Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
File: jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft (raw, json)
Hash identifier: As15Nyf3WG1UUmVhN7+FGgTWzK7walhsRc2w5LmTDno=
Subject key identifier: 42:D1:D4:64:E5:A0:99:B8:1F:DB:63:95:CA:29:20:7F:3A:CF:40:47
Authority key identifier: 8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
Certificate issuer: /CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Certificate serial: 019D98F4C62BD8E7EA364C40667C9D2E3E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
Manifest number: 15CA
Signing time: Fri 17 Apr 2026 01:01:11 +0000
Manifest this update: Fri 17 Apr 2026 01:01:11 +0000
Manifest next update: Sat 18 Apr 2026 01:01:11 +0000
Files and hashes: 1: jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl (hash: 0c3987EbPomyNZIyShp7AMQvEAXceMv9WG/r1g8+owI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c6:2b:d8:e7:ea:36:4c:40:66:7c:9d:2e:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1f91a9eb389a26689ef03763a1dbb09d6825bf
Validity
Not Before: Apr 17 01:01:11 2026 GMT
Not After : Apr 18 01:01:11 2026 GMT
Subject: CN=42d1d464e5a099b81fdb6395ca29207f3acf4047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:06:99:5d:93:46:aa:17:05:67:8d:70:7e:
b0:a6:69:52:3e:3c:81:75:74:f6:9f:1d:4d:3b:7e:
5c:9e:bc:94:a7:fe:86:81:01:88:f2:df:99:e8:76:
01:24:12:6f:2f:66:6c:f6:f4:a9:83:7d:a2:1a:5c:
f2:34:b1:72:a0:ce:6f:ef:96:97:46:8e:27:9c:58:
fb:bd:d4:11:59:39:e8:c0:0d:c6:ed:4c:89:93:88:
54:8d:be:33:17:60:e9:db:f0:91:37:b5:d9:4b:d2:
b1:fe:df:bf:3f:9a:bb:d6:64:be:a8:f0:62:f8:b4:
3d:f8:0d:1f:4e:3b:87:37:67:45:47:63:84:59:e1:
2b:a6:0b:94:75:1e:63:76:1c:a0:2f:9b:80:83:87:
2f:f7:a7:8c:37:16:9b:bd:3c:71:d0:9c:9b:1e:3f:
9d:cb:0f:82:51:0a:e1:97:3d:9d:dd:b7:76:2d:e8:
ce:27:ef:b9:73:41:d2:a7:22:e7:a5:aa:06:87:86:
6c:eb:b0:a4:7c:64:33:60:19:6c:90:bd:48:44:ff:
01:12:6f:73:12:b9:d3:b9:d6:c6:93:0e:32:bc:6d:
f2:35:d3:94:fd:0d:4f:9a:56:5f:fa:ba:06:b9:1d:
53:de:40:4e:3d:38:6c:f1:18:6d:38:88:bc:ba:57:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:D4:64:E5:A0:99:B8:1F:DB:63:95:CA:29:20:7F:3A:CF:40:47
X509v3 Authority Key Identifier:
keyid:8F:1F:91:A9:EB:38:9A:26:68:9E:F0:37:63:A1:DB:B0:9D:68:25:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jx-Rqes4miZonvA3Y6HbsJ1oJb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b2b6a-b28a-44df-922d-f57fc1fcd32e/1/jx-Rqes4miZonvA3Y6HbsJ1oJb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:db:10:18:38:31:57:83:a7:63:4f:d3:0f:67:82:4b:a9:57:
12:43:c1:da:9b:ae:8b:f8:a1:d4:b0:60:f6:98:04:79:19:32:
de:fe:e2:1e:08:c0:b3:b7:87:cb:32:3f:3d:ed:80:88:30:69:
ed:08:68:4a:51:fd:54:2f:bd:48:35:5d:30:5e:de:b2:39:4c:
ba:82:73:2c:8e:8e:9f:70:5e:c6:98:5b:e7:82:ff:58:86:7b:
c1:5c:2d:f9:a7:72:f8:c3:1e:5f:32:59:44:4a:4e:51:88:9a:
b9:ce:3a:d5:96:35:f7:cd:dd:39:15:f3:e2:a2:71:80:e7:e5:
56:97:5a:a5:74:99:ef:72:2b:c5:05:6a:7f:1d:c5:60:89:cc:
65:16:bd:e0:c4:be:6e:75:7b:f2:24:4c:7c:e2:7e:ca:01:f2:
49:7e:53:0e:01:1b:c3:be:f9:ad:f2:52:64:95:29:ae:57:04:
c6:97:a1:f0:2b:72:fa:03:7e:50:be:58:0a:6c:07:df:76:a2:
f7:d6:f2:3e:85:11:8b:aa:60:a7:3f:6f:1f:66:42:2b:de:30:
77:ee:51:cb:be:79:01:02:25:fe:f3:0f:da:5a:90:a4:f1:8b:
b4:4d:57:99:d4:64:33:2e:04:32:83:0a:93:83:f6:f2:6a:2d:
0f:d5:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:52 2026 by rpki-client