Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: FlNEkDeJAazDQF0J9j8wa29Pin3ycvnwaJt7XhiB0L4=
Subject key identifier: EC:D2:A1:38:E5:CF:33:06:DD:45:A4:5F:63:23:8F:43:F3:81:1E:AF
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 019D98F43DD95EFA7C956F6C6A1C794CF5EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0ADB
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: 2Lki7HzpnU9trXNICNYkrUnQlHTfJZVRhW2ieebeo5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3d:d9:5e:fa:7c:95:6f:6c:6a:1c:79:4c:f5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=ecd2a138e5cf3306dd45a45f63238f43f3811eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:d0:c7:fa:a1:27:28:5b:00:62:d2:c5:3d:
da:d2:bd:1f:60:2a:83:c9:32:44:dd:5f:a3:5d:bf:
e4:a4:68:a7:11:5f:98:2b:86:b9:a4:34:33:af:e5:
63:41:c3:e9:72:62:bd:36:1b:25:5a:85:10:c2:10:
55:58:a9:c2:68:3c:f7:23:5f:a0:81:53:c9:19:17:
28:27:71:7e:49:f4:c1:0d:b4:1c:2b:74:9d:59:80:
44:d5:05:f9:fa:6d:34:87:cc:ff:ed:d9:ab:03:9c:
47:79:00:14:6b:5b:70:fc:9b:ac:db:c6:39:3c:a3:
69:9c:4c:df:c9:87:ad:23:d1:99:50:ff:8f:5d:7e:
95:e9:b8:f5:5f:eb:a9:9d:c4:58:43:b9:a4:6a:da:
48:da:df:10:d4:31:6b:1d:5f:c6:dd:4f:2f:5e:27:
ea:08:46:6e:c0:79:4a:42:62:f3:10:1c:7c:17:8b:
36:9c:d7:b3:5e:32:5c:1e:f1:20:d7:e6:f2:0d:c1:
0e:84:8a:db:e2:dc:a2:34:cd:58:a7:8b:c4:9d:cf:
b3:7d:b3:d9:d6:7a:44:d3:c9:20:cc:72:77:11:d5:
e9:4a:bd:78:04:19:b6:fc:bd:51:0f:19:69:f3:26:
50:70:3b:3c:c8:6b:50:42:f3:54:3b:84:11:73:a9:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D2:A1:38:E5:CF:33:06:DD:45:A4:5F:63:23:8F:43:F3:81:1E:AF
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:a5:c7:36:5c:34:81:ea:58:eb:94:a0:9e:61:5f:28:a1:
c2:cf:c2:a6:53:12:46:cb:63:1d:6c:60:38:81:20:ec:6f:85:
3d:da:e7:5f:b3:5f:d9:27:a9:7e:5b:66:6b:d8:e3:67:bd:5d:
97:c1:19:ec:90:21:9d:dd:15:62:3b:b4:51:8e:b2:7d:47:1f:
03:03:ca:29:c3:0a:fb:04:6e:fc:ad:86:83:50:20:9c:6f:f5:
a5:e6:b9:12:d5:c2:05:7e:af:e0:6d:c2:65:c3:1d:6b:be:58:
36:5b:9d:55:c7:b8:9c:c0:47:47:fb:8b:b5:58:e7:57:24:a6:
77:56:36:de:74:04:05:6e:15:c4:02:66:5f:9d:30:b7:a2:b3:
02:f8:94:08:b3:89:a5:2a:12:c2:4c:15:59:b2:de:01:f6:70:
b4:eb:e3:1c:6f:e1:fa:86:9a:f7:fa:26:df:2e:54:2c:bf:53:
2c:04:23:90:a8:f1:e2:63:b4:5d:ff:d9:15:7f:48:23:18:b3:
26:19:80:44:9a:f6:a3:fc:bb:87:98:d5:5b:6c:36:f9:b4:37:
98:e1:a9:26:18:e7:43:a0:7b:c5:c9:cb:cf:c6:e9:c3:1a:5b:
3f:fa:bb:59:18:1c:af:f2:89:3a:81:d5:d1:56:f9:c8:d7:81:
b7:98:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:02:20 2026 by rpki-client