Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: mLCDwF3+7xgyNSGriAgK7c513OgiObvNRpdg0YT+tBU=
Subject key identifier: 49:08:1C:E0:70:BE:97:6B:47:A7:00:E9:27:A7:E2:10:0C:DF:7F:9A
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 019D9B19D38A4BF8E5AFAA51164D24E644B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 11:00:54 +0000
Manifest this update: Fri 17 Apr 2026 11:00:54 +0000
Manifest next update: Sat 18 Apr 2026 11:00:54 +0000
Files and hashes: 1: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: Vs7w+56ITwuS7f5QmN8REQXb8gM3/Pjv/YXsse1I1XU=)
2: r5__-xJyqn5F_2-z3QzDy0T90_M.roa (hash: fkp/3ntblaRyVq/MaCyEWvAaDztOdcAHWSz5y3CPrW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:d3:8a:4b:f8:e5:af:aa:51:16:4d:24:e6:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Apr 17 11:00:54 2026 GMT
Not After : Apr 18 11:00:54 2026 GMT
Subject: CN=49081ce070be976b47a700e927a7e2100cdf7f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:d0:0b:9f:7e:a3:a5:7b:80:ce:be:26:84:
8f:1a:a4:59:79:0d:da:ab:0c:fc:bc:ef:02:6e:fe:
da:f5:7c:d3:f5:79:ea:5e:7f:1a:05:4d:da:e0:d5:
71:66:18:01:45:f0:89:23:53:78:e8:48:5e:b0:50:
b6:13:ff:3c:7c:09:7c:7a:f7:af:23:24:47:09:be:
54:d2:f2:09:eb:78:9a:43:c2:c2:f6:70:91:0f:af:
56:ad:78:8f:0a:86:db:c0:c5:06:00:a7:58:4f:d3:
cc:12:ab:fd:3e:68:b3:13:64:3f:17:73:7e:a5:87:
d0:40:8c:87:83:3b:c7:1d:95:3a:a5:50:8d:d9:f3:
53:35:9a:04:01:9d:a2:f4:4b:53:55:cf:8c:c8:cf:
4e:19:92:c9:03:21:a3:ff:d1:38:96:d3:98:19:94:
12:73:47:0b:d4:d1:fd:00:c9:b3:16:51:d5:93:55:
f1:9c:4c:b0:60:ee:c2:5b:6f:ee:8f:d4:69:63:1b:
3f:3e:0c:7a:94:65:25:64:af:1a:9c:5c:94:cb:04:
41:12:79:0a:a4:87:fa:75:43:57:ce:1c:07:2e:cf:
a9:fc:d4:d6:64:74:8b:16:49:e5:af:33:54:6d:0d:
1a:71:85:a2:ca:c3:2e:33:77:16:d2:9d:b9:63:57:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:1C:E0:70:BE:97:6B:47:A7:00:E9:27:A7:E2:10:0C:DF:7F:9A
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:54:14:e9:9a:fb:54:a2:4b:4b:34:95:03:98:76:48:d7:b9:
83:89:bb:d1:6c:6b:ce:f4:f1:38:16:bc:cc:d4:1d:af:af:c6:
df:35:0c:fb:9f:e4:40:4f:f0:fe:55:92:e1:81:74:df:9b:1f:
ef:61:86:11:6e:ff:05:ea:09:89:fd:10:d8:7c:1f:e5:f7:72:
b2:f1:dc:70:aa:89:32:fa:8a:9d:05:75:08:59:82:30:e5:34:
c7:23:f5:9a:a4:8b:64:75:69:c1:f8:3d:08:d1:8f:91:6c:37:
18:c4:fc:70:25:68:c0:bd:90:ff:f1:59:37:a7:b2:b2:c9:03:
a9:85:f9:91:93:bd:c6:41:a9:19:c0:49:f5:f4:19:e9:8f:c5:
ff:a4:2e:c5:62:c0:5c:c9:4d:29:cf:a7:dd:bf:e8:23:8b:86:
d3:c9:38:a0:cb:87:c1:4b:ad:e6:51:1c:03:a3:30:6c:77:1a:
7f:ed:bd:8b:0c:65:ca:6f:98:39:6f:cf:75:07:f6:2a:c7:f5:
88:9d:24:4c:5d:f4:88:67:de:0f:08:ff:53:41:e2:66:d9:e9:
78:da:c2:9d:8f:4d:58:e8:71:c9:77:7f:e5:91:30:e8:24:9d:
78:b8:01:6a:5d:14:57:2a:93:0f:12:b8:cd:57:d0:c4:6e:15:
42:82:b7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:57:46 2026 by rpki-client