Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: qUqzrzUwZcBW9JLebCdLDv6NhkmwJa7RszArFOOByuc=
Subject key identifier: F0:4F:DB:68:BC:97:01:D9:48:28:B4:60:3B:0E:45:1E:D3:AF:37:E9
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019DCE62D8DA8017C240E699FC741813AA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 1870
Signing time: Mon 27 Apr 2026 10:01:17 +0000
Manifest this update: Mon 27 Apr 2026 10:01:17 +0000
Manifest next update: Tue 28 Apr 2026 10:01:17 +0000
Files and hashes: 1: gl2nmwO4v0CeZLjHm3SDRIyos8Q.roa (hash: XbNVPIMyzYNGS/m6xHDz4/G85Dxs4nrc/Ehwb2bG/rs=)
2: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: 0jUFNlu1tVDERDVMjVJmBu7OngX38O58j+eUKQ4fI2Q=)
3: kNR-gUHIBkAVG5LDVgVJxvEY3q8.roa (hash: d0VW7tyS0/KepNZdJ2Fz8K2kUTPgtIVFBZK37jfxU0M=)
4: kUXgXHjZh6Dhv7swtP0uScwOUOU.roa (hash: quIM8+yqzd47fNHZBFQKX0gUs534hYfsNXJItcjTlM4=)
5: v9YovKS0rkxgh-imaNT6dS4t8wE.roa (hash: +gjCRrqjahMp/Uxvqf8OR5Yjihz0o/VceeWEOtR4+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:d8:da:80:17:c2:40:e6:99:fc:74:18:13:aa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Apr 27 10:01:17 2026 GMT
Not After : Apr 28 10:01:17 2026 GMT
Subject: CN=f04fdb68bc9701d94828b4603b0e451ed3af37e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3f:86:4f:6a:1c:7d:98:10:e5:98:f1:26:4f:
c5:4a:87:e9:2e:13:a5:52:61:95:b9:c3:98:27:d1:
2a:49:26:bf:9b:15:b4:0c:c4:17:1a:90:a7:d2:34:
ea:2b:ac:b3:9a:26:4a:ab:c1:e4:5c:e9:28:7d:5a:
ad:75:46:12:42:52:1f:e6:be:47:8d:5f:6b:27:13:
01:3e:c8:9a:d6:0b:2f:6b:e2:43:d1:6b:ea:9e:91:
79:00:c1:87:c3:e9:4d:b4:66:bb:33:b4:8c:16:7b:
70:b4:35:6a:b7:9c:f7:2b:e5:e9:b9:10:3e:99:69:
79:de:b0:16:86:34:a5:9c:b6:1c:2f:91:27:35:8f:
70:8a:69:f0:8a:7f:ed:16:01:55:c2:50:22:64:90:
8c:31:88:51:a0:6c:c6:2a:12:78:ea:2b:6d:41:ab:
cb:de:17:e4:03:8b:b9:bf:54:12:8b:60:5c:e6:3d:
8c:2c:ad:72:1a:83:09:a1:05:89:58:bc:6f:8c:27:
cf:98:f3:19:7c:58:55:5b:df:24:3b:71:17:a5:3d:
ce:af:9e:9e:ad:0a:49:b7:40:cc:28:69:73:0b:88:
6b:56:c2:c4:5c:8e:a5:ee:41:ad:d4:b5:f0:b4:ca:
9a:27:28:c3:41:74:3a:80:6e:d8:1e:47:78:d1:eb:
7f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:DB:68:BC:97:01:D9:48:28:B4:60:3B:0E:45:1E:D3:AF:37:E9
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:c0:85:d1:9d:e5:69:d1:d9:2a:a7:d0:10:39:f5:59:75:
e0:2b:dc:ae:29:c2:38:31:4f:5b:3b:c7:d1:55:98:a0:af:0c:
e9:8b:f3:72:2d:5a:50:62:0a:17:0f:6b:f7:3f:07:8e:35:5c:
a8:d1:86:4e:0c:75:d7:49:48:eb:16:1a:5d:11:80:89:b1:b4:
d1:f3:eb:c2:dd:5e:11:a1:8b:3c:3d:f7:12:dd:5c:1f:55:c0:
bb:ff:10:63:de:ea:1b:5e:ba:af:b1:40:b1:a4:05:7e:8c:76:
e8:77:b5:17:de:c7:8c:43:d2:bb:97:fb:d7:68:d0:a3:f6:76:
cd:53:0f:85:0e:f5:89:35:00:1e:bc:b7:18:32:76:2c:6a:bb:
aa:6e:7c:3b:ee:12:fe:58:d4:33:c3:55:f2:56:4b:b9:9a:3b:
73:5b:96:8c:40:ef:15:db:74:5a:05:bf:a0:2d:4f:b2:7b:0f:
cc:fa:5c:43:a4:4a:a3:e6:6d:a6:d8:96:75:44:2d:fc:c5:7a:
8a:9a:9b:2c:47:c6:29:e5:54:88:bd:bb:7b:f3:f9:f2:b4:f3:
72:0f:03:4e:5c:f3:6c:8f:26:3d:20:eb:78:8f:13:ab:15:7b:
86:10:08:bb:e9:2c:94:49:fa:37:05:30:09:94:80:f7:ea:f3:
1c:a4:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:47 2026 by rpki-client