Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: QzzYapOHTIBnTlzg0+0apHhAxz+u6fga2WFhcL4xp50=
Subject key identifier: 39:44:31:B0:16:12:BE:82:35:FF:92:D8:4E:32:F8:64:15:4D:B3:4C
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 019D9850611BC1119285735867CCDF1FFAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 10AA
Signing time: Thu 16 Apr 2026 22:01:37 +0000
Manifest this update: Thu 16 Apr 2026 22:01:37 +0000
Manifest next update: Fri 17 Apr 2026 22:01:37 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: yeoWD/vNjdFMrFkhLEJyjbyHCSON3/fNHt+Q0TAc8s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:61:1b:c1:11:92:85:73:58:67:cc:df:1f:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Apr 16 22:01:37 2026 GMT
Not After : Apr 17 22:01:37 2026 GMT
Subject: CN=394431b01612be8235ff92d84e32f864154db34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:70:ab:57:4e:37:b9:4b:f1:ae:cd:33:d0:
56:5c:f5:ab:4f:79:19:83:0b:48:fe:59:7a:7c:45:
07:6e:e5:5c:d2:0e:22:d3:2a:31:32:0b:d5:be:b9:
a8:29:28:f9:25:87:45:96:7d:b9:0d:27:18:0a:20:
8c:0a:b3:20:b8:b8:6e:85:ba:c7:74:66:18:12:4a:
73:3f:76:54:90:10:33:3e:c6:4b:ae:6c:fe:e0:1e:
b1:34:16:36:39:0f:d9:6c:67:d3:d7:d7:10:22:31:
39:6e:ee:86:11:02:2f:00:1a:a9:b0:77:21:7d:73:
de:98:b8:27:6e:c6:02:da:4d:18:44:d1:e9:3c:ca:
db:10:53:f9:2b:88:45:77:a0:8a:6b:97:48:ee:4f:
11:dd:1d:84:40:dc:5d:a3:d4:0f:d1:59:29:44:51:
a2:12:76:34:9a:99:f6:2d:c2:17:75:d9:0c:75:2a:
b2:a2:c7:bf:9d:b2:de:ba:4b:a0:9e:7f:37:42:42:
18:97:7f:e2:7c:07:55:f5:54:73:d1:b0:b0:82:d8:
3e:71:a7:63:f2:ae:84:1b:6c:c0:2e:14:e0:c7:67:
9a:9d:2c:7f:ae:65:cf:95:52:a7:ea:17:d7:7c:72:
df:9b:05:c8:e3:0b:b4:16:18:0b:0a:4e:b0:92:38:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:44:31:B0:16:12:BE:82:35:FF:92:D8:4E:32:F8:64:15:4D:B3:4C
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:64:0d:1c:85:4d:c1:98:32:a8:23:13:ca:e4:4d:3b:0d:
01:59:ca:8c:a2:c1:3d:c4:66:6f:a6:4c:7f:21:d9:aa:aa:ad:
aa:d3:dc:2f:24:69:d4:29:07:77:67:fd:85:52:66:9b:6e:26:
d7:a6:30:bc:ea:84:35:b8:28:24:0e:67:34:e9:86:2c:3c:a0:
23:99:77:97:eb:b3:2a:d8:43:32:25:e2:72:5b:5f:04:75:21:
7f:99:d3:55:17:ab:33:23:a8:c2:04:0f:86:5d:b5:03:de:22:
81:b6:6c:68:1c:13:5f:7b:cd:1b:61:3d:06:84:e9:7c:ba:5c:
b4:5e:21:fa:87:c4:e2:3b:eb:b5:ae:ce:f4:d5:d8:68:c5:0a:
a7:6c:c1:fa:19:bc:89:ad:5f:4c:ca:17:59:36:4e:49:4d:b0:
cb:e4:e3:74:cd:81:cc:50:36:ac:20:34:b5:27:03:f7:c3:b0:
f4:82:14:52:ec:7a:eb:cc:f4:24:b8:f1:6b:a2:03:ce:49:02:
37:87:42:87:41:6d:71:c7:f8:c9:54:b6:24:de:a9:63:84:5f:
8b:ae:9a:8c:33:52:95:03:cb:46:f5:92:62:69:88:32:29:53:
dd:6c:1b:fc:5e:4f:bb:8e:fa:27:87:4d:f6:a9:14:5d:55:31:
fd:1a:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:11 2026 by rpki-client