Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier: O5TYkxZ2xyZfSfCeJUsZGjwoH61QMTJGP2QzGHylUpE=
Subject key identifier: F2:3B:77:99:C2:80:6F:1C:3E:CE:9A:8A:17:54:D2:9A:34:A1:0C:0C
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 019D9886727B36AE42E6ABDC43F308247535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:41 +0000
Manifest this update: Thu 16 Apr 2026 23:00:41 +0000
Manifest next update: Fri 17 Apr 2026 23:00:41 +0000
Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: g527n/yY/rY+WjGYGNI0wuqOSOj3RBMetTM4HRRHUCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:72:7b:36:ae:42:e6:ab:dc:43:f3:08:24:75:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Apr 16 23:00:41 2026 GMT
Not After : Apr 17 23:00:41 2026 GMT
Subject: CN=f23b7799c2806f1c3ece9a8a1754d29a34a10c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:91:40:17:9e:ef:b5:14:bd:a0:ce:7e:0a:
f9:03:fe:18:48:a5:40:e8:5e:74:6e:9f:25:fc:98:
0e:75:21:d5:ae:a9:36:46:ae:32:54:ef:1c:c3:66:
48:df:a4:ab:ea:28:f1:b5:79:75:3c:a7:4f:06:85:
c6:75:8e:b9:e6:2d:7e:51:64:0e:48:e9:dc:9a:ea:
1b:00:be:cb:c8:56:55:de:d5:fe:94:69:e3:1d:da:
c2:bc:b1:f1:8d:44:e9:e0:06:97:ff:00:d1:40:ba:
83:d8:5e:0b:32:75:52:f1:02:4a:27:ee:a5:96:a7:
47:02:35:07:40:86:a0:86:91:f4:74:2e:74:86:fc:
aa:4f:5f:5c:f7:43:76:b5:fe:81:0b:2a:d9:dc:47:
02:fa:90:d0:36:f1:b2:97:8f:49:40:63:39:75:6e:
1b:3f:af:76:06:5e:50:83:b3:85:3e:35:ce:72:d8:
17:77:b0:58:72:58:d2:cb:0d:aa:ad:e0:fd:1a:9e:
36:85:f4:bf:8f:da:d6:50:01:d9:37:49:25:8f:be:
0c:13:69:f1:15:2c:9a:71:91:4f:0c:c6:db:cd:17:
1d:4c:e2:b7:bb:5c:1a:b7:59:96:c6:51:05:c4:eb:
2e:0d:8c:38:da:3a:fd:6c:91:ee:a8:1c:c6:81:15:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:77:99:C2:80:6F:1C:3E:CE:9A:8A:17:54:D2:9A:34:A1:0C:0C
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:48:e3:7d:e9:79:c0:6f:35:ee:f6:83:42:b5:1d:cf:41:5b:
da:87:7e:de:b4:92:b5:c7:3e:fa:8d:c5:20:f4:4f:0a:91:f1:
6e:ef:6a:ba:2a:5a:f7:7c:cb:e8:ad:90:02:79:1c:76:47:e1:
88:c4:9c:21:c6:64:61:9c:d1:e3:46:d7:40:05:66:48:b1:ed:
10:13:bb:66:34:b5:41:a9:42:e3:fc:8a:2c:48:b7:54:75:9c:
a8:8b:c2:08:98:0a:ac:1f:1f:57:1e:39:c1:4b:f1:e5:65:08:
d2:78:25:fc:e9:22:01:d5:b0:3a:d0:e7:90:ce:6c:48:5f:82:
a3:e6:0c:dc:38:2d:64:ab:75:b0:cd:8d:1f:81:47:72:ae:12:
ed:12:c7:a9:69:ae:25:0b:9f:cf:6b:13:eb:df:bb:00:4e:cb:
03:ef:ac:f5:8b:cb:f2:62:c1:1a:bb:c6:6b:e4:c3:9e:cf:98:
4d:f3:19:e4:b7:bf:b0:c4:b0:44:85:39:27:34:98:f9:98:78:
9b:65:13:4e:7c:71:63:e5:01:cd:51:86:56:a8:e0:9e:d3:af:
46:ff:29:a1:68:fa:71:81:da:e4:88:9e:3a:f3:56:7e:83:df:
8d:7c:bf:65:3c:c2:84:14:07:10:4b:65:5a:05:c5:a0:e9:16:
55:b7:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:43 2026 by rpki-client