Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: mnpmzJduqc8MKgrg+qmTb6rXw1zwhzNREQVEL/rarY8=
Subject key identifier: 03:0D:0A:1E:72:A4:7B:3D:BB:FD:C5:82:1A:78:D2:BE:5C:20:CC:3C
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019DA867964DFD9CC974BB0E9A8391A23EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 18DF
Signing time: Mon 20 Apr 2026 01:00:53 +0000
Manifest this update: Mon 20 Apr 2026 01:00:53 +0000
Manifest next update: Tue 21 Apr 2026 01:00:53 +0000
Files and hashes: 1: 0T_OaQCbJNCqGeMPQhOWXxsxGm4.roa (hash: Ft44EkrKyKsAFbkVxuqQXqMtrjyV/ZdKGwAAf8PGKYI=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: gnyxxcbyX0LjVRzricV9hJKd0R/x3l81gAbEAbmcTF0=)
3: j54P9E7HJNxXnzx0c4ZlhgLNrmk.roa (hash: 9KgP+vcQVnAWqyQznz1mnI6dtjZmqs2SRf03m1FIUiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:67:96:4d:fd:9c:c9:74:bb:0e:9a:83:91:a2:3e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Apr 20 01:00:53 2026 GMT
Not After : Apr 21 01:00:53 2026 GMT
Subject: CN=030d0a1e72a47b3dbbfdc5821a78d2be5c20cc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:f6:9e:f7:44:11:81:35:e5:78:65:51:85:
00:65:e8:05:82:c3:55:26:34:8e:20:4c:6e:bb:8c:
8e:55:2f:07:96:8d:02:34:d0:6a:15:a9:f8:02:11:
e0:bc:24:64:64:89:4c:75:a6:64:2e:b9:cb:e6:b2:
81:0f:07:c9:81:f4:76:0d:ad:2e:a7:1b:43:8b:d8:
19:bd:2b:12:17:33:bf:6f:24:d7:97:04:4d:21:18:
b2:cb:54:9d:23:c9:77:04:6a:9b:04:d0:be:02:de:
8d:01:17:4b:23:28:cb:eb:24:97:4d:48:ae:4e:c4:
69:cf:b3:f5:c7:f6:a2:4d:e7:17:cc:5b:b2:21:f3:
98:31:35:d3:e6:e5:46:03:f3:fe:89:cf:f3:74:d1:
ad:cc:f9:98:5b:73:ae:9f:b4:eb:40:6b:08:60:34:
6f:05:84:d4:e6:e7:95:7b:98:4a:91:34:2f:a4:ac:
53:12:43:b3:c9:04:f9:3b:52:79:b3:b0:bf:79:bd:
ef:b5:4c:90:be:23:05:15:f7:3b:49:6e:55:fc:4d:
ab:6f:d7:d1:89:de:59:0d:9e:ec:00:15:1b:dd:01:
1e:08:9d:6a:a8:09:1e:b7:95:12:c3:f9:99:bf:71:
1e:a1:7a:ae:a3:65:12:65:40:b9:82:03:24:5d:18:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:0A:1E:72:A4:7B:3D:BB:FD:C5:82:1A:78:D2:BE:5C:20:CC:3C
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c3:3f:c3:d7:64:a7:47:5e:b7:04:8d:51:61:48:a7:51:bc:
af:ef:c4:ba:53:56:2d:c7:50:61:6c:e2:82:77:9c:04:73:17:
64:63:59:b8:52:20:1f:53:84:cf:74:0d:cd:d1:24:7c:14:3f:
14:54:ef:ef:f3:6c:9b:80:5c:bc:19:19:01:76:7b:f0:a5:2d:
e7:63:85:a0:fe:ab:cd:4d:88:51:5f:63:17:12:7f:65:47:23:
7d:60:7d:29:b5:be:4e:6e:cc:58:60:6e:cc:ac:8b:2c:2b:d2:
25:f0:3a:be:b2:e9:67:d9:9a:8c:2e:37:af:aa:c5:d7:a0:99:
a6:7e:66:0f:7d:ab:fb:fe:0f:bc:52:da:c0:5d:34:8d:1f:84:
29:e1:2d:88:b5:66:5c:ca:20:15:03:e2:0c:79:34:3b:a0:ec:
50:d7:f2:8d:2d:6a:32:21:84:ae:37:88:d2:eb:43:28:a7:67:
f3:a2:cc:71:e0:9a:0b:4b:ec:82:5a:bb:ed:ef:49:98:3c:0f:
4e:0e:61:ee:8c:42:1e:05:fa:30:1b:24:e4:7f:90:61:79:6b:
ea:1f:51:cf:79:98:23:c1:49:e1:33:b8:39:ea:50:59:65:26:
30:86:79:57:18:9f:9e:12:a7:58:bf:d6:92:c4:ed:99:ec:c7:
98:63:df:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2oZ5ZN/ZzJdLsOmoORoj7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjYwNDIwMDEwMDUzWhcNMjYwNDIxMDEwMDUzWjAzMTEwLwYDVQQD
EygwMzBkMGExZTcyYTQ3YjNkYmJmZGM1ODIxYTc4ZDJiZTVjMjBjYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26v2nvdEEYE15XhlUYUAZegFgsNV
JjSOIExuu4yOVS8Hlo0CNNBqFan4AhHgvCRkZIlMdaZkLrnL5rKBDwfJgfR2Da0u
pxtDi9gZvSsSFzO/byTXlwRNIRiyy1SdI8l3BGqbBNC+At6NARdLIyjL6ySXTUiu
TsRpz7P1x/aiTecXzFuyIfOYMTXT5uVGA/P+ic/zdNGtzPmYW3Oun7TrQGsIYDRv
BYTU5ueVe5hKkTQvpKxTEkOzyQT5O1J5s7C/eb3vtUyQviMFFfc7SW5V/E2rb9fR
id5ZDZ7sABUb3QEeCJ1qqAket5USw/mZv3EeoXquo2USZUC5ggMkXRioPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMNCh5ypHs9u/3Fghp40r5cIMw8MB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsM/w9dk
p0detwSNUWFIp1G8r+/EulNWLcdQYWzignecBHMXZGNZuFIgH1OEz3QNzdEkfBQ/
FFTv7/Nsm4BcvBkZAXZ78KUt52OFoP6rzU2IUV9jFxJ/ZUcjfWB9KbW+Tm7MWGBu
zKyLLCvSJfA6vrLpZ9majC43r6rF16CZpn5mD32r+/4PvFLawF00jR+EKeEtiLVm
XMogFQPiDHk0O6DsUNfyjS1qMiGErjeI0utDKKdn86LMceCaC0vsglq77e9JmDwP
Tg5h7oxCHgX6MBsk5H+QYXlr6h9Rz3mYI8FJ4TO4OepQWWUmMIZ5VxifnhKnWL/W
ksTtmezHmGPfFQ==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:59 2026 by rpki-client