Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: xFw6x+e35hxT8xxoR6Yj0oADOhrnrHifQwOrbs9cqLE=
Subject key identifier: 7A:6E:AB:E7:1A:B8:D6:7F:A9:5A:07:F7:A5:F8:67:FB:62:3F:FC:EA
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019D98F5237FDD1755C4BFE44CD76AADE095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: F542RKRQvPrXJffMgDoWUXOCGjM.roa (hash: i0Pd1YsF/0CZkMewWg+RkQERNB+Z6enGZOfMb6J8Sd0=)
2: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: b8cNo49f/h06vJTfhVgeMplvoqHRKUK77O6xTjtfTCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:23:7f:dd:17:55:c4:bf:e4:4c:d7:6a:ad:e0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=7a6eabe71ab8d67fa95a07f7a5f867fb623ffcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:0b:60:51:3b:bc:34:ae:3c:6b:91:31:cc:
17:d5:c5:40:65:a7:70:4b:63:83:71:f3:d5:87:e1:
04:dc:a0:7d:4f:51:09:80:45:9c:3a:4c:25:70:a3:
f6:36:51:0d:fe:09:35:38:d9:45:43:6d:73:c0:65:
30:69:35:76:77:e5:16:f2:03:ba:da:d8:a4:44:5d:
77:55:8f:93:26:a2:a4:3d:88:48:fb:b0:0a:2b:c7:
9d:be:4a:97:07:2c:ee:30:e2:3e:90:92:a6:04:67:
7e:1f:2b:a3:2e:dd:08:b8:df:21:e5:01:5a:c1:64:
86:c6:75:17:87:5d:2c:ef:c0:f8:4f:4e:41:3a:1e:
5b:69:15:61:fd:7a:3c:99:f6:ea:aa:2c:1d:9f:b7:
02:d2:2f:b9:af:e4:86:f0:76:59:54:08:65:c0:28:
14:b8:bb:ff:ce:40:52:55:75:e6:90:5d:bf:9a:2e:
10:66:4f:dc:fe:05:d3:7e:71:6f:2e:c3:43:17:a4:
6a:3d:0a:89:21:2f:ff:35:29:ab:29:0a:2a:89:27:
74:84:ac:44:1c:e4:11:bd:a0:68:13:47:f5:85:d1:
7a:fe:92:26:85:57:e5:46:41:59:66:b8:df:c0:43:
1f:d8:ca:64:2b:94:fd:86:78:a1:5c:c1:a1:ab:9a:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6E:AB:E7:1A:B8:D6:7F:A9:5A:07:F7:A5:F8:67:FB:62:3F:FC:EA
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b8:05:12:7b:e3:21:ff:4a:27:d2:cc:17:d5:b3:5c:02:b4:
a1:cb:6c:c5:4d:33:bc:57:07:bc:9b:4d:60:c3:e5:56:28:b1:
45:dc:73:6c:f7:b5:fb:69:75:aa:f9:47:e0:d7:dc:ac:ec:d1:
72:c3:8a:d3:a0:d5:8e:f3:d7:1d:63:8f:01:f8:e7:22:93:f9:
72:68:50:17:e2:10:a0:d1:6e:e3:8d:6c:52:65:76:f4:46:05:
9d:e1:45:3c:d0:35:57:8c:fc:83:d0:a7:fd:3a:03:ad:48:23:
8d:a4:5e:f3:b3:02:69:38:1d:75:96:b5:0e:6d:4b:4a:3b:26:
64:d0:ac:17:26:c9:b2:40:81:33:f7:03:3f:31:4b:25:1d:b8:
fb:52:60:30:19:33:46:7f:b5:24:f0:68:94:8c:df:f7:75:b2:
ff:a5:80:90:b2:1c:2e:20:0b:46:e8:10:36:9b:b5:31:fb:f3:
47:9e:69:fd:e7:8a:8d:08:90:fb:c1:a1:6b:86:47:21:e4:17:
6e:eb:6e:6b:cd:5f:1e:02:60:0f:34:10:df:48:63:23:f5:21:
6f:c9:b5:85:ad:e7:96:9f:e4:b0:4a:e7:87:90:6f:8d:e5:8e:
1f:2f:d0:30:b8:66:90:8d:4e:1d:d7:33:ec:75:b4:c4:58:cb:
79:f5:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:22 2026 by rpki-client