Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: 8AyRzYo4V2uQ78Xqf+C1a+eLGBCD1Mx+zXbH6msbAss=
Subject key identifier: 98:48:CC:47:23:C0:48:90:9E:51:00:5F:D0:C3:06:8D:5E:7D:77:5B
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019D999957A3F278F04DFFE81EC8C7D44224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0F56
Signing time: Fri 17 Apr 2026 04:00:56 +0000
Manifest this update: Fri 17 Apr 2026 04:00:56 +0000
Manifest next update: Sat 18 Apr 2026 04:00:56 +0000
Files and hashes: 1: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: PCB+jQKQ6Pj65B6XfftDwtTLyVtDwNGUQON64UEe/hU=)
2: qPgFOiKxJLDpdTilhYgZPrKGHjw.roa (hash: m7UK15QpMiMYw7CRC6ZOxg/sICx/UBTV4BV3vXeXMv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:57:a3:f2:78:f0:4d:ff:e8:1e:c8:c7:d4:42:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Apr 17 04:00:56 2026 GMT
Not After : Apr 18 04:00:56 2026 GMT
Subject: CN=9848cc4723c048909e51005fd0c3068d5e7d775b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:cd:29:c9:6b:d9:2a:ad:4c:52:b0:5c:29:
76:fe:8d:b3:35:13:62:40:bc:1e:bc:4f:e6:4d:f2:
a8:5c:27:ca:63:5b:a9:9c:fd:21:f2:02:9b:fb:f8:
e4:f1:a2:e2:03:5c:7d:72:0b:51:e8:16:e7:25:62:
ef:c8:30:22:dc:b2:fb:04:e8:8d:bb:ed:8d:27:30:
23:7d:37:b5:27:39:a8:85:95:b5:36:76:f1:9d:e2:
71:d2:25:87:a1:e2:dc:75:90:4f:bc:c0:22:5c:99:
39:18:68:9c:f9:45:3e:a7:1f:be:64:a9:c6:c6:03:
9a:39:6b:28:e8:e5:19:19:cd:b5:4e:84:02:48:4b:
5b:6b:68:90:75:48:dd:5d:5a:6b:4b:07:6e:af:49:
1e:19:55:0b:7e:cf:aa:46:75:e1:b4:94:d8:8f:b4:
59:02:12:45:70:e4:03:34:73:8b:44:a1:68:48:0a:
d3:09:e1:18:9f:d7:a1:a6:f2:6d:9a:8c:68:1f:2a:
66:07:2b:7d:27:6d:6a:eb:e7:74:42:d8:bd:e4:83:
f2:0c:8b:09:3c:48:28:22:db:cc:b9:3e:11:d4:f0:
00:23:6a:a5:7e:3b:25:d2:b9:ba:14:8b:c7:b9:e4:
7b:de:06:cf:d4:95:d0:13:15:aa:34:f3:8f:71:17:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:CC:47:23:C0:48:90:9E:51:00:5F:D0:C3:06:8D:5E:7D:77:5B
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a8:5f:04:24:54:67:41:a1:ec:16:51:f0:a0:27:88:90:d5:
93:0e:f2:3a:64:1d:e0:5f:d2:ac:8c:73:b3:44:c7:98:ac:2c:
d4:1a:2a:f3:b6:bf:a0:d7:15:3b:58:ca:10:1c:15:07:a1:04:
e1:39:2e:c7:c2:25:31:03:eb:c2:4b:eb:aa:72:a6:19:a7:23:
45:c5:12:9a:a3:49:60:1a:21:19:d5:e8:98:1c:48:e1:5d:6e:
f7:23:42:84:fa:fe:73:02:39:99:5a:1f:e2:8b:fd:08:34:6d:
2a:59:b5:f4:83:1e:16:a8:4b:5f:ac:68:6f:38:6d:4c:d6:14:
b8:1a:c7:01:7c:99:c6:4a:21:5a:d1:89:84:9c:85:b7:f9:9e:
6c:92:49:0d:fd:1a:4a:2c:09:7e:2a:34:b0:87:ab:a4:d6:31:
42:b7:a4:b2:7b:39:01:6a:d8:5e:1d:1a:11:e2:7e:23:0f:6d:
c7:d3:42:06:bd:79:8a:4f:27:c4:e3:af:ea:d8:d7:fb:63:e0:
18:d1:0b:1e:5f:69:b5:c2:a0:9b:85:e1:89:00:f1:90:5a:6d:
48:d4:79:2e:10:b3:12:ce:1f:3d:6c:fd:9f:df:b5:05:02:1c:
64:91:fc:af:d7:30:24:9e:d0:68:77:15:e7:6d:5c:ff:1b:36:
0c:06:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:04 2026 by rpki-client