Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: APU2XRhyPOPtOCDT98cqWwG25rcEBBZIg9vDYAuzytA=
Subject key identifier: C4:37:9F:16:1F:94:91:DA:A5:19:0B:8C:20:6C:33:E8:B6:62:DE:49
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 019D9AE336D68A7E58C90AC48043BA7BE5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 1601
Signing time: Fri 17 Apr 2026 10:01:15 +0000
Manifest this update: Fri 17 Apr 2026 10:01:15 +0000
Manifest next update: Sat 18 Apr 2026 10:01:15 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: Xjjp6aBbx/+gBhqJC4Yh7pnsj+Kmbc/rS/qhQmQ24FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:36:d6:8a:7e:58:c9:0a:c4:80:43:ba:7b:e5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Apr 17 10:01:15 2026 GMT
Not After : Apr 18 10:01:15 2026 GMT
Subject: CN=c4379f161f9491daa5190b8c206c33e8b662de49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:17:c1:57:81:82:cc:b1:0b:01:0a:80:74:
ac:4f:26:cb:24:17:8a:5d:30:07:37:04:cc:2b:5f:
f6:a2:96:5f:3a:44:2b:27:3d:ff:d6:db:31:8d:08:
70:78:1e:97:4e:76:5b:58:c4:c7:d9:29:3e:ba:dd:
c6:2f:f3:d2:65:e8:b6:70:50:5b:b3:33:d2:64:70:
49:e2:cc:49:16:15:6a:ac:92:61:6e:25:36:9b:79:
a7:bc:0f:6f:3a:90:cd:83:38:90:b2:47:72:e8:61:
77:7a:ec:5e:62:43:cf:54:4b:02:10:c0:b8:17:ef:
48:67:7a:1f:c7:c7:97:43:ee:8c:94:c0:b5:93:e6:
19:28:f1:2e:12:a2:ea:08:f7:52:82:91:d0:8f:27:
f3:c0:a4:fd:01:60:20:98:b3:a0:3f:2f:b9:bf:c6:
66:79:d2:1a:87:7c:16:71:64:03:e0:5f:29:5f:77:
ed:5b:02:b1:5b:c9:0b:58:17:3a:7f:12:fe:34:00:
65:c1:1a:af:a7:4e:05:06:72:6c:96:f6:5f:60:a0:
2f:ad:76:81:b0:9c:0f:22:1b:f3:1f:00:26:21:35:
c6:be:c8:f9:2a:1a:12:6d:26:8f:40:95:fa:fd:13:
69:03:75:b2:82:9a:87:7f:54:bc:e1:16:f8:73:fa:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:37:9F:16:1F:94:91:DA:A5:19:0B:8C:20:6C:33:E8:B6:62:DE:49
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:ef:a9:09:31:6a:65:22:e2:c8:7b:06:4a:b2:b5:a8:a7:
60:c9:5b:a7:27:b8:3e:90:72:84:37:bb:a1:3e:76:70:cc:c5:
a8:b8:56:78:1b:79:ea:63:7d:65:dd:75:16:3a:c2:4c:e3:89:
6a:99:c7:98:43:b2:50:45:8f:83:ec:59:2d:fa:8d:f9:2b:7d:
89:d1:7a:40:7d:4c:35:92:06:33:80:97:8f:5c:de:63:eb:a0:
82:ca:f7:58:f6:cf:7d:ba:2a:09:29:19:7b:55:77:c4:b4:29:
da:25:ee:98:6b:5c:e1:9d:5b:e7:c1:f2:60:7e:a4:2d:5b:e7:
77:fc:cb:ed:03:b6:bb:d1:f8:53:2d:d7:eb:17:ed:14:ad:f6:
34:85:fd:6d:80:d9:4c:81:00:d7:97:3e:29:e5:6b:10:32:e5:
dd:6a:75:f2:f6:50:80:b4:ae:89:6c:69:46:f1:ed:6c:0e:ae:
e6:11:eb:e4:ce:30:8a:97:57:57:ba:0d:09:32:87:3d:82:de:
e4:d8:38:16:3a:01:74:db:54:5b:15:f7:ff:40:2b:49:43:52:
41:3f:88:84:ab:e5:36:eb:8b:f5:ff:61:6c:29:c5:68:19:f6:
cb:b2:c4:0a:2e:9e:fb:ea:c9:d7:b3:28:f0:ff:60:71:66:42:
85:82:53:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:34 2026 by rpki-client