Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: rqX/iHKi/shbZzoJwxoi+dk/k+BBdh4dpghqfisZiFU=
Subject key identifier: 61:C3:DC:FA:44:8B:26:13:86:8C:89:8F:B2:68:36:CC:D9:D1:CD:DB
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 019D984FEF8DB0901C758FD07C055AC5B577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0D13
Signing time: Thu 16 Apr 2026 22:01:08 +0000
Manifest this update: Thu 16 Apr 2026 22:01:08 +0000
Manifest next update: Fri 17 Apr 2026 22:01:08 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: x/Qwv9DcGpRXEf2HS1ObvjPxwePlSxavb7pgD8S11jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ef:8d:b0:90:1c:75:8f:d0:7c:05:5a:c5:b5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Apr 16 22:01:08 2026 GMT
Not After : Apr 17 22:01:08 2026 GMT
Subject: CN=61c3dcfa448b2613868c898fb26836ccd9d1cddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:23:ac:00:08:b6:d9:ad:6c:a3:c4:e3:a3:
bc:14:17:ca:f7:bf:ab:64:15:73:f6:6a:7e:c1:c2:
3b:15:7e:14:06:cd:e1:18:1d:13:14:65:0d:6b:0a:
b5:b7:bd:b4:7f:a3:f7:1e:26:d7:b5:63:c1:b2:a2:
17:d3:1c:64:cf:1b:80:7a:4f:4c:a6:61:41:47:1c:
88:c0:2b:ca:af:e8:a9:0a:44:b9:b1:6b:e7:22:af:
a6:75:7f:67:c4:ad:64:9d:ad:ac:cc:52:2b:86:d7:
d5:ea:22:95:30:79:be:5c:60:46:85:cd:1b:d2:5b:
7f:35:30:e3:3a:23:b5:32:eb:40:d2:fb:66:52:5e:
f0:e6:e7:cb:4b:09:10:d7:db:4e:c3:96:7f:f4:61:
a7:cd:5b:11:dd:60:fb:7a:fe:0e:2d:57:0c:a5:6b:
ad:eb:19:c5:15:28:f2:1a:aa:9b:d5:d5:e2:2d:89:
e2:f5:f8:20:7c:b5:2a:c0:66:14:6c:e7:0d:17:45:
4d:3a:62:32:1f:d0:92:af:07:33:5c:b1:9a:f4:dd:
ea:3a:f8:aa:99:63:2d:bf:30:e4:6a:81:6a:0c:62:
42:57:ea:31:36:bc:4f:5a:2f:cd:d2:f4:54:88:18:
d9:15:1c:a7:67:84:18:27:1a:d9:64:23:76:cf:1a:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C3:DC:FA:44:8B:26:13:86:8C:89:8F:B2:68:36:CC:D9:D1:CD:DB
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:56:63:08:a6:05:7a:b3:c8:e6:b7:8d:8e:28:01:b2:28:
87:5f:e2:66:3b:5c:5e:48:b3:b9:62:ce:45:63:1e:9b:59:6f:
51:36:1a:cc:bb:7d:e7:4c:33:75:10:b1:30:8a:52:79:bf:34:
bb:b8:97:cb:a2:16:cb:08:39:8f:cd:8a:94:86:fe:30:c3:c1:
51:28:e4:d1:46:fc:54:d4:7b:8a:d4:c9:b5:67:d3:5d:78:ab:
b2:8d:e4:39:4c:b0:d2:94:11:b4:c3:36:8c:3b:73:6f:41:5d:
5d:bc:11:53:a8:ff:6b:86:b8:a8:81:36:a0:36:7b:4d:03:4d:
3a:25:b3:70:8c:4f:0e:41:89:1f:f5:da:79:21:3d:3d:4c:24:
a9:cd:bb:ae:35:6f:03:4b:34:05:1a:e9:51:c4:d6:1f:c2:2b:
66:19:07:3f:04:16:a4:9d:96:d2:49:fc:f8:cb:f6:46:ee:a4:
68:0b:5b:44:e8:0d:89:48:2f:10:78:9c:da:40:54:72:b3:09:
f1:3f:4c:46:47:a1:90:15:30:4a:4f:63:e3:76:50:08:25:11:
8f:ec:6a:78:9c:0f:ca:a4:e8:96:d8:56:2a:35:ae:cf:3e:0f:
b3:77:8e:59:70:0f:80:e8:cb:f2:c6:5b:97:2e:dd:7b:1e:ae:
2f:32:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:31 2026 by rpki-client