Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: qAg5t+IebTCGS5AOt72jP1XLo6aaXt6ecBwt1s5EHNg=
Subject key identifier: 22:01:8D:B6:7D:83:A8:87:5B:A8:D3:98:74:A8:41:46:2A:34:6D:80
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019D99CFE74040EB94E0EE4FBB7BD055092C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 13A4
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: 2nPIRP72Jf5YjvsBZiLCnmbp-p8.roa (hash: Yz/8CGjOJYnOasszn6ZNY2vs5w5ux3r0g0CLHgZyjdU=)
2: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: USHPIv5zXz87CiYBGzkts9umXVBOt/tfPioOP+MBcwU=)
3: LOJidQiFIuwqnumT6oMuEmIp5LE.roa (hash: sVHheWyLptBtdCb64wvygyXOjpNHZkJcRj9kxNMP3GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e7:40:40:eb:94:e0:ee:4f:bb:7b:d0:55:09:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=22018db67d83a8875ba8d39874a841462a346d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:2c:e6:6d:9c:dd:a0:e5:55:bb:85:0f:e9:
a1:eb:44:1b:a8:90:05:85:48:f5:b0:d5:46:e2:63:
c5:50:54:5e:05:55:99:09:b0:5e:3d:94:07:05:eb:
bc:97:d8:b5:96:c3:1a:dc:e1:bc:50:99:30:73:be:
fe:9f:98:cf:52:33:e0:e1:77:c6:98:5b:d1:1b:91:
a1:82:c3:f1:15:5f:30:cd:ad:30:e7:da:89:af:21:
1a:39:f2:23:8a:ba:c9:ba:50:fc:e3:06:09:1a:aa:
a6:66:99:de:c8:97:c0:d2:bd:c5:b2:a3:77:20:36:
74:7c:ad:98:bf:27:cf:de:f7:93:98:1b:3d:6f:4d:
90:d0:51:e2:ad:5b:08:99:14:9e:e7:3f:19:81:0e:
85:5c:26:4d:72:93:56:c2:85:82:b7:e8:f4:94:70:
2b:5d:b8:74:1a:94:7b:ba:b5:31:ed:d5:10:81:49:
7a:4e:b1:b9:ec:dc:dd:93:f5:a9:1d:a2:c9:cc:a1:
ff:44:19:6e:d5:f6:cd:56:8c:71:68:b8:01:20:36:
eb:64:d0:65:72:f0:66:3f:9c:d2:bb:9d:12:58:ca:
a6:c5:e5:ad:cd:c9:18:d2:d8:0e:fb:24:13:22:bc:
e0:be:16:d1:3f:e0:de:42:69:2a:68:9d:17:4c:97:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:8D:B6:7D:83:A8:87:5B:A8:D3:98:74:A8:41:46:2A:34:6D:80
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:86:f6:0b:13:0b:1c:5f:b2:03:67:7d:67:19:94:4e:85:42:
1f:ce:32:ce:78:86:45:27:d1:e3:55:0c:7f:62:19:d4:d8:71:
53:62:23:11:d5:3d:98:70:9b:4f:b0:47:1d:3a:45:11:0e:b1:
1e:ea:17:08:53:da:c5:63:42:80:26:42:29:8f:49:94:c7:c2:
38:fe:07:3a:2e:22:4a:72:f6:66:d0:5b:41:d0:71:ce:43:28:
3f:97:58:94:da:89:c3:79:7a:06:a6:18:d7:00:03:a4:33:26:
5c:df:47:79:4b:08:52:75:1a:64:f2:6e:d0:4c:55:6e:4f:89:
5e:0b:b2:53:8a:7b:d0:a3:28:10:36:95:b0:26:48:43:82:21:
54:9b:18:c2:7d:25:b5:b2:30:76:7a:9e:cb:10:15:c7:bd:89:
ae:84:33:cb:98:49:4c:09:d2:dc:d8:a6:21:20:9f:67:67:44:
48:95:6a:5d:fa:a8:41:46:d0:c0:af:4b:50:d1:bf:d0:dd:42:
0d:83:47:18:9e:f1:c4:db:bf:e7:59:8a:47:bf:78:4d:10:37:
46:44:55:61:d4:f5:1a:a0:40:1e:7b:de:74:83:4f:eb:f5:ce:
5c:1d:2f:89:27:71:85:e7:25:90:3d:95:08:f2:7c:70:b7:0a:
cf:a3:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:02 2026 by rpki-client