Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: OQv/t4pvBuA1joH69xRMwKGAsTE3OkdzVzonHE67bjc=
Subject key identifier: 1E:CA:20:95:44:BD:CF:7A:AA:CC:36:03:73:7B:69:5B:0D:CB:7C:E7
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019D9850428D7B2B76931679FB8E6271C026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:29 +0000
Manifest this update: Thu 16 Apr 2026 22:01:29 +0000
Manifest next update: Fri 17 Apr 2026 22:01:29 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: 8HPPI8xeXk0E7CLQxylGrqjD9RgN3lRGCTHgOcKrTy4=)
2: qaXfGqRy8REPCt5AS8O0mmZxMbQ.roa (hash: s2r/NmzprssiG6q7fm25EDu8EjVb4m0dpfMF/5RAabI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:42:8d:7b:2b:76:93:16:79:fb:8e:62:71:c0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Apr 16 22:01:29 2026 GMT
Not After : Apr 17 22:01:29 2026 GMT
Subject: CN=1eca209544bdcf7aaacc3603737b695b0dcb7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:ec:a2:21:dc:20:78:ff:e1:03:05:8a:2e:
70:ba:be:7c:b1:56:4d:60:ab:0c:10:0d:ab:cf:c8:
6d:e8:04:86:13:be:32:19:7f:06:c8:11:55:5d:fd:
4b:67:55:64:43:76:df:a0:09:c8:f0:05:4a:08:c5:
d7:72:77:2f:16:d9:0b:0e:8f:a8:97:68:44:40:67:
54:45:94:82:7d:27:32:f5:21:92:dc:81:7d:20:d5:
ab:82:87:b4:e1:a5:6a:f5:d1:6d:a9:f3:82:e7:b2:
c0:80:f8:6c:18:e6:95:af:90:f9:b7:f3:20:90:ce:
31:cc:90:cb:ca:e6:03:bc:ea:42:93:53:66:4b:76:
f9:49:c5:51:88:5f:70:70:e2:e2:5e:17:e1:59:ef:
86:86:da:90:6b:e9:06:5e:5f:bf:c4:bf:9f:68:f1:
99:ad:a1:a1:03:76:a4:d9:36:15:d2:3f:1e:f3:de:
e3:67:36:96:04:eb:d2:99:92:cb:8c:cd:7d:e2:1b:
2e:27:87:4f:e2:c6:89:5c:6b:10:5b:0d:35:58:31:
b9:6e:b4:34:9b:38:8b:5e:b4:0d:e1:bc:d0:57:a9:
78:0e:5d:73:c9:af:f3:31:49:9e:d3:ff:33:83:9d:
b2:7e:4d:c9:4f:44:21:21:35:34:af:09:ed:53:28:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:20:95:44:BD:CF:7A:AA:CC:36:03:73:7B:69:5B:0D:CB:7C:E7
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:40:d4:3d:6b:b8:8d:cc:5c:1e:40:91:cd:75:1c:95:2a:a1:
02:ab:65:f7:ff:4a:7a:3b:d2:51:f4:6f:b2:55:e2:f0:30:91:
58:69:de:71:76:27:60:af:34:3e:44:f4:23:44:d6:96:25:ce:
cf:02:cc:53:2e:47:f8:76:5a:44:cc:e9:e9:2f:5e:f7:fa:df:
9e:fb:1c:61:3c:56:ed:be:b2:14:e0:f1:e6:6e:51:24:9f:e5:
8f:de:75:cd:d0:c3:fa:95:83:92:8e:ba:bf:32:60:3b:b6:4e:
e5:62:d8:9e:5d:ed:d6:43:0f:8d:4f:4b:c0:89:78:d2:94:28:
2c:7b:9a:68:43:54:e4:a2:97:a1:f2:93:b3:d6:9a:cf:89:d2:
86:29:d1:19:27:b2:ae:63:79:b2:eb:f5:76:26:cc:ce:03:26:
d5:e5:b5:e1:16:90:c0:19:cf:9a:51:4f:e7:f1:3a:a0:64:1c:
c9:6d:1e:9f:68:98:4b:36:bb:c8:1e:37:a1:02:a6:56:cd:e9:
29:25:bf:3a:0a:9d:e2:7b:6b:95:46:ac:1a:87:3c:74:8b:62:
ef:aa:87:ef:ae:0a:4e:88:8d:53:c1:9c:c3:2e:d5:d4:28:11:
a0:56:4a:ce:17:54:66:ee:f0:7f:af:a9:99:e3:9a:3e:db:3b:
9b:e5:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:42:43 2026 by rpki-client