Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: ox/n2VM3tvjRv7+Q4Fvy87ei3QHoH9eDHaKb5XQSJ3U=
Subject key identifier: AD:28:0A:55:C7:15:FD:73:96:8F:96:20:98:B1:4A:E7:E4:61:34:5E
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019DAFB2F9B4D7EF3062B3B87E73D72417BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 1792
Signing time: Tue 21 Apr 2026 11:00:35 +0000
Manifest this update: Tue 21 Apr 2026 11:00:35 +0000
Manifest next update: Wed 22 Apr 2026 11:00:35 +0000
Files and hashes: 1: 5lor0bwtxK_7lFhqP5JQsE38fgY.roa (hash: Gko1WgTJjCRM1Vd8FnhB+R8Xwpk2DGktIYr+kX9efeQ=)
2: _Q8Mb-3UvfMhIjv_xRaFDoLApBs.roa (hash: IHr0cgRLyfbFPNalDZLOfmKJvgcvrc9t828c9yf4EtU=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: 3sc8jqWEbHFL48Z+xBOLI9nLf0Tr8SHlSsOZ5Y0lGcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:b2:f9:b4:d7:ef:30:62:b3:b8:7e:73:d7:24:17:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Apr 21 11:00:35 2026 GMT
Not After : Apr 22 11:00:35 2026 GMT
Subject: CN=ad280a55c715fd73968f962098b14ae7e461345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:1a:78:03:05:36:0d:1c:8d:ff:09:69:3b:
e5:87:87:a1:b5:b2:ed:29:a6:6d:a8:20:05:32:c1:
7c:04:6b:45:4a:f6:ad:7a:3b:0d:e3:85:5c:ff:a1:
d6:b5:4c:fa:5a:cc:49:b9:73:44:f5:86:46:6a:d3:
fb:3b:2c:28:c9:4e:98:74:8c:b3:dd:06:4f:48:be:
e3:88:ff:53:aa:86:f6:7b:59:e6:2d:10:51:ac:53:
a4:59:46:18:87:8a:24:ae:35:b2:2a:2c:9c:f4:67:
a9:b1:51:21:30:4c:d9:32:6e:44:a2:9d:49:1b:fc:
16:2a:bd:a9:dd:49:4a:6b:0a:81:24:8f:f9:cb:70:
38:9e:e8:a6:51:a5:0b:87:cc:4e:14:70:f1:4b:3d:
6f:72:34:be:af:c0:44:34:db:70:06:a7:bc:e2:6d:
ce:f8:48:5d:96:27:94:69:eb:32:9f:53:2e:b5:0f:
70:0e:d7:86:40:4a:c4:35:55:84:f8:a9:b8:8b:5d:
b1:b1:ea:84:88:ef:0d:26:df:d0:f3:cf:ac:de:9a:
92:28:39:4d:75:bb:c3:d2:99:27:69:69:cd:7f:4f:
48:ad:d0:24:ed:24:b7:35:52:ef:5a:04:61:2b:a5:
bf:e0:72:1c:0e:5b:d8:d8:30:40:d1:18:f4:26:85:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:0A:55:C7:15:FD:73:96:8F:96:20:98:B1:4A:E7:E4:61:34:5E
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f8:e4:11:dc:56:51:50:35:f8:00:f1:73:1e:8a:2f:14:af:
c2:bf:c0:3d:11:82:b5:bf:ca:3e:7d:55:c9:fd:77:51:77:05:
7d:a7:fc:ea:a1:99:9e:fd:8b:3e:ce:0f:46:22:5d:3c:14:45:
70:43:21:a9:4e:e1:76:9a:5e:d0:0e:60:7c:b2:db:93:6e:21:
cb:ea:3d:6a:aa:5d:53:20:b6:9b:37:c9:6a:8a:44:12:5f:23:
dd:e1:b1:69:3b:fb:b9:07:a5:b2:7a:34:7f:d6:9f:6b:4c:8e:
55:95:3f:93:18:3e:1c:78:ff:fe:56:f8:13:e4:29:e5:0b:64:
9c:c4:0e:3c:66:f9:7b:d9:68:fa:4d:60:cb:82:95:62:2b:a5:
ba:94:07:1a:35:02:ca:3e:ff:2e:d6:4f:8c:b0:f4:33:bb:75:
fd:49:dd:e1:e9:d8:c2:b7:57:ae:f7:ed:d7:99:58:20:ad:6e:
1d:64:a4:0f:32:1f:02:b4:99:46:25:7b:48:76:c2:ec:9c:ee:
37:79:cd:78:da:01:4d:57:68:cf:08:c4:d7:6a:7f:ab:28:57:
ae:3d:63:c1:d5:7e:37:40:c4:81:08:cd:b9:1b:d0:03:ad:e3:
21:36:d5:06:6e:97:1a:af:14:38:b5:4e:ee:55:27:95:f7:d7:
b2:fa:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:07:58 2026 by rpki-client