Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: PpCgKXgtvn/0TAuMp5PkGeqkXywcpD8fgjLP//I8u6s=
Subject key identifier: 4A:E2:4E:0C:CB:0D:64:68:72:E2:96:36:79:CE:D9:C7:0A:5D:FB:D9
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019D98F4B76FA783DFF2B49E6EA1B8E81599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:07 +0000
Manifest this update: Fri 17 Apr 2026 01:01:07 +0000
Manifest next update: Sat 18 Apr 2026 01:01:07 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: 8i0ewvoyf/KPKUt6ng8uSO2NfNeIsQdDM0kn5aGle6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b7:6f:a7:83:df:f2:b4:9e:6e:a1:b8:e8:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Apr 17 01:01:07 2026 GMT
Not After : Apr 18 01:01:07 2026 GMT
Subject: CN=4ae24e0ccb0d646872e2963679ced9c70a5dfbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:c6:d3:0c:0b:16:a5:fa:da:65:91:0b:d5:
08:e2:cb:8d:b9:c1:a5:b7:26:c4:ef:a8:29:be:e1:
67:c7:6f:35:7a:12:a5:14:3d:3b:9c:7f:c8:ed:64:
ac:77:e5:71:06:2a:b5:8e:2f:3a:cb:a9:4f:7a:5d:
7f:98:cf:67:76:e2:34:0f:d6:93:88:58:9d:e1:32:
15:e5:a5:ca:fc:74:28:58:45:5d:33:0f:30:8e:a3:
2a:29:89:2c:07:9b:99:73:e0:85:df:7e:cc:45:99:
18:58:af:b1:1c:1c:9c:6a:0e:61:63:66:6c:ec:24:
21:14:8d:b6:5c:f9:cf:86:de:9c:c4:35:23:06:70:
d8:9a:5a:83:cf:89:52:70:d3:16:cc:7f:d4:c9:b0:
04:74:f1:d2:7d:cc:ac:9a:79:ba:de:37:89:bf:04:
b9:7f:90:f6:b7:f0:63:9c:ea:11:31:2a:f9:ca:9d:
35:f8:50:34:62:d2:0c:2d:40:10:0d:18:da:40:71:
65:3c:06:78:7e:d3:72:79:a8:7b:c9:54:ce:c7:71:
4a:9d:95:a3:a1:8a:c9:65:da:e2:5d:d7:0b:7b:87:
35:85:38:87:11:e8:fc:3c:e2:95:f1:44:76:49:b8:
94:1f:74:49:0d:83:4e:b0:6f:ec:1e:45:fb:df:56:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:4E:0C:CB:0D:64:68:72:E2:96:36:79:CE:D9:C7:0A:5D:FB:D9
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0c:38:3b:60:5f:c7:59:6e:6d:54:b0:31:9b:f9:4d:87:66:
46:0d:bf:cf:3d:f5:40:f6:cf:b3:42:48:b3:c4:80:67:a3:2d:
91:1e:78:6c:bb:05:3a:a6:7c:50:a4:89:14:6e:9d:59:7b:55:
34:6f:fd:65:f1:48:94:39:e9:13:e7:b1:63:d6:51:8b:ca:14:
0c:c3:5d:ab:9a:3d:6a:11:7c:9b:81:c6:41:e1:1b:15:70:ce:
b1:60:e4:d0:4b:3b:e8:76:29:0c:58:70:f8:30:ab:bd:4f:2b:
11:86:28:d1:4e:c9:f8:76:d3:41:97:ee:e9:e7:c1:e4:3c:f2:
9c:76:88:60:d3:28:a1:d6:a7:1f:b8:e4:1d:c5:d4:d7:00:04:
7c:82:80:38:eb:d9:84:04:0b:3d:39:7e:7c:78:0a:dd:ec:91:
2c:04:6e:32:65:fc:e5:cc:4a:8b:9a:63:c2:d0:c7:73:a0:86:
9f:15:c6:5a:3c:9f:10:51:1a:62:3b:f8:92:e3:99:ba:7b:8e:
d9:4a:41:30:47:d1:36:7e:14:17:ed:b4:bd:cd:5c:22:04:7a:
ad:92:d0:76:d4:7a:93:55:b9:61:21:4d:08:c8:6b:1a:92:7f:
82:19:65:0f:8f:e8:0b:89:1d:9e:7f:50:90:9e:39:73:a6:33:
57:34:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:57 2026 by rpki-client