
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: 5hzEBOCMVEZF+U1r+X2VNOJECd/8OGwH7IGt9VKd2Ww=
Subject key identifier: A5:1B:0F:5C:2C:DF:11:4F:67:57:ED:C4:46:31:7B:9E:38:96:1D:3C
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019D99D0D2FC53347560A955BBB3380992F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 169E
Signing time: Fri 17 Apr 2026 05:01:32 +0000
Manifest this update: Fri 17 Apr 2026 05:01:32 +0000
Manifest next update: Sat 18 Apr 2026 05:01:32 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: Tuq7JaCTZ19mJWvKMT0ec4jaYesKGnGpF8M8eHy5E2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d2:fc:53:34:75:60:a9:55:bb:b3:38:09:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Apr 17 05:01:32 2026 GMT
Not After : Apr 18 05:01:32 2026 GMT
Subject: CN=a51b0f5c2cdf114f6757edc446317b9e38961d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:82:67:1c:cb:33:16:34:24:99:fd:73:2b:
bf:81:47:81:0d:e0:1a:db:bd:86:9b:72:04:5a:74:
01:cd:c3:27:7f:b4:31:2a:74:dd:5f:55:75:b0:fc:
5d:66:88:3b:ca:a6:11:08:43:d7:f5:3f:34:41:4b:
57:e7:58:3c:24:46:2a:c3:e9:1d:17:dd:94:3d:89:
c3:8a:95:b0:cc:69:be:43:c3:2d:23:1b:09:bf:b6:
53:2d:75:a0:51:c5:d7:c0:89:d7:fb:ad:83:d9:4b:
a2:ce:d4:17:83:c3:c4:d3:cd:00:70:c7:8f:fc:48:
6d:8a:ed:4c:ee:bd:da:64:d5:97:03:fa:33:a4:68:
b1:2e:fa:be:bf:5c:72:fa:3f:df:90:3b:82:de:1f:
4d:e6:ef:a5:00:4b:7b:78:dd:6c:35:00:e6:8a:ff:
ba:9b:db:dc:a7:87:b0:1a:8f:1d:3b:47:33:d0:3a:
ed:09:42:8f:2b:53:75:bf:0d:c4:f5:d9:b5:f1:cf:
b9:88:82:1d:33:35:f3:69:e3:96:af:04:55:a9:84:
0f:97:f6:3d:b4:f8:1a:89:f7:81:1e:88:b2:1e:53:
73:e1:89:b1:da:62:e7:e7:b3:47:f6:a8:4b:7a:b5:
55:8b:d8:60:83:4c:2e:94:a0:1f:29:0c:50:9f:ac:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1B:0F:5C:2C:DF:11:4F:67:57:ED:C4:46:31:7B:9E:38:96:1D:3C
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:67:b7:59:d9:03:f0:19:6e:19:ea:99:d0:6c:97:1a:c0:
1d:78:80:48:4b:7e:9e:99:74:7f:aa:72:25:b1:68:75:9e:65:
ab:e1:22:27:ee:ba:0a:fd:9f:9b:67:44:f6:eb:d6:dd:a4:d9:
38:38:93:0e:cb:ba:1d:9b:a6:34:70:e4:c8:33:59:70:3a:db:
d9:9d:4d:b9:a3:97:a6:d9:0e:a6:6d:ee:5d:fa:0f:d9:21:9d:
01:56:8e:56:78:7e:79:a2:9a:76:6a:c9:9a:76:73:ae:3e:ca:
d1:b4:6e:b6:25:51:7c:48:49:33:e3:d1:95:19:a5:5d:aa:0c:
b9:f2:99:59:fe:36:67:67:3b:fc:36:e3:d0:1f:64:4b:3e:a6:
66:13:54:04:62:a3:e7:f0:ed:84:19:5e:b0:cc:46:88:bc:1c:
07:f2:25:0e:70:09:3e:68:7a:2f:b1:69:88:46:21:ee:24:d6:
b9:e6:ce:4d:6a:fa:a0:cc:bc:2c:2f:f8:28:11:db:50:d6:f5:
99:d7:c0:4c:b6:f0:a9:85:f6:d2:67:40:aa:ba:bf:5c:52:fe:
54:ef:bd:1a:9f:03:84:30:cf:5e:e3:b8:c5:d0:e2:e4:bc:c4:
63:f3:07:a2:a7:76:b6:37:2b:b0:68:95:24:00:29:06:91:0d:
24:b6:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:07 2026 by rpki-client