Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: cLrS7qtA4fn4+6St3bz+qy/dnfoI9s757bqeNhrJFME=
Subject key identifier: 70:69:58:35:5A:81:93:46:56:15:21:B5:CB:FE:35:E7:09:3E:4A:6D
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 019D9999A4D9D9053026B8174D6CE20A0539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 09A9
Signing time: Fri 17 Apr 2026 04:01:16 +0000
Manifest this update: Fri 17 Apr 2026 04:01:16 +0000
Manifest next update: Sat 18 Apr 2026 04:01:16 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: Q0cw53EgVfGjTugPq9bdzxm92Ez7zHlomQNhczWz38M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a4:d9:d9:05:30:26:b8:17:4d:6c:e2:0a:05:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Apr 17 04:01:16 2026 GMT
Not After : Apr 18 04:01:16 2026 GMT
Subject: CN=706958355a819346561521b5cbfe35e7093e4a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:aa:11:6c:5a:1d:c0:f9:78:86:f7:fb:c5:
45:d4:e3:f4:b6:ff:a0:bc:dc:11:40:ce:40:de:9b:
9d:f5:dc:9d:85:f7:2b:d9:ab:db:58:7a:25:ff:54:
55:5b:a4:ff:b0:99:4d:75:e4:0c:40:05:96:36:8e:
f4:0e:2e:56:32:c6:a2:a8:10:9e:ed:aa:17:41:34:
38:26:b7:ba:83:6a:d9:64:ba:e8:88:fe:2b:85:dd:
ea:1d:f0:65:3c:6e:2a:fa:2e:9b:5c:32:d8:97:84:
ff:1e:ac:87:86:04:e2:17:fe:4f:ae:d0:12:2b:3f:
9e:c0:ac:c1:81:44:79:1c:d3:e0:24:5a:b6:bb:b6:
c4:f3:ef:01:53:4d:0f:ea:72:ff:24:34:26:6d:c4:
ad:5c:3c:2b:47:b2:24:53:44:1e:ed:aa:46:f4:2c:
4d:05:b2:86:5d:c4:29:a1:2d:c8:54:12:d9:83:64:
e2:d3:aa:14:af:be:3c:7c:76:ee:b3:80:70:f1:f1:
52:30:87:76:95:5c:13:97:96:4d:f2:98:c1:91:26:
5a:0b:e3:74:db:c1:bf:eb:7e:a9:94:5b:72:03:7a:
d2:54:24:4c:a3:50:23:f1:ef:5a:1f:57:02:1e:37:
8c:7d:ec:ab:cc:43:0c:59:e8:26:36:03:8f:bc:12:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:58:35:5A:81:93:46:56:15:21:B5:CB:FE:35:E7:09:3E:4A:6D
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8d:03:02:f4:fe:85:51:bf:bf:bc:02:57:f2:14:68:84:b3:
9a:8f:90:8a:30:e5:61:ff:18:a4:12:9c:5d:a1:fe:1a:de:20:
75:3a:6b:c8:47:c3:c0:81:1f:29:a2:4d:4e:51:d3:01:96:6c:
ab:5c:54:1b:c4:ca:de:e2:8a:c5:53:d8:f2:73:0d:26:78:dd:
2e:33:23:9c:f6:5e:e4:9b:4c:b7:91:c4:b7:48:7c:c3:aa:69:
4e:68:72:78:b5:89:7d:42:c9:8b:00:c4:67:31:b4:2c:89:94:
68:3d:ee:66:15:f5:c9:89:82:55:28:d4:ac:2a:b9:e0:b0:c6:
65:b0:11:1a:bb:e4:74:11:96:06:af:7b:e8:c0:6d:96:fb:ef:
71:d2:72:a4:34:d4:27:74:80:3f:7f:f7:57:59:94:9d:04:34:
96:e0:0c:a3:77:98:0f:c4:54:3f:08:8f:bf:b0:f7:00:04:9e:
64:56:cf:fd:df:c2:d4:50:b5:21:9f:bb:f8:b0:eb:43:41:98:
38:59:6b:0f:25:05:b3:27:04:5c:5e:6e:c8:db:52:d9:26:4e:
53:4e:86:a7:94:76:ec:f1:ea:a5:37:af:7a:6b:48:bf:69:9f:
5c:a8:70:6f:ae:ca:1d:f6:e7:0d:42:35:dd:4e:64:13:43:ce:
b2:69:d9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:01 2026 by rpki-client