Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
File: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft (raw, json)
Hash identifier: VNhmWqwLfaGbKHEwlUnrmceGTgp+XJA3K+Czl2nnYaQ=
Subject key identifier: 7C:A1:0A:18:25:DE:79:F3:A8:C9:63:1A:1D:E2:66:32:DC:72:82:2A
Authority key identifier: 24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
Certificate issuer: /CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Certificate serial: 019D9A3EBAB65FAAFE7CFD19E217BEC24F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
Manifest number: 0A58
Signing time: Fri 17 Apr 2026 07:01:35 +0000
Manifest this update: Fri 17 Apr 2026 07:01:35 +0000
Manifest next update: Sat 18 Apr 2026 07:01:35 +0000
Files and hashes: 1: JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl (hash: yyVCmj3otqFq8of1uD/AWnOhHUpb8JpFnroZLCdeIwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ba:b6:5f:aa:fe:7c:fd:19:e2:17:be:c2:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2487bbaa022c399fddc4351bb2e0afa0985a5835
Validity
Not Before: Apr 17 07:01:35 2026 GMT
Not After : Apr 18 07:01:35 2026 GMT
Subject: CN=7ca10a1825de79f3a8c9631a1de26632dc72822a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:d2:d6:8f:75:f9:32:45:2e:1f:63:20:d4:
57:21:5d:9f:a8:2f:e2:e6:47:72:a2:17:fb:90:ad:
59:78:0e:05:28:96:5c:43:d2:33:c1:e7:c6:07:d0:
55:f4:10:f6:5e:5b:eb:7b:b5:d5:d4:b5:83:65:ef:
e7:c5:6b:c4:7a:c7:d9:01:d7:0f:50:44:0b:ae:18:
df:fb:d4:d2:e0:ce:1a:85:d5:00:68:65:0a:f8:77:
1c:4c:ac:e7:dc:8e:1d:5a:c5:1d:a0:3f:57:64:f6:
f3:66:69:c9:f1:ce:27:eb:b9:b9:41:8b:30:7d:d5:
84:af:65:c5:ab:b8:03:df:77:e0:6f:be:8c:ea:c2:
44:77:51:2d:c0:c4:12:9f:fb:92:36:3c:3b:0b:01:
88:d4:a2:b1:94:37:bb:5c:d7:3e:4c:64:76:d5:07:
52:36:d6:ae:f0:23:7b:97:b9:8a:86:db:e7:68:64:
c7:29:2d:87:3a:b6:37:f1:d2:9e:4f:12:e1:ba:0a:
6d:d8:85:b0:00:ae:56:5d:be:61:97:a0:08:26:6f:
0b:2d:e3:bf:49:ae:aa:d8:de:05:19:d2:26:d1:78:
5e:22:12:e5:23:9a:32:2d:79:91:aa:f7:21:04:25:
e2:d3:91:52:24:98:8e:5e:15:36:61:f6:33:1e:45:
7f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:0A:18:25:DE:79:F3:A8:C9:63:1A:1D:E2:66:32:DC:72:82:2A
X509v3 Authority Key Identifier:
keyid:24:87:BB:AA:02:2C:39:9F:DD:C4:35:1B:B2:E0:AF:A0:98:5A:58:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83ad1d-e878-4234-9bb1-29ccea6e9a58/1/JIe7qgIsOZ_dxDUbsuCvoJhaWDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c4:d1:d4:12:4c:01:4e:46:fd:25:04:ba:03:d2:61:e9:bd:
b5:19:e9:33:32:e3:50:68:65:93:32:98:9c:ef:81:98:07:f3:
f6:b6:b5:94:d9:83:c7:52:ff:65:cc:a9:42:fa:d4:8d:71:5f:
fc:0c:2c:75:7d:bf:7e:55:8f:1f:b2:0b:3d:48:76:ca:4b:b0:
29:98:64:c0:25:42:7f:80:bb:a9:35:3e:aa:2b:f1:94:c6:b9:
a9:b0:6c:97:af:5c:59:01:b8:a8:b8:fa:55:6f:47:96:84:6f:
d3:c3:ee:24:de:5d:94:20:fa:f2:83:5b:96:60:75:52:40:30:
d9:67:ee:eb:c4:85:66:e6:bf:f6:fb:52:73:14:42:12:eb:c7:
8b:a6:91:52:b2:88:07:11:d3:d6:e2:e0:82:e7:bb:51:15:21:
b5:71:99:91:ba:1b:44:55:8b:aa:c8:10:e7:40:3e:1a:b6:bd:
40:8a:ef:ed:58:c7:ee:12:57:eb:e1:1f:d6:56:94:67:a2:b4:
c1:d4:4d:62:0e:b8:c1:9d:22:3b:4e:5b:97:60:16:17:6c:72:
4a:81:7b:1f:a1:d3:0e:7b:29:14:d7:4c:94:11:38:a4:14:29:
47:a5:68:a8:b5:24:d0:ac:af:f0:aa:66:2c:59:3e:b4:3b:92:
ae:02:ed:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:04 2026 by rpki-client