Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: kFppc295eRvm/N868eUjaJN8FBxbAmLWjZss09b/me8=
Subject key identifier: 6A:36:B9:3D:B7:55:79:0D:02:00:09:9D:D5:A4:C4:EF:0E:D0:0B:66
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019DD1634C64A0610497B634AAFC70596CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 18E2
Signing time: Tue 28 Apr 2026 00:00:38 +0000
Manifest this update: Tue 28 Apr 2026 00:00:38 +0000
Manifest next update: Wed 29 Apr 2026 00:00:38 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: 7rIWSGj2h38m5BhYd1K5v48tkuIYoFkQZTaaxhMRjSQ=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:4c:64:a0:61:04:97:b6:34:aa:fc:70:59:6c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Apr 28 00:00:38 2026 GMT
Not After : Apr 29 00:00:38 2026 GMT
Subject: CN=6a36b93db755790d0200099dd5a4c4ef0ed00b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:d9:ea:75:76:3c:57:2c:64:18:0e:7e:1d:
57:a2:d9:5a:7f:74:4b:82:cd:92:5b:63:cc:4a:ca:
3f:03:8e:07:cd:e7:2c:b5:22:4c:5a:00:b6:49:14:
2f:2c:46:fd:26:cb:fa:e5:6e:d3:65:92:8d:4f:a4:
42:c6:aa:3a:21:34:66:3a:37:0d:e2:39:a3:98:01:
ed:55:ab:0d:b5:b2:79:45:aa:ec:4f:d8:80:51:39:
8f:af:04:cf:0d:f3:52:fc:7c:8b:d3:63:86:b2:8c:
92:3d:8b:c1:12:83:b7:2c:c9:e3:70:b8:fe:c5:83:
cc:7a:00:ec:3b:72:80:5b:d4:d7:96:93:c5:68:57:
51:6a:6c:b5:88:89:58:b1:f6:8b:07:57:8b:2a:74:
ea:2a:e5:6f:e0:c0:a1:79:73:4a:6f:e4:3e:72:59:
b1:52:f1:e1:02:f1:f1:54:1e:67:3b:11:0f:6a:19:
8a:ee:61:ba:8d:22:0a:a5:16:51:26:97:3d:aa:cf:
85:53:8f:bf:74:73:c8:7a:f5:30:fa:15:66:ab:72:
5b:e3:a7:37:47:36:c3:0f:3c:1c:1b:a2:22:78:78:
e4:61:b5:3c:74:7e:c6:cd:f0:5e:21:25:3c:22:54:
83:3e:45:ce:63:bd:90:fc:c4:8d:4e:c7:02:1a:90:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:B9:3D:B7:55:79:0D:02:00:09:9D:D5:A4:C4:EF:0E:D0:0B:66
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:06:44:00:d9:8e:ff:a8:50:2b:a6:1b:3d:94:08:7e:42:b7:
49:0b:fe:06:2b:7f:44:e0:74:de:6b:0b:4a:2e:89:8a:b0:00:
5d:b0:ed:2e:cb:2f:ba:1d:89:1b:ff:3b:36:7f:de:4d:c2:00:
c7:38:4d:68:72:d3:b6:0c:9f:c5:ae:0b:f4:0e:5e:dc:06:34:
de:07:bf:b6:90:55:f3:e0:bf:df:fa:e8:ca:92:b9:4e:b5:ed:
8f:90:1a:bb:c5:f6:6d:62:32:45:e1:03:f1:2e:e3:f4:0a:cf:
5a:52:c8:7b:98:bb:65:bc:cf:97:08:97:fa:e0:c0:02:b3:0d:
e3:9a:a1:8e:17:c3:93:3b:3b:b3:a8:2b:b3:6b:49:3b:95:d4:
68:31:15:d8:94:21:0f:87:fa:4d:2d:49:a7:9f:30:d5:84:40:
fc:a6:99:59:03:64:87:d2:7d:be:bd:a6:ba:e3:b9:4b:18:4d:
58:7b:16:0f:cc:7d:8b:36:67:c3:a1:65:d3:8d:d0:36:28:fb:
50:c5:a9:a5:1b:eb:e0:cd:01:27:93:cc:59:ba:5c:cb:7e:38:
3a:b5:5f:ad:2a:97:fb:c7:26:b9:78:30:97:41:9d:0d:e6:00:
6c:1a:61:ec:87:c8:56:d1:cd:e0:1c:0c:51:ff:d8:42:0e:0c:
4b:64:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:04:11 2026 by rpki-client