Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
File: JlNDThz2kK0m1HoDs_w1qAKnm1g.mft (raw, json)
Hash identifier: ArCpkdZVMJ+MtmE9zfGN48GcKTyxAXO3Su/eZDxV1kk=
Subject key identifier: DC:BE:7D:46:11:30:75:61:D1:7D:6E:A2:A6:E0:22:40:40:85:AF:54
Authority key identifier: 26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
Certificate issuer: /CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Certificate serial: 019D9AE28F736602774DC613269C9EEFC8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
Manifest number: 0BB0
Signing time: Fri 17 Apr 2026 10:00:32 +0000
Manifest this update: Fri 17 Apr 2026 10:00:32 +0000
Manifest next update: Sat 18 Apr 2026 10:00:32 +0000
Files and hashes: 1: JlNDThz2kK0m1HoDs_w1qAKnm1g.crl (hash: 4jfvZ7MZbFj290VM3j07VCm1xUTAKvHqF6yJlKAPK70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8f:73:66:02:77:4d:c6:13:26:9c:9e:ef:c8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2653434e1cf690ad26d47a03b3fc35a802a79b58
Validity
Not Before: Apr 17 10:00:32 2026 GMT
Not After : Apr 18 10:00:32 2026 GMT
Subject: CN=dcbe7d4611307561d17d6ea2a6e022404085af54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:b3:fa:77:b8:89:5f:64:ac:2a:fe:c1:19:
02:7d:51:74:0a:46:da:c8:75:22:22:04:c3:d4:94:
3e:4c:3b:cb:9d:44:c3:a8:08:4c:42:9d:9a:e0:ff:
3d:7d:39:f6:9a:fa:25:77:59:a0:56:a0:a9:75:7b:
6d:51:ab:07:e2:3e:3c:cd:3b:b2:22:e6:a8:1a:fb:
2c:16:d9:92:04:37:3a:44:f9:2f:f4:f7:0f:c8:1f:
78:b3:08:33:db:2e:f3:fc:13:6e:b9:1c:6a:e7:65:
37:61:3a:86:a1:21:4b:28:37:ad:af:20:da:c7:67:
a4:e9:e3:31:b9:81:29:00:75:48:ba:9a:83:29:70:
3b:e4:63:c6:4d:b4:38:4e:05:33:8d:57:92:b0:91:
bf:8e:8e:da:58:d3:be:1c:9a:cb:0c:4e:75:b3:61:
ec:0c:c1:95:00:f4:b9:c2:c6:41:c1:ad:b6:ba:ab:
01:72:5f:34:26:e8:e2:d2:84:f3:63:a3:43:09:7d:
03:ab:32:e1:2a:65:09:70:46:3d:25:dc:6d:e1:7f:
03:ec:a7:45:f1:a8:06:c7:3e:29:c5:2a:a7:7a:89:
38:f3:10:ef:c9:f2:94:23:2e:09:b2:f1:47:24:cc:
2e:37:bc:6a:a6:33:5f:f6:fb:ba:0e:e9:1e:0d:c1:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BE:7D:46:11:30:75:61:D1:7D:6E:A2:A6:E0:22:40:40:85:AF:54
X509v3 Authority Key Identifier:
keyid:26:53:43:4E:1C:F6:90:AD:26:D4:7A:03:B3:FC:35:A8:02:A7:9B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlNDThz2kK0m1HoDs_w1qAKnm1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cba1ce-f01e-4f94-b5ae-cba5d978f371/1/JlNDThz2kK0m1HoDs_w1qAKnm1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:39:25:3c:de:90:cf:8f:85:10:46:0d:10:ab:17:bb:d3:
a8:13:f0:f5:ef:8e:98:37:bc:3f:65:78:7f:eb:bb:b4:57:8a:
c1:41:8f:84:b0:65:e0:e1:34:2e:00:36:eb:44:9a:73:c6:69:
c4:1f:6b:81:37:f8:a7:16:f9:88:29:c3:b3:5e:3f:9b:fc:19:
bc:f0:4e:2c:41:95:31:2e:61:f7:40:20:4f:4d:bd:7d:28:aa:
1f:7d:b4:cf:b2:21:61:a3:a1:a0:44:e1:ac:14:5a:f3:02:74:
e8:54:e9:b2:55:6e:91:22:a1:d2:02:dd:b6:9f:aa:74:d3:4c:
cf:90:a8:6e:72:d0:13:2d:64:bd:ad:c8:13:36:ca:84:02:da:
59:e5:d3:00:aa:41:f7:73:b9:62:f8:30:ad:64:c8:27:c2:f3:
3c:a5:d5:18:b5:b3:14:17:73:72:7d:e8:25:40:01:82:8e:ce:
10:73:ec:6e:f8:51:b3:cc:1d:73:08:5e:74:29:55:18:2f:bb:
c3:14:0f:a7:8e:f2:a2:7d:52:64:23:57:bd:f8:84:d9:98:fd:
db:87:57:24:49:c1:44:a6:a1:a4:8a:9a:55:c6:3a:12:72:2b:
6c:b5:5d:18:33:06:43:c3:df:5b:0b:30:26:4e:57:20:5b:d7:
af:c3:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:15 2026 by rpki-client