Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: aFaBm7nlYIHcGNHb6KhOwmrP8y9Oe/37PbUqhICO/0Y=
Subject key identifier: 0F:D8:66:3F:3F:8A:09:0F:73:53:1D:FC:51:AF:D7:F1:32:F8:2B:40
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 019D98F49A7EA0934B31BD8D57F656BA9FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 0C66
Signing time: Fri 17 Apr 2026 01:01:00 +0000
Manifest this update: Fri 17 Apr 2026 01:01:00 +0000
Manifest next update: Sat 18 Apr 2026 01:01:00 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: GWRM/Zw0aqYF45fMoxFIJR/o9F57tyiItGhP1wLrGq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:9a:7e:a0:93:4b:31:bd:8d:57:f6:56:ba:9f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Apr 17 01:01:00 2026 GMT
Not After : Apr 18 01:01:00 2026 GMT
Subject: CN=0fd8663f3f8a090f73531dfc51afd7f132f82b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:2c:d3:c4:2a:dd:1c:89:9e:bf:f9:c9:ce:
6e:6f:eb:83:2a:32:33:61:0b:47:b9:7d:18:69:44:
d0:04:fe:a2:b0:60:a0:2f:c1:fa:fe:ea:6f:48:3b:
3d:c4:29:1c:c3:fc:13:16:78:40:02:c7:0c:83:86:
79:5b:de:37:1d:f6:da:53:07:b9:97:1b:99:c0:9a:
17:a2:ae:60:a9:b9:cc:13:fd:d9:07:78:a2:06:3f:
43:f3:2b:cd:e1:c5:fa:b5:f4:cf:90:09:58:29:58:
1b:32:ed:0f:b2:6b:3e:14:6a:57:53:fc:fb:92:02:
c8:be:07:4c:4d:c4:f8:3f:ac:41:ca:f5:77:d2:52:
d5:24:39:a7:a1:02:28:41:b5:13:44:8e:52:b7:47:
65:ac:31:31:19:74:0e:7b:df:06:6a:47:84:09:a0:
85:f6:82:9e:c1:6f:cf:8f:32:e5:ae:28:75:e2:32:
83:25:38:b7:51:75:95:5e:7b:8c:6e:0a:f4:4d:5e:
6d:ec:b4:3f:26:aa:71:cf:9b:3b:f6:6d:8c:88:c8:
cc:34:bc:cf:8e:cd:e1:4f:24:4f:ca:d3:76:31:3b:
60:b8:cc:ed:0e:d6:a2:f5:5e:3d:6a:f6:8e:ce:15:
dd:ee:74:d9:b3:fd:2f:42:52:66:d1:51:24:52:78:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D8:66:3F:3F:8A:09:0F:73:53:1D:FC:51:AF:D7:F1:32:F8:2B:40
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:a6:12:cb:92:1d:00:40:ab:6d:66:e7:7f:b6:7e:e5:5c:
f7:f5:30:a6:56:73:f4:00:43:1c:12:d2:27:e2:2d:79:ae:33:
b6:31:fb:25:4a:3b:38:42:1d:05:a8:46:b0:10:6a:2c:74:74:
3f:5d:4e:46:9d:71:2b:74:a8:39:a0:89:27:61:d8:49:54:fa:
c3:4f:74:21:21:57:af:31:c7:79:e3:43:ad:c2:5b:2a:95:45:
70:de:90:5f:fe:09:5d:3b:19:f9:bc:cf:03:5e:57:65:07:63:
b1:ee:34:3c:93:0a:99:6a:a0:00:ab:d7:36:17:10:c2:45:5f:
81:d7:f4:52:dd:7d:b1:24:21:7e:d2:50:48:d7:4f:a7:85:7d:
4c:a1:62:c0:a2:1d:10:8c:d7:03:02:96:54:c0:b6:16:35:e3:
3d:38:0f:1a:12:d7:5e:b8:3b:c1:57:65:b0:1b:79:22:89:5c:
28:aa:45:df:0f:31:31:8b:ae:1c:56:4e:6b:3e:ee:a9:8b:44:
2c:85:ae:29:fe:39:2c:de:07:aa:89:cc:9b:af:12:2f:61:e3:
78:dd:5a:e6:9c:b3:2a:18:cb:76:74:3c:7a:f9:13:e8:22:18:
a8:46:d6:15:61:dd:01:a0:1c:91:dd:17:86:61:75:fb:33:46:
e7:d7:04:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9Jp+oJNLMb2NV/ZWup+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGUzNmEyNjZhMWY1ZGY5NWI5NmE2YjU4ZGExMWMyMzU0
ZGI1NWQwHhcNMjYwNDE3MDEwMTAwWhcNMjYwNDE4MDEwMTAwWjAzMTEwLwYDVQQD
EygwZmQ4NjYzZjNmOGEwOTBmNzM1MzFkZmM1MWFmZDdmMTMyZjgyYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQUs08Qq3RyJnr/5yc5ub+uDKjIz
YQtHuX0YaUTQBP6isGCgL8H6/upvSDs9xCkcw/wTFnhAAscMg4Z5W943HfbaUwe5
lxuZwJoXoq5gqbnME/3ZB3iiBj9D8yvN4cX6tfTPkAlYKVgbMu0Psms+FGpXU/z7
kgLIvgdMTcT4P6xByvV30lLVJDmnoQIoQbUTRI5St0dlrDExGXQOe98GakeECaCF
9oKewW/PjzLlrih14jKDJTi3UXWVXnuMbgr0TV5t7LQ/Jqpxz5s79m2MiMjMNLzP
js3hTyRPytN2MTtguMztDtai9V49avaOzhXd7nTZs/0vQlJm0VEkUnh4PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/YZj8/igkPc1Md/FGv1/Ey+CtAMB8GA1UdIwQY
MBaAFCaONqJmofXflblqa1jaEcI1TbVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5Nzgt
ZTJjNmIwZDZlZDk2LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mMzFmMjQtNGNmMC00OGVmLWE5NzgtZTJjNmIwZDZlZDk2
LzEvSm80Mm9tYWg5ZC1WdVdwcldOb1J3alZOdFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOumEsuS
HQBAq21m53+2fuVc9/UwplZz9ABDHBLSJ+Itea4ztjH7JUo7OEIdBahGsBBqLHR0
P11ORp1xK3SoOaCJJ2HYSVT6w090ISFXrzHHeeNDrcJbKpVFcN6QX/4JXTsZ+bzP
A15XZQdjse40PJMKmWqgAKvXNhcQwkVfgdf0Ut19sSQhftJQSNdPp4V9TKFiwKId
EIzXAwKWVMC2FjXjPTgPGhLXXrg7wVdlsBt5IolcKKpF3w8xMYuuHFZOaz7uqYtE
LIWuKf45LN4HqonMm68SL2HjeN1a5pyzKhjLdnQ8evkT6CIYqEbWFWHdAaAckd0X
hmF1+zNG59cE+A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:40 2026 by rpki-client