Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: tO5VjVNOhjXrc5wQ7nO4d/7eYOhJlCQqUQVAGSVa+3s=
Subject key identifier: 15:31:59:AF:E4:7D:9F:C5:2D:B7:67:61:21:01:B4:C7:F5:2F:BA:1C
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 019D9CD1288FDA2E7C9C155A304F14057896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 19:00:46 +0000
Manifest this update: Fri 17 Apr 2026 19:00:46 +0000
Manifest next update: Sat 18 Apr 2026 19:00:46 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: YRzjzU+YL2fI2Y4CL8B3TCKL2pWaq4rZXjqL7HctnX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:28:8f:da:2e:7c:9c:15:5a:30:4f:14:05:78:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Apr 17 19:00:46 2026 GMT
Not After : Apr 18 19:00:46 2026 GMT
Subject: CN=153159afe47d9fc52db767612101b4c7f52fba1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:7e:e9:91:e8:5d:9c:c3:d8:e3:f3:d4:d4:
06:3f:30:4d:2e:47:e1:f5:ad:be:bf:bb:5e:df:50:
ea:c6:62:40:cf:f8:87:ed:a0:4e:84:41:0a:9b:40:
80:f7:c7:e6:c0:54:db:c8:b7:c8:a8:69:96:7b:a9:
60:a6:75:69:b0:d0:81:60:d9:15:c7:c1:f6:47:55:
b2:0a:43:62:2b:57:73:80:25:56:04:75:0f:c8:ae:
dd:5e:f4:40:16:5c:0e:ee:ff:36:71:bf:ac:bf:d8:
82:3d:c4:aa:21:58:f7:85:e6:3b:00:1c:69:2b:f6:
3d:d2:b3:91:32:4d:de:c8:ef:f9:5f:fb:c9:d0:56:
61:08:16:7a:36:62:05:7a:d5:4f:d2:c8:63:97:44:
6f:95:00:ca:63:9f:bb:ca:d3:2f:bf:1c:90:c1:29:
43:b6:d6:33:68:2f:53:fb:ae:e6:31:f1:a7:bc:eb:
3f:37:bf:c0:ba:21:ad:5f:b4:a0:8e:da:0d:00:27:
7a:85:a2:d9:0a:20:35:cc:1c:80:46:de:1e:89:ce:
69:a8:99:60:15:46:fe:21:cc:87:4d:1c:38:d0:3a:
2f:df:93:7b:d9:a8:5c:d7:cc:12:50:0c:f1:88:c4:
74:bd:1a:fb:0b:39:47:54:85:38:56:9a:1e:a9:13:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:59:AF:E4:7D:9F:C5:2D:B7:67:61:21:01:B4:C7:F5:2F:BA:1C
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:25:8e:5c:5d:88:d4:10:b5:b7:a6:6b:d2:20:27:65:b3:19:
23:ff:aa:35:5c:81:9f:6c:de:8b:74:2a:47:e5:86:b0:6c:62:
a1:4d:6e:44:e6:ff:fd:b3:f7:bb:57:6f:1b:38:26:4c:50:c4:
5a:96:38:bc:43:c6:6b:8f:3d:3b:ed:7d:cd:51:2c:3f:79:14:
a2:88:a2:be:56:8b:82:24:15:74:f1:ed:4a:db:87:24:a0:4e:
75:35:6a:4a:3e:28:d4:e6:01:16:03:b9:d5:28:fa:9c:81:9b:
b8:4d:70:f6:47:e2:56:04:37:93:5a:e5:0f:84:14:44:65:e5:
04:81:4b:c3:5b:ad:3e:dd:01:d7:d5:af:92:36:e1:f7:f8:b6:
40:ed:b0:ed:44:60:36:f6:6c:f2:2b:13:1d:da:88:be:91:0f:
7e:ef:3c:c7:c1:30:be:8b:20:23:44:43:5c:82:f8:f3:1c:08:
3e:cf:66:f6:6e:c9:ea:37:22:80:58:c9:85:92:77:cb:9d:54:
1c:7e:a4:f2:f6:05:52:24:39:67:88:c0:1d:9b:94:3f:c1:0e:
fb:e4:ad:15:99:b2:e8:4e:30:a7:bc:61:ab:53:09:9c:64:cf:
5d:5d:7a:ce:63:88:2d:05:c0:af:00:15:2b:f0:49:39:0f:00:
2a:e9:63:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0SiP2i58nBVaME8UBXiWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz
ZjBmZWUwHhcNMjYwNDE3MTkwMDQ2WhcNMjYwNDE4MTkwMDQ2WjAzMTEwLwYDVQQD
EygxNTMxNTlhZmU0N2Q5ZmM1MmRiNzY3NjEyMTAxYjRjN2Y1MmZiYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOF+6ZHoXZzD2OPz1NQGPzBNLkfh
9a2+v7te31DqxmJAz/iH7aBOhEEKm0CA98fmwFTbyLfIqGmWe6lgpnVpsNCBYNkV
x8H2R1WyCkNiK1dzgCVWBHUPyK7dXvRAFlwO7v82cb+sv9iCPcSqIVj3heY7ABxp
K/Y90rORMk3eyO/5X/vJ0FZhCBZ6NmIFetVP0shjl0RvlQDKY5+7ytMvvxyQwSlD
ttYzaC9T+67mMfGnvOs/N7/AuiGtX7SgjtoNACd6haLZCiA1zByARt4eic5pqJlg
FUb+IcyHTRw40Dov35N72ahc18wSUAzxiMR0vRr7CzlHVIU4VpoeqRN/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUxWa/kfZ/FLbdnYSEBtMf1L7ocMB8GA1UdIwQY
MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt
ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj
LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSWOXF2I
1BC1t6Zr0iAnZbMZI/+qNVyBn2zei3QqR+WGsGxioU1uROb//bP3u1dvGzgmTFDE
WpY4vEPGa489O+19zVEsP3kUooiivlaLgiQVdPHtStuHJKBOdTVqSj4o1OYBFgO5
1Sj6nIGbuE1w9kfiVgQ3k1rlD4QURGXlBIFLw1utPt0B19Wvkjbh9/i2QO2w7URg
NvZs8isTHdqIvpEPfu88x8EwvosgI0RDXIL48xwIPs9m9m7J6jcigFjJhZJ3y51U
HH6k8vYFUiQ5Z4jAHZuUP8EO++StFZmy6E4wp7xhq1MJnGTPXV16zmOILQXArwAV
K/BJOQ8AKuljzQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:29:58 2026 by rpki-client