62:97:d3:3a:20:e8:eb:73:
f4:c8:84:0f:31:c6:a1:fa:f7:76:52:15:c3:d9:0f:d9:0e:c7:
46:db:43:d1:bc:1e:c7:5b:cf:48:97:ee:2e:b2:00:8c:e0:07:
05:02:17:e9:97:2c:48:8a:6a:ef:ff:52:93:69:d4:79:41:7c:
52:47:cd:97:cf:33:b2:7b:e2:89:c9:06:90:24:ba:8b:32:db:
99:b5:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:05:19 2026 by rpki-client