Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: agU0d7/TKL4t2L4pAz0JoGm7T6tldRUO4JZcwSmIhs4=
Subject key identifier: EF:FD:1C:C6:D7:2B:D8:12:C5:EC:F8:8A:B3:25:94:0D:77:73:71:1B
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 019D981874B3995C1A4E55447B5FB3BEDC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 18BF
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: +qB2TRL0zHgJngqjYWS20sulJGiq09EQVQtvNHOnNOU=)
2: VnCUFpdYn6p9SWgBKCYPBMB_uag.roa (hash: CTE/bVTVJxivSVfHlKssz3gbLXyaKsvtaNtZL1+VzWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:74:b3:99:5c:1a:4e:55:44:7b:5f:b3:be:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=effd1cc6d72bd812c5ecf88ab325940d7773711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:13:5d:9d:d6:61:c2:75:3f:fb:96:2d:e1:
98:66:78:fd:c9:71:8e:8d:c1:2d:75:f7:75:6e:5d:
5f:cd:1a:33:25:ce:4d:b7:30:8a:e3:55:93:5e:0f:
af:a3:58:e5:4c:21:c6:77:6c:c1:83:4c:8d:81:c2:
fd:62:7e:df:31:6b:77:79:85:ef:21:07:b1:9c:bd:
ca:01:a8:d8:1f:bb:c7:a1:57:3a:70:a3:0d:7f:ee:
f1:dc:f0:0c:6d:b1:70:1b:ef:28:a8:e2:b9:c2:98:
39:56:ef:4e:b7:a5:a5:27:69:e6:c5:5c:7e:4f:49:
ee:41:ca:11:4e:ee:57:46:b1:7a:1e:25:0b:4e:9a:
34:40:a5:ca:ae:88:5d:4b:0a:57:94:72:35:2f:24:
fd:c5:f0:db:78:14:e4:b7:d1:41:2b:2e:3f:89:a6:
bd:e1:b2:7b:70:af:f4:03:b6:9e:74:9c:bc:96:50:
e4:b3:e6:62:6b:09:d0:be:00:c8:6d:6c:00:7d:f7:
be:2b:d9:4e:58:9e:f2:93:bf:ba:a6:29:a9:7b:d5:
77:57:aa:3b:8c:90:ab:25:56:fc:a3:1c:7d:ac:0e:
7c:bd:ac:21:59:ee:71:c3:26:85:4b:bd:55:2f:df:
0e:93:f3:68:49:72:43:c8:77:4b:54:7c:93:4e:cf:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:1C:C6:D7:2B:D8:12:C5:EC:F8:8A:B3:25:94:0D:77:73:71:1B
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:21:50:18:65:b3:92:72:5e:49:f4:05:f1:b2:a0:e0:2c:8a:
96:ff:2d:3c:b3:7d:34:3a:31:c4:1e:4d:45:10:f2:1f:67:27:
11:73:7d:68:de:27:25:3f:b2:03:a3:d0:d6:ed:92:62:99:8d:
97:a9:f1:37:8b:a1:84:47:e6:b1:39:2a:57:ee:68:dd:1c:bd:
21:39:84:54:6d:f7:32:e4:5a:25:14:20:a6:13:9e:e8:4e:04:
65:29:49:d5:0c:0e:9f:23:a4:6d:3b:38:52:80:25:38:e2:63:
57:fc:7b:b3:78:a6:a5:0b:ae:d0:d9:b1:a0:e7:09:5d:2b:88:
6e:3e:48:0a:02:28:37:3c:c0:0e:df:4b:03:4d:59:58:67:d7:
0c:c3:26:3e:26:ca:f2:90:73:e5:85:ed:da:e7:1e:15:23:a4:
09:ff:e7:bb:8a:c8:bd:a7:24:df:ac:17:e4:ea:de:8b:b3:8f:
1d:d2:08:2d:95:f4:c4:6d:75:b7:04:18:ac:07:0b:cd:da:d9:
bc:de:86:bc:b1:6c:b1:0e:7f:c9:0e:ee:86:a4:67:d0:0f:2c:
e6:fc:a7:6c:cc:e2:31:87:23:d2:e1:51:7e:80:6f:cd:b6:20:
40:6c:66:4d:f0:87:33:39:11:56:13:a5:83:82:75:48:16:ec:
82:a9:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:38 2026 by rpki-client