Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: 87jutttIzTB4DhVrgwhz7PT4ZsSoqZ7cVuG4mBWauug=
Subject key identifier: 9D:63:E7:BC:CA:65:A5:98:10:3F:40:B6:14:17:2A:E6:48:71:C4:4E
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 019D9AE2BE4BA85CF9F48131C35F6BC9A0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 1096
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: D4q3LW05Cf1vlGc1SnnG7K815gXkkGAj2rAYVFlMZaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:be:4b:a8:5c:f9:f4:81:31:c3:5f:6b:c9:a0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=9d63e7bcca65a598103f40b614172ae64871c44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:77:9f:60:07:8b:2b:d6:16:96:55:01:39:
35:7b:cd:fa:98:54:46:ae:e5:95:61:9b:29:20:1a:
fe:1e:6f:da:05:c6:41:b9:2e:62:33:d7:0f:7d:d0:
63:af:6f:5e:67:9a:18:30:ab:13:5c:b7:91:5a:6e:
1d:97:7b:80:50:a9:6b:78:d9:7d:55:36:ea:63:c8:
78:47:5c:49:ff:0b:7b:96:3c:db:22:0f:27:bc:50:
fe:b1:2a:ad:ba:70:36:7c:d8:f1:3c:38:a0:d4:b3:
92:3b:5d:6a:07:2a:cb:7a:64:f3:62:26:18:45:2b:
2e:d2:c8:86:ea:c6:0d:86:d0:ee:7a:31:e6:eb:2e:
89:76:36:5c:b1:ba:b8:0c:6e:6e:76:59:4b:f8:11:
ba:b2:dd:96:ce:b2:01:57:40:79:6d:c1:e9:14:f7:
b4:69:17:a4:d1:0d:01:d0:65:c4:f2:c9:df:ef:08:
9d:21:85:1a:f8:72:16:3c:33:bc:ff:04:47:68:07:
bc:9e:0e:7a:ea:75:37:90:10:a0:fd:cb:3f:99:d9:
e8:6f:ac:9e:f7:d3:85:59:24:4e:10:65:de:bf:4f:
0e:e4:23:cd:d8:20:aa:7e:42:50:b1:87:13:ba:8b:
81:41:02:03:fa:61:17:45:0f:d1:0e:d6:be:14:2e:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:63:E7:BC:CA:65:A5:98:10:3F:40:B6:14:17:2A:E6:48:71:C4:4E
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ca:96:ba:59:4a:ec:06:c4:2e:ae:43:c1:75:4b:72:72:1c:
11:02:75:de:90:69:9b:7e:45:cd:7c:3c:e4:58:0e:70:57:18:
b7:76:3e:0f:5a:60:22:95:8c:36:19:79:5a:eb:62:1e:9f:6e:
af:f5:ff:a9:1c:57:50:17:77:46:1c:47:ae:28:f3:d3:5d:15:
72:a7:cc:b7:0e:5b:7d:22:b5:85:98:a5:97:4e:ce:e9:95:f8:
af:c8:19:68:e5:e1:ad:c0:fd:40:4a:07:36:7b:72:13:c5:ee:
87:38:b4:2f:2d:6f:53:1a:52:e4:19:91:63:ab:52:0c:7d:c1:
03:1c:e8:1e:75:6c:ad:f6:e8:e4:1a:6e:13:27:a1:ad:4b:d8:
78:42:a7:78:0a:24:c4:18:75:4a:4d:62:8f:c4:1c:56:26:0d:
f9:6f:18:2e:c5:a8:cc:09:a9:c4:44:5a:f7:06:0a:14:2f:b7:
12:34:a5:1a:ba:98:be:62:aa:11:b4:cc:0e:54:f0:dd:f9:28:
47:21:7f:b0:40:2e:31:62:7e:e5:fb:f6:f8:c7:83:08:0c:51:
87:1b:a6:11:5a:49:0c:8a:96:53:83:ac:ca:cd:21:0c:bf:04:
a3:52:5d:1c:cd:7d:75:b9:d8:4f:cd:da:f2:1b:46:33:45:4a:
9e:cd:47:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:44 2026 by rpki-client