Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: KICwAkFD4NBuI1HJnJkM/z3VAOZzFpF64guSeg7dlvA=
Subject key identifier: 4C:7F:50:6D:EC:5B:8F:AF:EA:B9:D4:28:52:33:CE:64:F9:DA:D4:55
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 019D9AE30A30C59AE6FC99E262BEBA218928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:01:03 +0000
Manifest this update: Fri 17 Apr 2026 10:01:03 +0000
Manifest next update: Sat 18 Apr 2026 10:01:03 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: EgmUKgFNyPjXRuPLf/o15M07HZg+IimFs4pM66c5qHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:0a:30:c5:9a:e6:fc:99:e2:62:be:ba:21:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Apr 17 10:01:03 2026 GMT
Not After : Apr 18 10:01:03 2026 GMT
Subject: CN=4c7f506dec5b8fafeab9d4285233ce64f9dad455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:67:86:c1:db:11:f0:ea:eb:92:ec:28:b7:
60:e3:39:49:9c:30:77:fc:c0:a7:81:d4:3c:cf:b7:
5f:58:d3:4a:65:23:58:7b:b3:04:00:ff:d9:f8:0f:
da:88:ef:33:84:c4:3b:11:02:7d:90:e2:f3:af:9a:
32:c3:49:fb:a6:a4:f0:be:d2:ce:ea:ff:6f:89:a2:
df:93:41:82:99:60:8c:01:f4:b5:2d:36:cf:19:26:
dc:ee:b3:2d:43:68:2c:e6:05:6f:72:ab:e6:e8:d7:
1c:b3:8a:2e:0a:aa:78:71:dc:67:2a:ca:3a:8f:02:
fd:23:b1:6d:9b:a8:7f:b9:3b:6f:3b:2a:56:93:7f:
66:59:f7:41:92:75:1e:47:37:d1:58:a6:3d:87:26:
70:9f:a3:93:73:3c:16:b5:66:e0:90:4e:08:84:58:
31:0c:c7:41:e9:2d:22:a9:ed:67:6c:ca:7b:da:11:
5c:c6:ef:d2:d8:14:6e:79:14:d4:28:0d:cf:ae:cb:
09:a5:d9:e1:47:a1:4b:6e:60:04:c7:be:62:32:ab:
e2:03:42:e5:35:a0:23:29:40:1d:b0:a2:3e:1c:de:
95:90:b6:af:79:1f:d0:1f:9d:2f:2f:70:4d:ff:4d:
3c:e5:88:39:23:f2:5b:68:32:73:4b:47:a3:99:cb:
93:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:50:6D:EC:5B:8F:AF:EA:B9:D4:28:52:33:CE:64:F9:DA:D4:55
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c1:23:90:e0:5f:ce:d1:cb:b6:49:d0:07:27:c9:10:a3:95:
0e:3f:ba:46:b2:f4:a8:56:f2:00:08:00:8f:ed:4b:97:e2:80:
0a:68:be:e7:6c:f1:e5:33:50:61:d5:9e:87:c3:68:1e:be:28:
1e:83:d5:53:f4:f8:92:02:56:a8:6d:08:7f:e9:7a:f3:06:39:
3d:b4:b2:47:92:6b:e6:5d:f6:bb:5b:13:f1:ef:99:16:39:e4:
12:32:a2:b8:cf:2b:9b:ad:c4:eb:67:27:86:e6:26:22:8a:a0:
0d:77:45:8a:bf:73:a0:9c:c0:2b:da:1a:58:63:71:b5:60:c5:
d1:12:3b:67:e0:5b:60:59:0e:1c:ce:e0:a5:e2:a4:ed:57:09:
3f:9d:3c:a1:21:0d:ea:61:29:74:e7:ff:ce:76:0c:73:64:57:
66:21:e0:cf:f3:e2:cb:f6:f5:b9:bb:65:c8:40:52:fa:90:e5:
b9:88:43:83:a3:f7:3c:81:23:1c:76:2d:62:0d:92:09:bf:3a:
a9:60:d3:ec:a6:6f:ec:3b:c1:63:8d:e5:9a:96:cc:e6:cf:a4:
08:be:b4:85:19:13:be:90:24:b8:c0:3f:27:7f:ce:47:e4:21:
18:b0:f7:bb:eb:cc:e8:12:35:2e:ef:c1:cb:04:47:8f:f5:95:
75:af:27:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:35 2026 by rpki-client