Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: Mz/OgYeYUzxCDRkt5S+oEUyOdNoFDdTWXOnQRDo5KJ4=
Subject key identifier: 2C:35:2A:E6:69:73:45:54:1B:0C:7A:45:41:58:C4:4A:68:B4:18:B6
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019D992B0A9D08B89C6A186CDB03BC823A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 10EC
Signing time: Fri 17 Apr 2026 02:00:27 +0000
Manifest this update: Fri 17 Apr 2026 02:00:27 +0000
Manifest next update: Sat 18 Apr 2026 02:00:27 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: /hloX5+zLE4eWn245L9uUuuJG+XGu5d5ddKzyooS4ZM=)
2: lLxgfqurH_Hgps0nmWFaFien01Q.roa (hash: N0SnJ14VpoDgSTsYIgjlp8sX8VgDL1JD7jVAinD1cAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0a:9d:08:b8:9c:6a:18:6c:db:03:bc:82:3a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Apr 17 02:00:27 2026 GMT
Not After : Apr 18 02:00:27 2026 GMT
Subject: CN=2c352ae6697345541b0c7a454158c44a68b418b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:92:8b:47:46:90:35:5d:59:5e:6e:09:e6:
e7:4d:86:65:dc:c9:93:ab:1e:4d:f0:8c:c4:be:99:
c8:f9:54:f0:93:e5:46:85:34:d1:48:47:b9:38:d4:
5a:a9:f0:9b:e0:6e:00:c2:c4:00:b1:60:78:90:48:
4e:5c:72:c0:80:a9:b1:64:8f:ef:76:26:48:98:e5:
ae:a5:e0:f9:7f:23:a7:d1:46:d4:f3:7d:83:5f:f5:
e9:42:fe:7c:e2:53:27:91:5d:c0:c0:c5:f1:60:9f:
30:5b:72:4e:38:b4:cf:9a:39:87:21:06:c1:43:4b:
3d:d2:3a:1a:bd:b5:a2:e0:65:c2:c6:f5:5a:99:e9:
cc:2e:0f:96:05:7d:b9:de:ea:e2:00:20:3b:23:7f:
98:d1:09:79:e7:4e:61:aa:f8:69:0f:26:75:c9:5c:
ce:df:ed:12:e3:61:d9:fc:09:3a:cc:d9:18:fc:1b:
e5:e1:a5:46:86:8d:9f:98:b4:27:5a:44:36:c7:62:
52:2e:cb:03:0d:4d:d2:99:e1:88:61:72:92:ea:e0:
51:91:3f:f0:8f:69:c0:65:75:6d:9a:55:58:d2:d6:
36:98:17:79:a6:0d:fe:01:f2:58:2a:95:67:4d:d3:
33:b8:3a:38:70:02:1c:11:05:78:69:e5:2f:b0:b1:
0c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:35:2A:E6:69:73:45:54:1B:0C:7A:45:41:58:C4:4A:68:B4:18:B6
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e4:d1:0e:c6:dc:fb:fe:24:0b:a8:08:19:9a:f1:ea:37:2b:
04:3c:4d:fc:33:6c:ed:26:42:ab:3b:ef:c7:46:a8:93:bd:0d:
d5:0f:23:81:0c:3c:db:ea:b5:27:42:03:2b:d4:a3:53:11:c3:
9e:11:16:5c:67:8d:04:35:cb:0a:d5:cf:5f:3e:48:ac:ac:a1:
4a:a1:d3:5e:99:95:b0:5d:0e:c6:86:54:ee:c5:3d:c1:69:35:
00:58:18:48:7a:fd:f1:86:29:84:9b:f3:44:35:3a:a0:c6:fe:
d4:46:cc:d9:0d:bb:00:56:ae:be:8d:4d:c8:46:96:9e:a6:b9:
65:45:b8:d3:0a:83:ef:76:53:34:4d:0a:53:9d:26:45:62:73:
5b:54:d0:90:d4:10:cd:20:aa:b1:cf:7e:10:aa:5c:cf:c7:ae:
3f:9f:52:c1:5c:0c:bd:9c:40:0f:e7:1f:b1:33:ff:fc:32:f5:
d0:4d:11:33:14:45:db:3e:aa:9b:41:19:10:11:eb:6a:0f:c9:
7b:2a:40:21:bc:01:38:b1:48:b9:b3:ae:88:bd:39:af:fc:4e:
16:df:45:7a:6a:46:1b:57:1e:c0:91:60:64:68:9a:8a:22:9e:
40:4a:f2:23:e7:d3:ff:49:ec:aa:4c:c8:da:13:18:57:db:c5:
1c:85:8b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:51 2026 by rpki-client