Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: Za8AWY0uLosog3L3jrVacBssboCafJxJA6hi8r3WCgI=
Subject key identifier: FC:64:22:0B:01:35:CF:08:76:94:42:63:8A:4F:B8:71:1C:ED:28:4E
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019D9AABE66B3CB0131AAB8846ED5EAF53AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 09:00:50 +0000
Manifest this update: Fri 17 Apr 2026 09:00:50 +0000
Manifest next update: Sat 18 Apr 2026 09:00:50 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: mtPGONhXwa9bRygNTjdAtINMP3sgilYlMXRpiAGBc4M=)
2: O8TEWtCyCFFFeBDFSQav1ileZCc.roa (hash: ZRW28K9Lr27GeePq4xOpOm3t2INDbE7syD4cgpdmkwY=)
3: nD_ARS36tkYEaFa24POgKi0TB4U.roa (hash: H1vCO9eNS9BAqP3EHrciv1VmoLehzHokRpUI2dSkh+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:e6:6b:3c:b0:13:1a:ab:88:46:ed:5e:af:53:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Apr 17 09:00:50 2026 GMT
Not After : Apr 18 09:00:50 2026 GMT
Subject: CN=fc64220b0135cf08769442638a4fb8711ced284e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:10:68:72:9c:13:10:10:e2:bd:1f:ed:20:
10:aa:a2:cd:99:06:63:bb:7a:05:e1:77:ef:a2:5c:
3d:2c:59:b8:e3:d4:b8:af:86:92:4b:20:d6:ed:a9:
18:55:9a:9f:08:59:45:8c:8a:d6:b0:3e:56:d9:d6:
54:16:ca:ea:ea:79:fb:de:50:37:b5:8d:fe:8f:de:
24:fb:ae:b3:70:72:05:01:f8:ca:30:41:ac:d0:a2:
36:4a:d1:6c:fc:82:95:11:fa:3e:5c:3c:84:4a:a4:
45:17:f7:64:94:44:fa:40:dc:4e:da:32:14:cb:c5:
35:5e:28:60:28:91:9f:a4:9c:b6:b6:be:80:12:e9:
57:de:63:fa:30:23:a3:2e:19:f6:18:1d:63:80:9e:
f4:81:9b:c5:06:28:e2:e1:73:25:85:30:2d:79:87:
0d:94:fd:f5:18:39:ca:5c:a1:23:19:f4:08:8f:ff:
03:fa:91:c9:13:a0:6a:47:5e:e6:03:dd:c9:58:49:
d1:69:8b:03:ce:97:13:4d:8d:06:21:7c:ac:00:03:
ce:07:00:54:2e:07:5f:dd:19:fe:79:8e:25:2c:9d:
20:0c:5a:39:6c:db:24:b3:ab:c2:05:05:70:c8:ac:
7b:44:c2:d6:5e:07:65:90:5b:4d:09:dd:c5:f9:d5:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:22:0B:01:35:CF:08:76:94:42:63:8A:4F:B8:71:1C:ED:28:4E
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:21:8a:ce:be:16:1e:92:86:4e:6d:91:21:ab:68:7e:b1:0d:
3a:7a:e2:46:62:97:c8:de:89:cf:ce:3a:e3:eb:90:89:48:20:
c9:2b:f2:b1:d5:a7:af:c3:f9:6a:6c:7e:43:56:a3:0d:ef:c4:
8c:d5:ea:50:fe:6d:20:af:b8:fd:45:43:73:42:a9:d0:c3:ac:
3c:8e:c9:3f:dd:02:87:eb:45:eb:87:0c:61:4f:db:2c:b1:5d:
1d:03:87:d3:80:e7:8b:f4:5d:bc:c1:a5:55:91:e9:81:a6:a9:
78:2f:6d:94:a0:b1:5c:9e:5e:72:b9:71:a0:32:87:82:ba:d2:
ca:15:73:77:bd:fe:0c:af:2f:cb:57:d0:68:73:ba:24:56:62:
95:5f:9c:1e:99:8b:e9:44:b9:61:72:76:04:25:f2:a6:8b:2a:
13:b2:0a:c6:7f:54:d9:cc:2f:b3:b7:c8:e6:b8:54:00:e9:af:
2c:52:98:90:ad:ba:8b:2d:d6:93:76:f2:54:7a:fc:7b:bd:18:
bf:d0:80:3d:b1:5b:40:8d:88:df:80:67:a0:d3:43:86:66:f0:
77:7c:b8:df:41:9c:25:26:49:91:e3:0c:5d:57:0c:4d:6f:72:
b4:c8:cb:ac:7b:a1:0c:13:73:e7:a9:51:de:3e:48:0b:88:dd:
86:cc:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:17 2026 by rpki-client