Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
File: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft (raw, json)
Hash identifier: yM6y0PEaS2I8GRVdgACP4veDTSLknhPqPiBHYcZOSMY=
Subject key identifier: 09:87:40:44:DB:95:5E:39:74:15:46:08:F3:98:E3:42:4B:D8:E4:CB
Authority key identifier: 26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
Certificate issuer: /CN=267d0cc5bd86d568366657aef0310d493a7176e4
Certificate serial: 019D9B19CEC8C18664784A8147373D8791A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 11:00:52 +0000
Manifest this update: Fri 17 Apr 2026 11:00:52 +0000
Manifest next update: Sat 18 Apr 2026 11:00:52 +0000
Files and hashes: 1: Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl (hash: vaGOiZUUOoUVNqW4RZn3E5rjbx9tuOZY5vT0ME4L47Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ce:c8:c1:86:64:78:4a:81:47:37:3d:87:91:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d0cc5bd86d568366657aef0310d493a7176e4
Validity
Not Before: Apr 17 11:00:52 2026 GMT
Not After : Apr 18 11:00:52 2026 GMT
Subject: CN=09874044db955e3974154608f398e3424bd8e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:45:78:c9:3d:1b:b7:c1:4d:ad:23:bb:8a:
ed:4c:3e:cf:9c:3b:77:ca:24:01:df:d3:c0:2a:59:
ca:ca:8c:53:89:36:36:0a:03:3f:0d:3e:25:e4:2e:
e3:2e:0e:46:cd:fb:36:d7:6b:4a:81:38:6f:0c:d5:
24:3a:4d:5d:ad:cc:3b:fc:cc:96:43:eb:ad:c1:97:
70:56:97:42:af:3c:8f:6c:89:e2:26:f1:e7:b5:5b:
fd:8c:a4:34:0d:38:f0:6d:f6:24:20:06:fe:9f:4e:
69:5d:ef:46:be:f0:fa:00:82:c1:fc:91:4a:ef:6c:
3f:a3:95:d5:2e:e7:98:7f:4f:71:e0:15:cf:58:dc:
38:6e:21:69:92:10:d3:3c:92:50:1b:a9:3a:16:2a:
ad:76:0d:de:6e:61:1b:1b:ad:8c:b8:b6:7a:7d:39:
74:34:c6:c7:5d:6b:87:3d:f7:d5:bb:f3:4a:e7:2b:
44:45:f8:e8:ed:f5:ab:98:10:84:02:f3:49:3d:0d:
28:6f:ba:ae:2c:3f:61:03:01:b1:d6:ea:3d:08:c5:
7f:3e:3f:dc:2d:e5:19:bc:7a:6a:8e:07:e1:eb:79:
14:e2:b1:7d:5e:1f:0a:77:ec:a9:97:6b:34:76:6d:
e3:de:40:dd:01:e0:57:6e:b4:ee:69:95:d8:7e:c0:
43:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:40:44:DB:95:5E:39:74:15:46:08:F3:98:E3:42:4B:D8:E4:CB
X509v3 Authority Key Identifier:
keyid:26:7D:0C:C5:BD:86:D5:68:36:66:57:AE:F0:31:0D:49:3A:71:76:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14b074-7d57-4616-a85e-880ab7948728/1/Jn0Mxb2G1Wg2Zleu8DENSTpxduQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4e:c6:ca:98:d4:99:2d:65:a7:b4:aa:1b:67:2d:67:90:57:
5b:f7:4b:32:06:70:87:ed:17:26:5e:8a:6f:14:6a:6a:9f:56:
2b:48:d2:de:4f:a1:5d:54:99:09:70:4c:f2:90:5d:2d:78:ed:
12:c9:9a:f1:a2:a9:45:d2:c4:d1:5f:c5:46:32:3d:7e:62:08:
35:15:4d:72:be:80:d2:30:66:71:95:21:ad:7f:c5:97:f5:2f:
66:63:d6:41:5f:ad:84:01:8c:b3:72:1f:02:0c:7d:9b:78:4a:
5c:ac:91:79:ed:9a:20:09:b9:4a:bb:b4:bc:28:0a:1e:cc:20:
3e:97:00:8a:2c:ae:6f:b2:03:2b:1e:22:2f:d8:16:f9:dc:b5:
b7:d0:33:63:03:7b:0f:c8:6b:89:d8:05:0c:4b:3c:f9:44:ce:
a4:c7:58:64:ce:20:c4:b8:a5:19:a6:32:c0:a6:6b:59:ae:a6:
bc:56:3f:f1:c5:62:18:44:05:f2:30:98:05:58:c6:1c:6d:a3:
16:d0:c2:7b:4c:5d:e1:0c:40:98:53:e5:b0:ba:14:bb:3c:ed:
74:c2:2c:7d:9d:4e:ae:93:8c:13:91:8a:3a:6d:04:bd:68:d7:
a3:6b:d4:27:42:ad:6a:6b:a1:e0:86:d5:b3:1a:a7:9b:6d:7f:
26:0e:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:15 2026 by rpki-client