Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
File: JKtnE2v5kKqL6IV6aNLDmezWKZo.mft (raw, json)
Hash identifier: 2Ef8ToicQ84CnQIQ5svGOdBmktkyFrchbogLmj11uOc=
Subject key identifier: EA:5E:85:C2:82:CA:B7:1A:74:2A:AB:3D:3D:C5:E5:BF:7C:AD:00:C0
Authority key identifier: 24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
Certificate issuer: /CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Certificate serial: 019D9D3ED85F94139494D2E22D526DA6718B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 21:00:34 +0000
Manifest this update: Fri 17 Apr 2026 21:00:34 +0000
Manifest next update: Sat 18 Apr 2026 21:00:34 +0000
Files and hashes: 1: JKtnE2v5kKqL6IV6aNLDmezWKZo.crl (hash: M1S1Tmuy0Smd+UcI9hykGNjDS2lo7rCAAfJq2vSs3pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d8:5f:94:13:94:94:d2:e2:2d:52:6d:a6:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ab67136bf990aa8be8857a68d2c399ecd6299a
Validity
Not Before: Apr 17 21:00:34 2026 GMT
Not After : Apr 18 21:00:34 2026 GMT
Subject: CN=ea5e85c282cab71a742aab3d3dc5e5bf7cad00c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:82:f6:09:41:06:d5:73:18:c6:a4:d9:22:
38:02:80:b8:37:5e:98:52:26:97:6f:a7:35:1d:f7:
f9:8d:41:da:25:9f:89:e4:aa:91:32:71:b0:73:74:
6f:de:8b:75:28:73:fc:7e:06:f7:08:1c:a5:5d:a4:
c4:00:a8:5d:69:33:5c:11:f0:1a:fc:51:e3:43:b9:
ed:7a:d7:6e:f0:87:2c:10:b1:0b:70:02:95:be:d8:
97:d9:7e:b8:0d:53:6e:f1:44:1c:19:99:1a:3f:9b:
ff:21:11:59:35:43:cd:29:4e:6b:82:74:38:f7:57:
5f:d9:1f:fd:7a:8a:9f:6e:2e:59:6d:66:2f:c2:53:
a1:56:ab:26:33:f5:71:d8:b6:1f:b5:b7:79:fe:86:
14:13:2c:a0:6c:54:2c:f3:54:f8:3f:d4:e7:13:9e:
03:83:33:47:8c:22:59:2d:d7:21:c4:c6:9e:67:3b:
22:0d:4d:1c:f5:c8:91:72:31:7a:45:02:46:91:12:
27:2a:2f:79:e4:74:70:32:bf:4b:8a:92:81:91:9b:
ad:3a:1e:e9:36:58:03:48:13:f4:f8:6d:0b:42:99:
ad:fe:65:07:94:62:b0:3e:fe:3b:e4:1f:31:c4:3e:
39:14:4d:d2:b8:30:0c:90:48:5d:51:a4:6e:61:09:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5E:85:C2:82:CA:B7:1A:74:2A:AB:3D:3D:C5:E5:BF:7C:AD:00:C0
X509v3 Authority Key Identifier:
keyid:24:AB:67:13:6B:F9:90:AA:8B:E8:85:7A:68:D2:C3:99:EC:D6:29:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKtnE2v5kKqL6IV6aNLDmezWKZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/088521-2398-457b-b1e3-dd3360393391/1/JKtnE2v5kKqL6IV6aNLDmezWKZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:7d:ae:69:a4:ee:7a:2b:93:c6:e3:85:64:11:e6:3a:f0:
1a:59:be:37:56:ff:08:a0:61:c4:00:8d:fc:47:bb:32:d4:e8:
40:a0:3c:6c:92:97:21:d0:b7:f4:5a:4a:8d:f5:03:0b:f6:13:
aa:04:95:f9:79:b3:46:cf:ad:5a:57:dc:54:11:3c:d5:05:3e:
9d:60:34:90:5d:3d:2c:3b:c4:7b:e0:3e:18:4c:2a:e9:88:6d:
d0:2a:47:ba:55:47:98:c8:14:2d:a3:37:e8:0c:d4:b0:65:6d:
80:22:13:ba:ee:58:eb:9a:60:9b:56:16:de:7c:a5:90:28:2d:
10:5b:0e:73:f7:49:37:53:5d:ed:b9:e1:0e:15:ac:24:e1:55:
14:1e:93:57:86:cb:7c:be:7e:60:42:ee:11:4b:f6:2b:fe:1a:
73:66:b7:ed:19:1a:ee:8e:04:f9:9f:92:1e:3c:0b:c9:6e:5d:
2c:e4:c6:db:63:68:7e:28:a5:cc:14:34:d6:43:55:0d:f6:96:
4a:f3:0e:09:b5:01:d9:01:9d:57:78:2a:5b:1a:98:21:43:56:
da:24:64:a5:96:36:f4:fa:e4:d6:41:6f:b6:81:51:66:12:42:
d6:d6:24:4d:c3:c6:0a:3f:be:ba:d5:13:20:e6:7a:52:f6:e1:
43:c8:ee:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:23 2026 by rpki-client