Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: OcNdvKcWAOjl1+iKOEPRAMPGl32CuEgaAW4eXaQHFuo=
Subject key identifier: D2:33:5A:69:78:42:D3:40:8F:B7:97:FD:9E:96:EF:FD:66:41:F1:E2
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019D99997684902BA7511F779388DDC8F1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 16DD
Signing time: Fri 17 Apr 2026 04:01:04 +0000
Manifest this update: Fri 17 Apr 2026 04:01:04 +0000
Manifest next update: Sat 18 Apr 2026 04:01:04 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: jf71bjhMDWw+e4ZUKETmB+4e/iCAGllMJtFlphin3cY=)
2: KrmrfuyTmay6BxzsP6g7DR2EuMs.roa (hash: i89qUuvLONj+YCXDaSghoBx5U4M3h/mBM7QmhvsqeeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:76:84:90:2b:a7:51:1f:77:93:88:dd:c8:f1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Apr 17 04:01:04 2026 GMT
Not After : Apr 18 04:01:04 2026 GMT
Subject: CN=d2335a697842d3408fb797fd9e96effd6641f1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:91:3f:de:a7:42:6b:d2:8f:b8:5f:3f:a0:
e7:f3:12:86:4a:dc:2f:04:67:45:32:f0:78:81:f2:
ef:49:b1:26:1b:f8:e3:b7:47:43:3b:71:d7:38:f2:
c9:c3:90:fb:95:5d:4c:98:bd:33:ad:16:82:16:9f:
13:04:bd:33:43:ff:55:a0:8f:b4:42:3f:be:05:92:
a6:f3:b0:ff:27:5c:e7:84:31:a5:8c:05:a2:95:99:
7d:44:4a:e8:05:24:85:ee:ab:22:b3:96:90:38:cf:
ad:7d:62:b5:5a:b2:47:ce:0e:5c:4f:63:0a:9f:cd:
49:b2:08:6c:f4:d9:63:bc:2c:82:ee:c3:51:27:3c:
15:dd:86:bc:ce:cc:8d:48:16:4f:60:93:39:19:c3:
69:06:ff:b5:01:9e:af:6d:16:8f:d6:6b:16:85:7d:
8e:67:9c:91:79:d6:93:5f:ba:04:ea:24:c1:51:f7:
10:2f:99:43:75:51:11:8e:f1:ca:0d:89:24:cc:59:
67:c5:28:e5:64:e9:0a:01:46:ed:0f:f4:2b:02:c0:
70:c3:be:20:a4:3a:08:ea:94:75:cd:ff:a8:04:fa:
06:3a:31:f4:34:31:f2:63:63:51:01:25:7b:67:bc:
1a:21:45:a7:19:a8:3c:37:b3:15:dd:23:51:a7:72:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:5A:69:78:42:D3:40:8F:B7:97:FD:9E:96:EF:FD:66:41:F1:E2
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f9:ab:1d:d7:e7:56:0c:1d:2a:fa:6c:5c:4e:56:a5:9b:d8:
63:f2:57:16:8a:27:2f:ab:e9:d5:28:14:5a:bb:83:46:6b:9c:
cf:15:36:c3:db:fb:d0:d3:8f:0f:25:c4:e3:af:68:9d:92:09:
be:2b:79:6f:07:b7:0a:7e:7c:9e:84:b2:60:0d:60:ac:60:85:
ed:d7:fb:4d:65:9c:cd:ff:5e:3e:8b:c6:35:25:3c:bc:0a:fa:
3d:96:4f:50:5f:61:2b:2c:24:7a:7e:4c:92:6f:d7:26:77:68:
64:b1:17:5c:ea:9d:e6:bd:31:5b:9c:7b:32:b9:e6:0d:e4:14:
da:17:64:91:16:1e:15:f9:3a:26:00:2f:c2:27:96:1b:c6:7a:
51:97:08:33:2c:84:a1:a9:bd:10:51:13:f1:80:76:73:3c:0b:
19:7b:01:de:31:a6:01:86:59:91:8f:b7:17:aa:1f:e7:8e:c4:
17:2d:e9:1e:57:bd:8e:c2:ca:c0:53:b5:e3:6a:b9:28:0b:fb:
c2:a8:3c:7f:2f:bc:0e:88:2c:2e:23:8a:e8:f1:70:c5:65:63:
d3:fd:05:64:54:88:b8:6c:a8:2f:f4:f0:2d:cc:31:e7:b5:ce:
2a:fa:65:3d:b5:25:64:61:5c:45:29:62:d1:f5:17:e5:02:ea:
8f:a5:93:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:26:41 2026 by rpki-client