Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: 3YoaBg3JYowz3KQvgnVQdmDzigrU4zlJcGXtCCoGBng=
Subject key identifier: 62:39:51:3D:F8:6E:6E:59:FA:38:FE:00:54:60:97:FF:20:96:BD:2E
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019D98F47431341E3DA7281C6E95330B9770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: rte1DwQxaazjw6dh9NzD1SjcoCuC0DvM8THWTvflF28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:74:31:34:1e:3d:a7:28:1c:6e:95:33:0b:97:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=6239513df86e6e59fa38fe00546097ff2096bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:fc:94:d2:71:fe:04:ab:ca:d5:3e:45:be:
05:26:d8:38:7c:52:da:0a:06:4e:02:74:e9:cf:e8:
c2:e0:45:75:63:87:fd:14:de:bc:02:a1:ef:d0:c8:
84:dd:46:82:8e:c2:29:91:d3:ee:57:14:6a:a4:41:
e8:53:1e:50:19:13:4f:c8:c9:df:93:6b:17:88:98:
cb:48:e3:e0:3c:36:43:dc:ba:ad:75:75:67:77:1e:
87:02:c3:45:ce:0c:2d:ed:7a:04:3c:91:ea:b8:98:
90:0e:1b:f2:df:6c:33:35:d6:97:49:52:19:b0:e3:
1a:ea:14:b1:ab:e3:a9:fa:c6:3c:7d:ef:ba:96:f0:
25:bb:d8:42:4d:4d:f1:77:7f:d3:7e:10:5f:f8:e9:
3c:8f:cf:2f:99:a9:93:ad:ba:6d:ec:e9:f0:1b:3b:
be:3d:a5:d4:34:73:1d:6e:85:b5:ed:0d:63:76:be:
48:71:c3:d9:b0:5d:62:05:4f:b9:d1:6a:5b:cd:5a:
66:c5:e0:85:ac:2b:66:ad:fc:9d:3b:13:9f:b8:11:
53:42:11:04:7f:f8:78:a5:c4:4d:26:dc:5d:ed:5c:
6e:46:2e:9c:df:6b:ac:7f:76:68:ea:97:fe:0b:d0:
96:79:a8:d2:97:4d:59:25:fc:e8:63:25:da:5a:a8:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:51:3D:F8:6E:6E:59:FA:38:FE:00:54:60:97:FF:20:96:BD:2E
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:30:3a:68:ce:93:d4:c7:ad:34:e3:e3:f4:4b:41:58:2a:ac:
e8:02:dc:d1:38:dd:ec:a1:70:87:ad:ce:49:5a:c3:cf:80:e1:
06:a3:53:45:7c:1b:9e:9e:c0:9f:9f:dd:52:ef:c3:e3:2f:40:
90:18:c4:0e:37:81:d3:81:a4:65:c1:47:e7:03:60:75:ed:7a:
4b:6d:5c:0a:b1:94:36:92:03:7a:e4:5d:1e:ae:a8:f8:b6:eb:
a8:c1:5b:04:89:8e:f0:c1:7c:6a:bd:ce:95:ba:bb:ee:b7:8e:
5f:4a:53:e8:d4:1e:1d:b4:31:7a:33:f6:b4:6a:e5:c1:c4:da:
2c:4a:92:17:4a:a8:cc:ba:e9:ce:a4:5c:c1:ff:75:07:1d:35:
c0:c0:89:ff:23:c9:21:9f:6a:8e:12:4e:1a:42:9b:06:79:f8:
f7:e2:bc:6f:e9:f2:d5:2e:fc:d3:00:be:04:d7:3e:5f:cd:34:
91:78:50:20:ac:6e:db:32:85:1b:dd:be:4d:da:1d:de:0a:26:
0b:ec:d8:32:bf:a7:63:4c:18:e5:fd:74:07:b8:86:7e:9d:b0:
ab:68:a4:a1:2f:9d:30:e6:63:be:12:79:27:08:0d:b0:f2:00:
ce:12:54:1c:66:af:1b:2d:bd:ee:70:03:5f:ef:ec:17:4b:39:
36:fb:85:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:05:10 2026 by rpki-client