Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: EZiGmbUIGUix3ssOw6c1JLrK32/plvE713wsrQW9evI=
Subject key identifier: 06:B1:6A:10:A4:6A:50:C0:F8:7B:E7:3F:AA:94:E9:8A:62:7E:83:08
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 019D98F4ED6B9B3064E11E756A570C9C4FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 172B
Signing time: Fri 17 Apr 2026 01:01:21 +0000
Manifest this update: Fri 17 Apr 2026 01:01:21 +0000
Manifest next update: Sat 18 Apr 2026 01:01:21 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: Yw6kCEN1TP9fH//pqFTSwABXsT3eJZHLs7RYGmDQqbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ed:6b:9b:30:64:e1:1e:75:6a:57:0c:9c:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Apr 17 01:01:21 2026 GMT
Not After : Apr 18 01:01:21 2026 GMT
Subject: CN=06b16a10a46a50c0f87be73faa94e98a627e8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:09:62:b3:dc:46:3b:13:fb:9b:40:2e:6f:
c5:48:23:ea:61:23:e5:66:61:85:48:c1:cc:44:0e:
af:6a:55:77:f2:b7:8c:c7:24:96:23:22:22:d5:56:
85:f6:24:49:47:57:d9:96:ab:2f:3d:87:e1:f0:9f:
bd:97:43:11:b2:54:5d:9a:bd:f4:ed:1f:8d:34:de:
c1:d0:17:39:4c:bf:21:3d:84:dd:3b:e4:67:db:5d:
d1:c8:f3:55:c4:03:ac:56:1f:4e:6b:15:9d:08:e7:
15:1e:3a:6f:af:11:6d:a0:26:d4:88:bd:14:e7:1c:
97:fb:15:94:13:ae:d2:7f:8a:10:23:a1:e3:a8:62:
30:92:5f:79:69:94:da:48:9c:93:a4:9e:ba:cb:8b:
5e:3e:23:0b:88:43:97:96:9c:f1:c9:ac:92:4d:36:
1e:1f:f2:ef:de:98:fb:5d:a5:d4:aa:42:d1:92:0c:
89:1f:fa:69:84:23:14:09:11:8f:6e:5c:87:4b:a2:
12:56:99:fb:c0:e0:55:ff:a4:7b:b9:fc:17:f3:8a:
de:77:41:b9:42:73:fd:5c:a7:9e:7f:ed:b9:e6:0b:
94:dc:29:1b:29:cf:57:89:43:18:11:b1:b4:ac:05:
7f:ee:0a:14:20:ce:3c:3d:fa:e0:54:55:06:da:9b:
73:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:6A:10:A4:6A:50:C0:F8:7B:E7:3F:AA:94:E9:8A:62:7E:83:08
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:38:f0:46:58:a5:d0:14:bd:05:54:b6:8e:fe:f8:4b:7f:
9f:ee:2d:84:1d:5d:eb:51:69:f0:24:1f:6c:a8:ad:70:d0:53:
86:7a:74:36:ca:c5:46:a0:6f:23:b0:41:9e:9e:5e:fd:d7:16:
5f:f3:5f:fd:b8:4b:62:ac:4f:1b:7b:d0:99:df:1d:9c:0d:28:
b9:05:62:1d:58:ca:9c:8a:5b:d7:73:0b:38:48:6b:cb:a9:2f:
e9:e4:61:db:59:ac:91:5e:69:25:e9:a4:e3:ad:5c:f1:68:52:
70:57:60:94:67:ac:08:cd:02:44:e4:ab:4d:ba:8a:e7:16:be:
51:5d:9d:51:24:c4:e9:e7:77:df:cc:ce:5c:fc:bd:ba:1c:1e:
f7:51:e7:6d:d6:82:44:ca:72:a6:64:c7:18:2d:06:00:85:cc:
d1:9e:eb:38:ee:69:7b:6f:ae:6c:f2:e2:4b:33:ae:42:b0:f2:
e4:b3:b8:ca:47:0e:da:eb:c1:74:c3:ae:8f:47:e2:16:93:64:
e7:3b:00:1e:72:0b:21:38:65:32:fc:42:ad:e0:1b:01:61:6e:
58:e1:c0:45:4b:b9:df:49:43:3b:6f:d6:78:c4:20:33:86:02:
a3:15:b0:e1:a6:e6:fd:82:6b:e9:9e:0c:6c:47:d4:76:c3:51:
ed:ea:df:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9O1rmzBk4R51alcMnE/rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjljZDFlYWQwMzhlODViZDlkMzMyY2MxOGFjMzA5ZTA2
MjBjNTEwHhcNMjYwNDE3MDEwMTIxWhcNMjYwNDE4MDEwMTIxWjAzMTEwLwYDVQQD
EygwNmIxNmExMGE0NmE1MGMwZjg3YmU3M2ZhYTk0ZTk4YTYyN2U4MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqgJYrPcRjsT+5tALm/FSCPqYSPl
ZmGFSMHMRA6valV38reMxySWIyIi1VaF9iRJR1fZlqsvPYfh8J+9l0MRslRdmr30
7R+NNN7B0Bc5TL8hPYTdO+Rn213RyPNVxAOsVh9OaxWdCOcVHjpvrxFtoCbUiL0U
5xyX+xWUE67Sf4oQI6HjqGIwkl95aZTaSJyTpJ66y4tePiMLiEOXlpzxyaySTTYe
H/Lv3pj7XaXUqkLRkgyJH/pphCMUCRGPblyHS6ISVpn7wOBV/6R7ufwX84red0G5
QnP9XKeef+255guU3CkbKc9XiUMYEbG0rAV/7goUIM48PfrgVFUG2ptzDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaxahCkalDA+HvnP6qU6YpifoMIMB8GA1UdIwQY
MBaAFI8pzR6tA46FvZ0zLMGKwwngYgxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2Et
NmQwNzU0NmY3YTVhLzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MGI3MTUtYTRmNy00OGQ0LTljY2EtNmQwNzU0NmY3YTVh
LzEvanluTkhxMERqb1c5blRNc3dZckRDZUJpREZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGww48EZY
pdAUvQVUto7++Et/n+4thB1d61Fp8CQfbKitcNBThnp0NsrFRqBvI7BBnp5e/dcW
X/Nf/bhLYqxPG3vQmd8dnA0ouQViHVjKnIpb13MLOEhry6kv6eRh21mskV5pJemk
461c8WhScFdglGesCM0CROSrTbqK5xa+UV2dUSTE6ed338zOXPy9uhwe91HnbdaC
RMpypmTHGC0GAIXM0Z7rOO5pe2+ubPLiSzOuQrDy5LO4ykcO2uvBdMOuj0fiFpNk
5zsAHnILIThlMvxCreAbAWFuWOHARUu530lDO2/WeMQgM4YCoxWw4abm/YJr6Z4M
bEfUdsNR7erfxA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:40 2026 by rpki-client