Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: TGpAkjCjW4denkc2O0mIurgEMfjQdAGaKxSsrbTd6jQ=
Subject key identifier: 67:33:62:10:32:DE:15:DF:08:2A:BD:08:FF:12:42:0E:5F:3D:60:E0
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019D9886DA197EE20B92C1E1E22BEAF44AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0D72
Signing time: Thu 16 Apr 2026 23:01:07 +0000
Manifest this update: Thu 16 Apr 2026 23:01:07 +0000
Manifest next update: Fri 17 Apr 2026 23:01:07 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: xO8FX65wDkWTjuIXmehru1Ped51SlDikZ4ZJdDx30+8=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:da:19:7e:e2:0b:92:c1:e1:e2:2b:ea:f4:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Apr 16 23:01:07 2026 GMT
Not After : Apr 17 23:01:07 2026 GMT
Subject: CN=6733621032de15df082abd08ff12420e5f3d60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:c2:65:94:9a:e6:f4:17:10:b3:15:08:38:
cc:20:3a:73:86:52:84:38:18:b6:31:8c:2e:47:d7:
38:21:27:d7:96:7c:8a:5e:66:cc:0a:99:2a:11:dd:
16:e9:23:55:75:bc:64:b5:99:32:89:4d:0f:20:0a:
de:a7:36:f6:20:21:8a:ef:17:95:b7:1b:94:70:26:
f8:d0:01:b9:82:59:8f:fc:e2:cf:10:87:5b:7a:d9:
40:23:82:84:c4:3b:61:a2:34:ca:98:c3:b4:ca:cf:
e6:07:84:cc:77:04:93:5a:e1:ce:56:6b:76:1d:18:
ac:33:0a:4b:77:2c:da:80:d7:c1:2d:48:71:52:88:
4e:c4:65:5c:b9:c6:44:6d:f2:bd:f0:15:75:e7:ea:
0a:68:1f:9d:66:a5:b5:43:ff:2e:13:ad:22:37:ba:
65:e2:b8:16:0a:8a:fb:5f:90:8e:58:0c:09:d0:04:
d3:cb:f2:07:c2:ca:3c:86:8a:9d:59:a8:7e:10:5b:
c8:db:3a:b4:b7:5d:a1:f4:56:5a:3e:80:0a:15:54:
7d:f8:43:81:94:db:8a:f1:2b:f1:ed:d0:78:32:fe:
62:3b:90:bf:3f:d1:b7:75:07:b7:c5:8d:21:47:ca:
ed:1d:13:da:5f:be:57:ad:e3:af:26:bd:49:8e:19:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:33:62:10:32:DE:15:DF:08:2A:BD:08:FF:12:42:0E:5F:3D:60:E0
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:50:1a:a7:97:a3:8f:a6:64:4c:d0:3a:4a:91:56:c5:bc:
ce:ca:3e:6c:46:85:ee:32:a3:af:80:78:dd:fd:6a:94:d9:ba:
0f:ec:d2:ee:ef:c2:2e:ea:19:ec:07:0a:a4:f7:0b:ce:fe:74:
2a:a7:12:e0:2a:8e:68:b1:7e:9c:82:9b:4d:37:c9:09:81:fa:
aa:48:b4:c6:9a:13:ec:7a:b0:34:71:e9:a0:60:2e:1c:4c:1e:
53:1c:08:a3:ff:fb:51:d5:8f:80:42:0d:69:a2:72:f7:6d:46:
32:4d:dc:b6:4a:b0:25:5b:ef:a0:b1:7f:58:59:00:1c:9a:3a:
e0:2b:85:bf:e1:2f:f7:3d:5c:28:79:30:71:44:48:31:4e:7c:
f6:d7:ac:f9:ab:22:32:8e:25:6d:f8:ec:d6:98:da:f0:f9:62:
25:1b:06:f4:b5:b9:b5:d8:7b:32:2c:19:d9:1f:16:2a:fe:b1:
b4:de:27:74:29:b4:0e:e6:4f:87:6d:b8:92:23:56:67:51:d5:
55:a6:94:d8:3e:66:68:6f:74:09:29:04:e4:40:0a:38:f0:f9:
cc:3b:a7:db:57:01:30:e2:12:dc:b0:c3:b1:7e:4d:47:d8:72:
ec:66:e5:2d:2d:f2:80:77:4f:a2:0c:d2:9e:6e:e1:c1:fd:5d:
36:b9:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:56 2026 by rpki-client