Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: WdTFXheuHXyhBW1Ne/IvD7WbGiJ1uZwEMcpu46GgMVg=
Subject key identifier: 75:25:A1:CC:89:DB:50:5B:C7:F6:C0:48:E5:AE:A9:C9:19:7C:64:B6
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019D9A3E0B1A187E8C523C8D7EFD352E010E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: 6P4GuSE/Ypldu7EVYMfS7jZhjIWgAbQ33kocTPQb7qE=)
2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0b:1a:18:7e:8c:52:3c:8d:7e:fd:35:2e:01:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=7525a1cc89db505bc7f6c048e5aea9c9197c64b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:62:ae:38:a6:6c:e5:90:4b:db:6e:a4:f8:
d2:0e:ce:5c:fe:ff:15:4d:24:76:57:7d:98:79:e8:
a3:b7:8f:45:1b:0f:06:91:82:cd:66:9a:6e:3e:eb:
02:d9:c4:ab:2b:21:de:6f:fa:7c:75:1f:de:a7:a4:
b0:be:78:3a:d5:af:61:52:d7:c0:55:36:10:85:66:
e9:70:f1:1c:99:b4:04:6f:91:ec:99:3b:61:89:9c:
26:2d:5f:05:24:12:48:45:c4:44:25:bc:ae:f4:8e:
97:f6:05:9e:07:9e:cd:07:bd:2c:69:e0:cf:35:1d:
aa:74:01:64:53:8a:c3:97:2e:58:54:ed:8a:23:a1:
f1:d1:f0:76:0d:f9:96:37:03:19:82:90:e4:23:fb:
a8:23:a3:59:8a:5f:48:59:62:0d:d9:18:5a:60:4c:
fa:51:e0:0d:e8:45:29:14:ac:6f:81:2c:f9:fd:b9:
86:9f:08:d7:6d:01:9e:a6:a5:84:56:e4:5f:5f:8e:
a8:67:f4:23:67:b2:80:57:ef:4d:dd:61:d7:7b:b3:
b4:0e:61:ad:ec:16:2b:73:a5:a1:59:57:7f:30:a0:
b7:83:87:50:88:69:8f:7a:b0:ff:b4:3b:e3:cc:df:
00:5a:84:fd:0f:63:17:e5:7d:26:41:9d:e6:dc:42:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:A1:CC:89:DB:50:5B:C7:F6:C0:48:E5:AE:A9:C9:19:7C:64:B6
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:90:31:7b:81:37:a7:82:89:92:ea:6f:5f:1c:84:eb:57:
e0:69:1c:0d:a7:08:0d:b3:fa:6f:3d:e3:55:b4:e7:b7:0e:14:
a5:c8:e1:63:c5:4f:25:c2:04:93:09:26:22:d7:e6:95:7d:73:
31:c3:ec:bc:2d:2d:26:98:40:1f:c0:3e:f5:fe:32:66:d3:1b:
13:45:6f:9f:b1:60:00:03:de:36:ef:c1:a6:8c:23:7b:01:22:
12:c5:45:6b:b1:eb:73:ee:19:1e:f1:a5:49:47:c7:d5:5f:0d:
86:ad:98:7b:e0:18:7e:c0:27:0c:44:65:11:6d:ce:72:5f:52:
fb:ea:12:70:0c:57:18:6b:c8:a1:84:44:e7:fd:b8:88:21:53:
e9:46:d6:d1:e0:44:b8:e3:c1:25:c3:e5:a6:11:0f:b6:42:6e:
2e:60:81:d4:11:7f:f9:ac:cb:d0:48:0e:89:14:4e:c4:0c:39:
c4:1b:0a:0d:f0:c9:51:8b:a9:75:86:f4:53:8a:3d:40:6c:30:
8a:02:91:4c:fd:27:ed:d3:b6:d6:45:9a:21:87:54:bf:82:fa:
d7:f9:96:4e:95:6f:8a:40:25:90:b9:50:af:d6:d1:52:c0:90:
3e:cb:7a:b9:2b:2b:59:4f:53:78:f6:ad:83:4a:fb:ac:fd:12:
c9:bc:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:06 2026 by rpki-client