Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File: JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier: VkaQpiS1A7n5ijgGW7CSi/nvbtMb/e2hh2Sc++RI13M=
Subject key identifier: 90:7A:2B:3A:8B:DE:12:08:45:7B:9C:24:AB:95:05:AF:3C:B0:FF:FC
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer: /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial: 019D9998F0CA8610B708F89AFE580709DE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number: 0FA1
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: yYViKzwrTQ+a5JKEJdpMMFfE11wsLIL5SL4mpIM//BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f0:ca:86:10:b7:08:f8:9a:fe:58:07:09:de:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=907a2b3a8bde1208457b9c24ab9505af3cb0fffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:29:71:55:2e:26:f8:f8:02:c8:b0:9a:ab:
cc:c3:59:0e:91:fc:a8:78:82:74:69:f3:39:14:73:
0f:d6:8f:41:d2:83:91:0c:37:96:59:d5:3f:39:1b:
14:7f:c5:85:a7:31:c8:76:54:9d:6f:5f:98:65:1e:
d2:9a:ac:bd:25:96:7c:52:a2:88:0a:5a:3f:e4:bc:
94:0e:65:63:df:bf:de:7c:3f:1b:f7:67:1e:28:3a:
ac:1c:11:cc:cd:d8:8a:ae:8e:93:4c:0c:21:23:43:
13:6a:cd:bf:53:81:61:24:7d:ac:06:ac:68:1b:08:
d6:cb:26:d9:78:06:6b:da:64:9c:f5:c8:1a:ab:cc:
6b:5a:c0:21:fb:e9:02:b3:d6:27:29:3a:95:70:ed:
04:f1:5e:61:50:b3:d6:c0:a5:a3:6b:60:5b:b0:1c:
60:d3:4e:77:95:e9:bc:3d:f8:8f:ba:5a:f5:a8:11:
24:1c:71:12:b6:9e:7f:60:a8:58:99:60:63:52:d8:
23:f6:ae:04:85:ec:7e:31:d8:b5:99:0a:58:4c:07:
36:16:82:25:4a:99:95:a1:5c:5b:58:1c:5f:20:7c:
c3:cf:a3:58:68:c9:63:17:67:b0:12:05:9a:3d:20:
54:7f:4c:c2:51:7b:da:f1:92:6c:06:64:42:30:a4:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:2B:3A:8B:DE:12:08:45:7B:9C:24:AB:95:05:AF:3C:B0:FF:FC
X509v3 Authority Key Identifier:
keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7b:79:0a:27:22:ed:da:84:6a:06:cc:bb:4b:65:2d:fb:40:
9e:47:15:d2:d7:a1:63:d7:fb:02:3c:2a:f3:02:cd:b3:e1:eb:
97:1c:32:0c:f5:02:dc:50:07:0d:28:0d:9b:13:19:a8:04:2a:
e3:a2:ac:3f:2f:81:6d:80:64:59:0e:18:9e:f7:bf:9a:82:6c:
97:d3:61:89:54:bb:a2:49:7c:64:c4:94:ef:1d:d1:d0:51:02:
10:b1:fa:1d:3d:40:82:b5:f6:a0:bf:45:2f:bc:9c:b4:9e:f4:
83:ee:cf:0e:e9:ee:28:1a:8c:7a:60:00:34:29:95:26:39:51:
e4:f2:5b:c2:1a:21:12:46:38:8e:9c:11:d1:2b:c7:7d:ec:06:
67:ad:54:e7:16:25:85:51:05:4a:38:cc:cd:46:b9:ce:d2:4a:
91:1d:90:d6:02:b4:10:ab:9d:12:55:90:e4:64:90:66:c1:f5:
0a:55:db:61:c3:b2:82:88:9d:a6:69:81:79:f0:ce:c3:ac:a2:
79:1b:57:3b:ab:37:c7:91:38:eb:a5:1d:85:68:00:e6:e1:08:
86:f5:4b:fa:19:0e:33:49:7b:54:ea:95:57:4d:a1:14:cb:16:
ac:5f:59:90:9c:1c:a1:d0:82:a2:5c:11:9b:f7:6a:fc:da:39:
70:b1:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:17 2026 by rpki-client