Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: 2Zgvo9K5fGn7R/FghX6xplDX0NYr22NDgPgi5xWyYXI=
Subject key identifier: 90:3B:65:80:AC:F4:F3:72:7C:E6:73:42:AE:1E:4F:90:C9:17:8E:F6
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019D9AE39C358C734FFB9C5F3DEC5926A34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:41 +0000
Manifest this update: Fri 17 Apr 2026 10:01:41 +0000
Manifest next update: Sat 18 Apr 2026 10:01:41 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: dyUxP6xI1wffCw+iBQkg7l1AxovqTArvTB5CtGAM038=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:9c:35:8c:73:4f:fb:9c:5f:3d:ec:59:26:a3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Apr 17 10:01:41 2026 GMT
Not After : Apr 18 10:01:41 2026 GMT
Subject: CN=903b6580acf4f3727ce67342ae1e4f90c9178ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:02:87:03:4f:15:dd:f1:e9:71:1b:2d:7f:22:
7b:04:4b:68:6f:56:0f:2a:ce:e8:d1:dc:9a:14:92:
e6:48:e6:b3:59:49:c7:49:ac:e4:e7:69:3a:2c:a9:
75:f9:4a:41:d1:7d:af:c3:e0:a4:04:cc:5d:e5:c9:
84:d1:9a:4b:a7:9e:05:f5:f3:68:3a:07:70:2b:35:
59:ea:56:3b:a3:f7:f2:fd:b0:2e:f9:ec:21:c0:8d:
e5:1c:5d:d7:bf:90:39:79:7a:ea:46:8b:80:1a:7b:
9f:c7:a2:17:4e:89:4b:34:9a:f1:fb:3d:65:cc:58:
cc:e2:1c:70:dd:d5:4e:82:66:81:f9:48:0f:fd:a9:
a5:99:18:3a:d4:f5:90:19:5f:51:e8:1d:61:cd:ab:
83:1c:9c:20:eb:4f:0d:ae:a0:8b:de:30:21:67:65:
b8:f6:89:80:d8:50:87:74:ff:80:ca:cb:e9:61:d9:
86:a0:6c:fe:99:34:39:6b:c9:f3:63:e3:80:74:9e:
dd:dc:98:d9:15:4b:7e:95:4a:50:ee:87:8b:46:78:
0b:ab:2b:1c:e4:0b:d5:66:49:6c:7f:d0:50:0e:11:
32:18:11:d9:c5:44:65:c4:d3:00:2e:87:1b:84:1f:
be:76:d2:62:95:f2:40:a4:c9:d1:2f:0f:b0:e7:6c:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:65:80:AC:F4:F3:72:7C:E6:73:42:AE:1E:4F:90:C9:17:8E:F6
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7f:e1:9f:65:5e:54:22:c1:cf:77:c1:ba:7d:4d:83:c0:06:
37:55:4b:2c:88:ea:f4:8a:39:3d:96:2b:39:cc:d0:89:2c:a9:
1e:82:50:74:99:0e:a8:c0:76:48:1a:56:da:02:01:e5:09:7d:
49:5d:01:55:81:5b:e9:c3:af:96:b4:17:40:4b:b4:89:7e:2f:
2f:94:16:eb:76:e0:03:80:bb:1e:8b:62:8c:9e:51:af:6d:61:
27:fd:61:52:01:2e:31:1d:9a:2d:45:40:4d:36:b6:14:ea:45:
b5:90:37:48:9e:fc:4c:98:70:87:cd:28:f6:db:78:b7:80:e7:
0d:2d:4d:35:2b:a0:50:49:9f:c5:a9:af:06:d3:4a:0c:ed:59:
5a:52:76:75:51:85:34:f7:2e:96:73:22:4a:7f:d2:3b:d6:c3:
1e:3c:87:5f:d3:6f:59:5d:62:5f:50:fc:8c:a7:ea:dd:8f:b9:
87:21:c7:55:0d:84:66:82:04:71:0e:b4:1e:9a:fb:21:57:94:
a7:d9:e3:7d:6b:2e:4c:3c:ae:5f:13:f2:69:e9:33:b9:94:78:
34:5b:f3:db:92:a6:39:16:67:96:53:b9:ee:6f:09:2d:e7:d6:
fc:2e:60:d2:1e:91:03:fe:ad:d1:fa:30:ed:88:a8:be:15:99:
c0:01:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:05 2026 by rpki-client