Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: qUs9XIeh7zxloZwrNycve46N7AJ5+ylukig9iaJwlfY=
Subject key identifier: 6E:09:7D:9B:EA:7E:C8:41:C3:FF:17:8D:F5:8B:06:84:FE:29:1A:39
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019D98F4F91159A71CFD8D865E4AE660685E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:23 +0000
Manifest this update: Fri 17 Apr 2026 01:01:23 +0000
Manifest next update: Sat 18 Apr 2026 01:01:23 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: lb6R2clNhYWb1xlO1cb7Jk4m18/j3EOctRaPaNKzpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f9:11:59:a7:1c:fd:8d:86:5e:4a:e6:60:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Apr 17 01:01:23 2026 GMT
Not After : Apr 18 01:01:23 2026 GMT
Subject: CN=6e097d9bea7ec841c3ff178df58b0684fe291a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:17:6f:86:96:5f:a9:6c:a6:65:af:f5:21:
5b:8a:25:06:aa:96:64:f7:40:ca:c6:2c:a4:98:1e:
66:b2:88:ea:c5:7a:a7:e7:d3:1c:7d:83:3c:e2:41:
1a:5a:5c:78:76:d2:e3:c1:8f:88:93:56:0d:b9:29:
99:24:0c:e6:09:76:1f:c7:84:11:8c:70:bc:55:a6:
10:d7:4f:cc:35:2f:3e:d5:89:9f:93:42:80:a3:34:
00:88:1e:42:c1:c1:c3:d8:3a:a8:65:99:0a:3b:a2:
0e:54:51:9f:ac:e6:f0:77:3d:39:9d:fd:90:b4:55:
35:f8:7b:de:0d:a1:a9:c3:fb:6f:d2:fd:f7:16:af:
5d:09:19:54:73:38:b8:61:66:bf:94:ab:3b:c4:1f:
bc:2e:96:8c:35:8a:83:73:51:f4:2d:91:ba:73:4f:
36:5e:61:18:15:0c:17:4c:09:1e:1d:b9:d7:95:35:
5e:66:06:9b:bc:11:ed:c1:28:67:10:27:70:98:cd:
06:b2:46:82:20:99:fb:8f:9d:54:ef:95:c8:7e:16:
55:88:cf:39:7d:ea:7c:08:7f:df:d9:a6:45:4e:1c:
b7:b1:bb:a2:df:54:ea:23:a5:07:11:20:cd:4c:bf:
9b:7e:8a:63:9c:63:12:00:a0:a2:cf:39:4c:aa:01:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:7D:9B:EA:7E:C8:41:C3:FF:17:8D:F5:8B:06:84:FE:29:1A:39
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:2a:22:29:ca:2f:8d:14:ea:32:20:29:99:3f:9d:0f:e9:
c1:ee:04:74:20:ff:db:2b:b2:c2:02:04:de:3f:26:ab:56:b9:
6a:d5:cc:87:bf:9a:53:37:13:4d:33:87:87:f3:03:55:69:b1:
f4:02:7f:52:95:96:d2:dc:81:41:c7:c7:9a:86:4b:d2:6b:4c:
69:ad:9b:cd:50:32:20:d6:31:cb:ad:97:44:3e:48:da:26:3d:
10:d5:3a:28:6c:59:4d:80:2f:3a:d8:f7:ab:71:7e:82:a8:df:
9e:a2:33:6c:cc:35:da:5b:4b:7b:9d:5f:19:cc:6c:ee:3f:49:
0f:01:24:3c:b2:a1:fa:62:04:35:ab:d3:a8:8e:7d:39:81:80:
24:44:dd:e4:32:37:bd:9f:6e:46:d4:91:57:d0:d5:e4:c6:e4:
20:df:6c:75:ad:ac:f3:ea:33:32:81:3a:83:91:02:c8:27:8a:
06:5c:46:1b:c4:7e:5f:79:5e:18:e2:4b:93:9b:2a:3e:4e:65:
11:ab:51:37:64:39:29:64:e6:1d:ee:f6:20:da:25:d7:bf:73:
84:af:ee:27:a3:fa:70:12:51:e5:de:8f:3e:dc:60:98:48:fe:
d8:9d:59:f1:cd:b0:57:c2:f2:54:4a:70:e1:8c:12:33:a9:5a:
cd:62:7a:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9PkRWacc/Y2GXkrmYGheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjYwNDE3MDEwMTIzWhcNMjYwNDE4MDEwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTA5N2Q5YmVhN2VjODQxYzNmZjE3OGRmNThiMDY4NGZlMjkxYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q4Xb4aWX6lspmWv9SFbiiUGqpZk
90DKxiykmB5msojqxXqn59McfYM84kEaWlx4dtLjwY+Ik1YNuSmZJAzmCXYfx4QR
jHC8VaYQ10/MNS8+1Ymfk0KAozQAiB5CwcHD2DqoZZkKO6IOVFGfrObwdz05nf2Q
tFU1+HveDaGpw/tv0v33Fq9dCRlUczi4YWa/lKs7xB+8LpaMNYqDc1H0LZG6c082
XmEYFQwXTAkeHbnXlTVeZgabvBHtwShnECdwmM0GskaCIJn7j51U75XIfhZViM85
fep8CH/f2aZFThy3sbui31TqI6UHESDNTL+bfopjnGMSAKCizzlMqgHd6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4JfZvqfshBw/8XjfWLBoT+KRo5MB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBQqIinK
L40U6jIgKZk/nQ/pwe4EdCD/2yuywgIE3j8mq1a5atXMh7+aUzcTTTOHh/MDVWmx
9AJ/UpWW0tyBQcfHmoZL0mtMaa2bzVAyINYxy62XRD5I2iY9ENU6KGxZTYAvOtj3
q3F+gqjfnqIzbMw12ltLe51fGcxs7j9JDwEkPLKh+mIENavTqI59OYGAJETd5DI3
vZ9uRtSRV9DV5MbkIN9sda2s8+ozMoE6g5ECyCeKBlxGG8R+X3leGOJLk5sqPk5l
EatRN2Q5KWTmHe72INol179zhK/uJ6P6cBJR5d6PPtxgmEj+2J1Z8c2wV8LyVEpw
4YwSM6lazWJ6WQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:24:58 2026 by rpki-client