Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: koilPcFiTx4RzyuIpEcuPWW6M1DM3XZgsywm28DiVlY=
Subject key identifier: 87:06:36:1A:A2:55:4B:43:91:F4:B2:39:19:94:62:59:72:A0:F7:DF
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019DA2D35D3F0B5A6CFD7E8C4F508CBA2D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 137D
Signing time: Sat 18 Apr 2026 23:00:54 +0000
Manifest this update: Sat 18 Apr 2026 23:00:54 +0000
Manifest next update: Sun 19 Apr 2026 23:00:54 +0000
Files and hashes: 1: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: NMudUMWhntB+wNjETXQqbgoGucUTGfP2NnkyT18aPXI=)
2: hRHKFg_8XNSpz14bqguIKVw9u_g.roa (hash: IvcC+EHpFNhaRen15J+kANi4Vrf+W52puDOFvkl+2OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:5d:3f:0b:5a:6c:fd:7e:8c:4f:50:8c:ba:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Apr 18 23:00:54 2026 GMT
Not After : Apr 19 23:00:54 2026 GMT
Subject: CN=8706361aa2554b4391f4b2391994625972a0f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:f2:21:78:d9:65:67:97:b1:12:7f:67:28:
74:4c:63:7c:da:f5:36:8b:15:dd:a8:f8:41:1b:97:
62:b6:0a:5f:99:f5:5d:b9:29:97:05:e1:0a:c7:b9:
0c:14:6f:06:c8:10:54:0f:c6:4c:be:54:86:68:24:
a7:10:81:76:fa:a8:f3:f7:ed:10:80:16:1b:0f:e9:
80:24:a7:14:d0:32:85:98:be:7a:37:15:f4:12:59:
fe:df:d9:fa:31:4b:c8:69:c5:ae:1a:80:7c:e8:fd:
97:5e:d0:27:e5:6c:43:2a:6c:9c:c4:8b:98:a0:02:
5f:64:4f:03:94:15:61:fd:60:fc:30:89:1e:96:da:
e8:df:73:87:64:50:2b:8b:04:05:92:6a:18:81:63:
d4:80:49:49:23:2a:94:e3:78:2e:1e:36:32:67:6e:
13:a1:4f:47:60:45:06:81:b9:9b:bd:80:91:79:11:
52:32:6a:f9:e7:bf:fe:3e:e2:f3:b4:c6:77:c4:9d:
25:71:69:c2:12:20:2f:0c:86:86:db:17:fa:2d:6b:
64:0e:96:1f:92:42:b1:8b:1b:2e:91:fa:a4:c1:ed:
9d:9a:7c:7d:77:d2:cf:b8:73:7d:73:9e:f2:bf:89:
c3:3e:1b:f3:60:88:5b:ff:ab:f5:60:ed:7d:85:9d:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:36:1A:A2:55:4B:43:91:F4:B2:39:19:94:62:59:72:A0:F7:DF
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5d:7a:46:1e:1e:14:bd:83:c0:0c:ba:9c:8e:dd:ae:91:4e:
07:89:f5:bb:eb:09:6d:a6:68:d8:d3:4a:3f:fc:05:7e:8f:20:
2e:95:ef:91:6f:1c:5a:91:72:58:dc:a4:04:10:40:27:b3:d2:
62:80:5c:ce:2d:b9:8c:21:13:d3:d7:2a:cd:ca:8a:42:07:6d:
1e:1e:90:d6:77:62:99:da:23:1d:e1:33:75:6b:87:0d:0c:3c:
ed:f7:a8:c8:d1:ab:d9:0e:be:05:db:ae:23:ff:3a:f2:31:35:
90:23:1c:aa:69:f7:67:98:39:e6:c9:3e:13:0c:b4:cf:f7:53:
d6:1a:e1:7c:41:43:5d:61:fb:46:f2:cb:08:84:5d:01:b1:bb:
4d:89:ae:0f:86:89:64:a5:70:74:19:68:00:a1:d4:e0:a4:6f:
47:b3:d7:50:dc:31:dd:99:74:78:b0:b7:b0:2b:09:18:86:e3:
1f:01:fa:74:17:4b:11:b6:bf:8e:b6:42:50:ea:ca:60:94:78:
2a:b7:a1:67:26:eb:bd:20:e7:22:40:3b:00:40:aa:d1:58:de:
0b:01:ec:ce:d0:6e:9c:22:ba:09:10:05:ca:be:68:75:9a:ee:
d9:48:ef:bf:da:cd:f1:3e:48:17:77:fb:82:c8:6f:5c:05:85:
08:38:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:31:38 2026 by rpki-client