Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: jgXifm20paeF1lE8cSpAe6KrpUWBiA3hvmhRC4xWmdE=
Subject key identifier: 48:B7:8E:9A:40:1E:B2:95:CA:CB:6B:8B:5E:96:B5:94:F0:1F:FB:C8
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019DA30ADD5EF216791B17734B22BAFEE69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:01:31 +0000
Manifest this update: Sun 19 Apr 2026 00:01:31 +0000
Manifest next update: Mon 20 Apr 2026 00:01:31 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: /I+4jIik8fRjYMhxiMQqENyrtt+tN4xp2Ko1hoU0yeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:dd:5e:f2:16:79:1b:17:73:4b:22:ba:fe:e6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Apr 19 00:01:31 2026 GMT
Not After : Apr 20 00:01:31 2026 GMT
Subject: CN=48b78e9a401eb295cacb6b8b5e96b594f01ffbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:57:b3:f0:70:4f:da:b5:91:c0:86:69:b1:
77:99:41:42:83:b3:60:a0:1e:b7:75:23:0c:18:22:
b0:d9:3d:8f:7e:52:dd:73:78:d7:05:71:95:a0:01:
2b:e4:07:e4:0a:cd:d2:53:8f:b8:79:7e:56:ee:85:
f0:1a:35:19:2a:84:3f:bf:7b:34:6c:fa:4e:f9:d1:
6b:2e:74:3a:10:d4:f1:4e:c3:ef:7d:d4:e5:89:c3:
4c:7b:ff:32:be:55:17:d0:20:a6:a5:0c:f7:75:b8:
27:36:a1:25:26:55:ac:d0:24:84:c4:37:63:54:3c:
70:76:d2:07:b0:62:2b:3e:f9:71:f5:99:5c:e9:db:
c4:a2:ae:81:2c:f2:74:15:0b:d1:6f:73:cf:60:06:
b4:2b:16:b5:e3:ae:d3:b7:8e:ce:c3:40:bd:0a:98:
c7:b6:31:98:0b:68:e3:da:28:e3:e7:61:44:eb:bf:
d6:22:d4:03:2d:6c:d8:58:71:d5:3f:79:bd:26:2d:
35:ab:3e:e2:64:31:a1:28:1c:42:1e:87:c8:9a:11:
69:63:00:e5:ab:ef:32:15:ee:8b:d5:37:40:27:ea:
21:d9:b4:2d:46:26:88:88:d2:10:e8:74:55:bd:6b:
22:65:f4:5e:73:ca:51:d4:ee:92:e4:2d:f9:8a:c4:
3f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:8E:9A:40:1E:B2:95:CA:CB:6B:8B:5E:96:B5:94:F0:1F:FB:C8
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:44:e7:cf:5e:da:6d:6b:ed:03:ba:d7:9d:69:d6:80:3a:
78:52:01:bf:00:04:7c:4a:ef:28:32:cc:bc:ac:95:4e:c9:cc:
a2:0e:c8:e8:fd:fe:9e:89:9f:e3:f0:46:dd:14:28:8a:2f:87:
5e:aa:52:6c:f9:ff:b3:d3:e3:1d:8d:80:b7:f8:88:ab:5a:ea:
95:2d:27:7d:39:7d:75:4b:48:48:0d:84:f4:b6:fe:36:55:d0:
43:9f:69:70:4f:e9:fc:62:87:af:0c:7a:15:6d:a9:0f:af:9f:
b4:0d:3e:4c:68:60:d3:be:43:9a:de:ea:9b:f9:a2:b8:73:84:
8d:68:99:fb:d0:fd:0e:a6:2e:4d:17:36:b1:f8:86:41:f5:b6:
af:61:f2:13:7a:a3:bd:e1:49:11:b6:19:f8:22:b2:c5:10:ed:
4f:1a:89:6e:a2:aa:ee:c5:fa:e6:3f:c5:4d:b5:b9:88:37:76:
b5:4d:7e:17:ed:22:70:82:c0:3c:54:23:53:47:f1:42:54:49:
9a:3f:24:08:3b:33:f0:4d:9c:d3:d7:5a:1d:66:c3:ee:86:58:
df:e1:30:3b:2d:5b:08:08:a6:1e:64:ab:11:a9:d0:3f:38:fa:
b2:0d:c2:7b:88:2f:93:8f:26:99:f9:b4:fd:e2:57:72:f0:e3:
82:7c:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:13:12 2026 by rpki-client