Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: DMj9kImoH80C2OerurWQGcXLPWINOief4z63a3vPuFQ=
Subject key identifier: AD:A7:B5:3C:88:F7:30:A9:A8:59:7E:BF:BE:EF:DC:F4:75:5E:CA:9E
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 019D9B19F52BA98C226FDFBF9D16727CB172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 13F6
Signing time: Fri 17 Apr 2026 11:01:02 +0000
Manifest this update: Fri 17 Apr 2026 11:01:02 +0000
Manifest next update: Sat 18 Apr 2026 11:01:02 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: rCwsFidfhl+qNj2MQod9kZ/bzLDC9pUQm110uZbAn4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f5:2b:a9:8c:22:6f:df:bf:9d:16:72:7c:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Apr 17 11:01:02 2026 GMT
Not After : Apr 18 11:01:02 2026 GMT
Subject: CN=ada7b53c88f730a9a8597ebfbeefdcf4755eca9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:cc:2a:3d:25:32:b0:c7:6d:b7:b8:f8:10:
ad:94:7d:c8:65:b5:6c:a8:6f:6d:01:50:f7:52:59:
96:c1:6a:f2:fb:0a:81:10:2c:63:d4:44:53:13:9e:
10:6e:21:40:93:08:d9:7f:7c:c7:97:3d:a7:f1:aa:
ea:a8:2c:0b:7e:8a:5b:2a:6f:20:d0:25:5a:5d:6a:
84:6c:e3:e2:9e:b6:83:f3:5c:74:4c:ee:92:d1:a5:
4a:b7:7b:ac:fb:71:17:29:70:15:5f:4a:f2:bd:fc:
a3:73:4f:b2:70:40:f0:4e:9f:7a:26:cd:f2:52:a9:
76:64:7a:7e:d6:bf:b1:89:e8:99:58:56:9a:9f:61:
06:9f:6d:fd:09:72:0a:87:4d:6d:b9:b1:d2:ef:c3:
b5:3b:02:f2:19:79:0a:03:ac:01:69:ca:59:7e:26:
8e:03:03:22:aa:64:b1:7a:1b:22:95:ec:3a:3c:f1:
96:5d:53:a4:e4:28:f5:5d:85:40:af:14:10:4c:c7:
00:b0:98:b9:a6:b2:63:2c:ed:08:1c:75:77:b6:fe:
d2:70:7e:29:63:0f:74:ff:06:ad:7b:30:54:46:e6:
70:53:6d:a2:4c:8b:85:4f:75:6a:41:da:bd:e2:af:
65:6e:9b:c5:13:fd:a4:e9:f0:e2:71:7c:4b:7d:d3:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:B5:3C:88:F7:30:A9:A8:59:7E:BF:BE:EF:DC:F4:75:5E:CA:9E
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:47:d6:20:46:81:3e:94:cf:f6:8d:c5:51:f1:98:e3:ee:e8:
ad:c3:38:10:a5:c3:4d:57:d1:9e:83:cb:1c:8c:73:53:1c:0b:
70:51:20:ab:37:52:2a:1b:de:bf:8a:c0:3e:bd:1c:ab:29:ce:
64:74:7b:75:41:21:09:66:8d:e9:bc:37:da:ee:20:b1:10:ba:
23:e8:78:00:8c:56:92:36:c3:1b:c6:98:ec:88:a2:ce:b5:e8:
64:b8:4f:d9:98:64:ba:88:ce:64:25:e2:ec:3a:3e:fd:7b:a5:
5e:2d:c4:61:81:1b:8e:40:db:f4:ca:f5:13:51:02:f9:5b:00:
ff:3f:4b:2d:c7:79:02:27:c5:34:f3:bc:12:fe:98:40:2b:ec:
39:f0:9c:14:96:8d:55:de:a5:29:23:86:d9:89:57:fa:b4:8c:
a8:3c:c8:9d:00:7c:84:01:9f:58:d3:9e:3d:82:a5:2e:be:23:
57:bd:b6:e3:d2:67:cb:e2:57:e5:15:83:c4:f9:65:5f:b1:70:
22:9e:72:3d:69:69:f7:28:e7:58:28:1e:48:17:c9:79:62:19:
76:22:f6:da:37:d8:88:49:8d:2a:41:59:02:b7:a7:b9:73:5e:
2f:a7:f2:00:a8:72:b1:0e:8c:20:9b:4f:78:3e:d3:5c:e9:4e:
5f:7f:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:17 2026 by rpki-client