Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
File: JkXNQMgEm-mprn8DM2q9P-CCr7k.mft (raw, json)
Hash identifier: dhbVIbP02xHEG0uv/QI3WmX5N0lx8MSY3n8cj/pOisA=
Subject key identifier: 37:CA:16:7F:96:FC:E3:A7:31:89:C4:39:4F:56:E9:B7:2C:CA:AD:2B
Authority key identifier: 26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
Certificate issuer: /CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Certificate serial: 019D98F468F2E28EDD6DED755CA1230293B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:47 +0000
Manifest this update: Fri 17 Apr 2026 01:00:47 +0000
Manifest next update: Sat 18 Apr 2026 01:00:47 +0000
Files and hashes: 1: JkXNQMgEm-mprn8DM2q9P-CCr7k.crl (hash: P4j5jWs7crmlwUiHh+yzuguC1vKMfSCfmx5Fno1a00E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:68:f2:e2:8e:dd:6d:ed:75:5c:a1:23:02:93:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2645cd40c8049be9a9ae7f03336abd3fe082afb9
Validity
Not Before: Apr 17 01:00:47 2026 GMT
Not After : Apr 18 01:00:47 2026 GMT
Subject: CN=37ca167f96fce3a73189c4394f56e9b72ccaad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:63:d8:84:ac:25:6e:8f:5b:fb:5d:6e:aa:
90:14:5c:34:f0:13:69:ed:b5:b0:f7:42:40:27:74:
48:7c:e8:ef:7c:a2:44:02:34:11:d0:08:4f:c9:1c:
6b:98:8a:86:af:08:07:fc:b1:5b:b1:81:c6:1f:91:
03:41:7c:d5:87:8a:ca:cd:87:fc:48:e5:3c:73:de:
e8:68:6e:75:e8:88:5e:7f:c4:e0:e8:b5:df:f5:9f:
78:9d:e6:eb:af:4d:ce:20:21:4f:c1:2c:d3:a5:92:
b6:30:16:44:55:eb:76:32:78:6c:c7:f4:2d:02:ae:
e6:71:d3:31:79:61:49:81:19:e7:c5:99:2b:7e:b3:
01:d1:36:bf:0f:dc:c5:2a:8c:2b:91:e4:2c:d3:8f:
a5:50:4f:3d:a1:cc:90:62:56:7b:ae:2d:c6:fb:64:
a5:72:2e:92:fa:32:90:83:7f:30:c2:6e:b7:7a:cf:
ff:d7:d7:68:a8:99:b9:be:fd:01:2d:49:31:34:cd:
d6:cd:08:19:79:46:3f:f7:3c:ee:1d:f0:f5:50:98:
12:f9:18:72:62:33:90:f1:09:f1:8f:93:50:fd:d4:
d4:0d:cb:6c:b3:be:02:ad:d2:99:b3:b0:70:93:1f:
19:5c:66:a2:9d:1f:81:56:4b:65:e7:cf:d9:41:e6:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:16:7F:96:FC:E3:A7:31:89:C4:39:4F:56:E9:B7:2C:CA:AD:2B
X509v3 Authority Key Identifier:
keyid:26:45:CD:40:C8:04:9B:E9:A9:AE:7F:03:33:6A:BD:3F:E0:82:AF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkXNQMgEm-mprn8DM2q9P-CCr7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d9732b-4df9-45c6-a91e-c1149a01815f/1/JkXNQMgEm-mprn8DM2q9P-CCr7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2c:22:79:dc:95:18:15:46:f1:72:70:d0:1b:ca:97:40:5b:
b0:fa:29:67:ec:20:4e:ce:bf:28:3e:3c:85:c5:c7:35:aa:75:
6e:13:30:f6:07:63:b4:7e:b9:da:6e:7e:23:03:fc:49:99:cf:
45:d4:1b:f4:e0:97:7e:e1:b6:7f:59:92:19:c1:c4:26:3b:e0:
1a:fd:d8:1c:55:d3:db:ba:d8:01:01:13:e5:94:77:21:41:74:
c3:18:07:fe:c6:9e:d4:1b:89:7e:8c:fd:d1:3f:1e:92:de:39:
51:df:d1:38:a7:e1:42:47:0f:8b:2e:c9:ea:5c:63:e3:18:74:
71:58:5a:49:c7:02:04:a6:2f:89:77:a9:80:60:83:1e:24:9b:
2f:4d:14:31:b8:5e:39:42:ed:e5:91:c6:b9:8d:f4:48:28:39:
b1:64:e3:bc:b3:8d:b1:8b:e3:15:5b:16:5d:5f:2c:e7:0f:03:
13:e7:df:9e:f3:8b:de:73:24:ef:89:62:cc:ac:fe:f2:66:ac:
1c:b4:e1:64:ac:9d:47:14:89:99:93:38:d8:bf:cd:1f:6e:f2:
85:4e:7a:66:c2:38:a6:39:05:96:eb:c9:16:80:8e:05:65:ac:
16:a1:65:6c:d1:00:2a:f3:0b:df:6a:ed:bf:5c:06:a5:c6:00:
25:cd:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:21 2026 by rpki-client