Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: JJxIirM43ReY5MthqwmzcV3wijrlpMUN68vv3YsKPN4=
Subject key identifier: E4:97:82:3C:83:3F:B9:61:16:B1:65:9E:65:EE:FC:FC:76:2D:12:C4
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019D98BD4EBA0087A470A93B5DCDDFA857AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: 7UiY9YDOYRVZQmlZNJACi6vWMDuPcj8hDE7HtUVBa6M=)
2: of1ZOsMHp_mh7IEEJP4_o4HLJfM.roa (hash: 1EXbUVtSBjioTg80JwxjnFqS0TnS0UjDFk3emb+9E38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4e:ba:00:87:a4:70:a9:3b:5d:cd:df:a8:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=e497823c833fb96116b1659e65eefcfc762d12c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:75:d8:84:3c:72:d7:63:f8:1f:7d:59:44:
71:e6:39:9a:a5:c7:cb:65:70:3e:4b:f3:db:28:81:
fd:36:57:ce:f1:a0:f8:96:61:6b:e3:3e:c0:27:8f:
cc:0d:e1:f4:2c:90:8d:36:ba:35:72:f6:46:61:19:
e9:6b:dc:2e:ef:68:93:49:22:e9:3d:63:6f:2c:eb:
fd:15:16:94:eb:d0:a0:dc:2e:ee:88:66:ad:77:65:
75:29:8a:5f:92:02:ec:57:c6:6b:ec:92:b2:e6:e9:
94:28:aa:9e:75:7a:5f:54:36:bc:ca:aa:2d:72:a1:
a5:3b:5b:e6:02:9f:2c:06:cf:ab:13:ca:5b:31:34:
d0:5e:73:03:fe:56:4f:9e:2b:c9:16:a5:33:f2:9f:
3d:e1:9d:be:15:f7:0c:ad:48:9f:35:ed:e9:7b:37:
3f:47:5e:21:38:cf:2b:3d:00:c9:29:6e:1f:82:3a:
4f:f0:47:3c:52:c7:82:68:09:99:aa:e8:b3:8e:a3:
f1:93:34:46:91:e8:ab:b7:57:3b:cc:b5:fc:9f:b3:
7c:2c:ab:da:e5:56:f6:89:29:4c:42:53:06:e0:4e:
b6:da:c2:70:08:36:e1:ba:f0:50:5d:1e:93:ff:fd:
d8:63:97:90:34:75:df:a5:7c:49:a2:dd:78:ca:ac:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:97:82:3C:83:3F:B9:61:16:B1:65:9E:65:EE:FC:FC:76:2D:12:C4
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:a1:d1:11:52:dd:05:1c:5e:bc:9f:32:5b:af:e1:ba:87:
18:91:5b:cb:2f:3d:fe:bd:93:9e:fa:86:9a:3e:e2:c0:6e:d6:
f2:c5:58:5c:d6:c1:7f:bd:a8:ba:12:4c:b8:dc:66:81:b3:80:
2b:61:45:ac:05:f2:a8:d4:73:b2:79:14:a6:19:6b:fa:7c:30:
8e:17:93:51:89:27:5c:6b:e3:4a:21:66:e0:33:05:a8:97:5e:
72:c4:0f:5c:79:63:09:0a:9f:bd:95:a8:43:21:47:3c:90:5f:
9f:d5:a4:60:e1:e7:d8:45:d0:7f:d6:d0:7e:0f:9e:e0:10:cd:
c0:81:fd:12:cd:dd:12:ab:df:9f:8a:aa:3c:07:cf:51:7e:58:
21:bf:d3:36:1f:30:6b:4a:38:f1:bb:4c:4b:55:01:cd:49:60:
5c:c0:20:11:b6:d9:06:b6:84:bb:f6:2e:23:74:e5:5f:2b:3b:
b1:5b:25:2b:a3:a1:fa:40:34:ae:5a:4a:26:d4:ba:e7:9d:3c:
9c:ed:c5:a1:56:a6:d7:5b:4b:a9:f5:de:0c:32:04:57:c6:0c:
40:22:a1:0a:61:ca:42:60:cb:9c:fb:90:f4:86:e8:fa:11:c2:
7a:5a:38:3a:34:ea:dd:2e:e0:6f:56:dc:0f:3b:36:b0:66:c9:
f3:1e:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:02 2026 by rpki-client