Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: G6stm7wNrAFVCGDjUEvmHXdOruEmmBp2Oaq/LOnAJeU=
Subject key identifier: 20:06:0E:64:27:ED:5F:B0:A8:CF:A3:F1:BA:22:A6:B1:F7:41:E7:C7
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019DCC746B24A7DCB168CA876E6427CC897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 01:01:14 +0000
Manifest this update: Mon 27 Apr 2026 01:01:14 +0000
Manifest next update: Tue 28 Apr 2026 01:01:14 +0000
Files and hashes: 1: 5UgWz4TquW-RCZNQAffQO9XK1TY.roa (hash: K3S0eQrPAI5ZGDD9EhtxIW1xNbkOZ7avoejLjH/PyGs=)
2: TrdJEenqgtHhdFelNOTUIFotJQw.roa (hash: Dr0F+aTEx7ePrr0l9Z8JmKO/N1C2g7VZ2b2KhzfPrQQ=)
3: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: 5z2R2j6dizEpijqEyVl2Bf0L3u1Q+n5oVQj6fXQXEDQ=)
4: kzDbK2QoBVIIp9tqNTtnUJP1NZs.roa (hash: X7UOIcXOkpLacmMqPlB5bii5jBSrwu1Tt1zBt5jizCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:74:6b:24:a7:dc:b1:68:ca:87:6e:64:27:cc:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Apr 27 01:01:14 2026 GMT
Not After : Apr 28 01:01:14 2026 GMT
Subject: CN=20060e6427ed5fb0a8cfa3f1ba22a6b1f741e7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:0a:da:85:1a:98:a0:6c:38:bc:2e:d8:5c:
22:e1:97:b3:2a:1e:13:0f:7d:26:ef:5e:53:a7:2e:
c9:f9:8b:66:8b:91:20:a6:af:cc:53:a1:65:4f:a4:
0e:62:55:88:15:81:a0:72:58:95:e1:5d:49:3f:08:
d7:9a:ec:59:00:80:5b:28:34:a9:e2:39:6c:71:83:
8a:2d:a0:ab:63:95:0d:e2:93:1b:5c:7c:01:11:7f:
a3:dc:93:62:f7:b7:80:40:9b:d7:2c:38:e7:67:8a:
dc:43:fb:f6:dd:2b:17:22:8c:7a:37:82:1a:c1:a1:
fa:f0:27:f1:80:eb:5e:de:75:1c:94:33:0d:86:22:
8f:ab:b8:51:1f:40:fd:f9:c6:50:34:46:85:39:e8:
f5:4b:b0:4f:b5:bc:d5:17:4f:51:8e:2d:08:d6:e9:
82:39:98:8f:d7:0c:66:65:25:56:bd:49:77:b0:28:
4a:98:6d:95:b5:8c:e7:43:37:e0:98:44:72:37:61:
a4:31:76:a1:a7:47:fb:b2:84:fe:7d:b2:08:f6:7c:
c2:56:da:6e:71:f5:92:08:f1:c7:a5:9b:5a:87:d0:
19:94:e7:69:20:8f:95:06:0c:06:7a:16:c5:b4:2d:
18:6b:f8:53:26:d6:7a:ef:0b:b6:24:6b:a6:26:4d:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:0E:64:27:ED:5F:B0:A8:CF:A3:F1:BA:22:A6:B1:F7:41:E7:C7
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ff:12:77:32:3d:8f:7f:75:e4:b4:29:22:c5:65:d2:9f:42:
34:20:74:42:29:c2:b2:51:c1:06:d7:33:7c:38:b9:6d:4c:59:
a6:c6:be:32:af:80:df:00:af:94:1f:0f:47:b1:b1:f0:35:f5:
d9:d2:50:34:7c:fe:58:17:d0:de:a1:12:07:b9:bb:d7:6f:65:
af:76:f5:f0:19:e7:bc:38:35:53:7d:48:ac:56:d2:0a:5e:11:
a7:a9:02:80:b2:75:99:37:e8:49:ad:a0:76:46:2a:e9:7e:40:
1b:5f:2d:5a:12:bc:fe:4c:52:8e:67:e6:a3:97:63:87:cf:9b:
ec:06:29:aa:5a:49:78:c2:61:c2:e8:88:e6:35:cc:d9:9b:6c:
2b:0f:9b:5e:e2:85:7d:af:5e:0a:2e:88:6a:0a:cd:39:c7:43:
f1:0e:a1:3e:df:18:47:fe:04:a4:28:88:bc:cf:d7:56:70:92:
72:7e:e6:bd:ed:d3:8d:62:a2:24:75:38:5c:6a:2c:f9:41:b9:
95:7a:38:82:9c:2f:f0:57:1d:f9:0e:9a:8e:86:2e:c5:b6:35:
b9:8c:fe:95:f1:6d:a4:64:00:04:37:9d:fe:a6:16:43:6e:e4:
27:d3:db:4f:2e:f5:c0:a5:df:f8:e7:ef:8e:de:d0:75:a3:37:
f8:e8:ff:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:42:01 2026 by rpki-client