Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: P2d+KhAqdYlqgDcDWUy45pza1pfrm13EqjFFO10tLRk=
Subject key identifier: F1:33:6A:25:98:88:F3:C0:35:20:C4:36:A4:12:11:57:99:2C:EF:76
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 019D98BDC6E2BFC560074B19979ED0B9F2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:07 +0000
Manifest this update: Fri 17 Apr 2026 00:01:07 +0000
Manifest next update: Sat 18 Apr 2026 00:01:07 +0000
Files and hashes: 1: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: KNIRjQ+n5NQAQnP66Smwp/uxDcbY34BBpnRBdnsY9lU=)
2: SFUbqznmCnEJ3rKofq8VKf3iTTc.roa (hash: RPr3mwEf/YOEdxS9Rusypg0HUaq763lQcyOXM9sasq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:c6:e2:bf:c5:60:07:4b:19:97:9e:d0:b9:f2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Apr 17 00:01:07 2026 GMT
Not After : Apr 18 00:01:07 2026 GMT
Subject: CN=f1336a259888f3c03520c436a4121157992cef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:85:9d:60:7a:d9:0b:c7:bf:c1:80:79:78:
5c:2a:e0:18:17:6a:95:1f:ad:98:36:5e:50:0b:e2:
2e:ac:3c:f2:cf:e7:fb:c5:c2:2a:6d:ea:ad:6b:54:
89:c3:bb:1c:f1:c8:4d:3f:f5:33:e6:16:aa:93:1d:
99:0e:ce:c1:85:47:a8:3b:e5:73:58:b5:4e:35:21:
3c:68:c2:e7:97:28:0d:4d:a0:22:85:ad:8f:dc:d6:
54:4e:09:42:b5:37:0c:8f:c1:5c:e5:ec:e6:25:5e:
44:f9:8e:23:66:8f:f4:b4:de:51:b0:e6:3d:6a:a7:
41:ff:79:44:28:9d:41:42:dc:9e:f4:f0:4d:49:3c:
9c:49:17:a7:be:b4:21:39:d6:bd:b9:d7:67:d2:23:
3a:64:2f:ac:a6:37:a2:14:4c:6e:07:6c:2a:77:f9:
32:b1:e3:4d:b5:59:3d:69:e4:4a:4f:d6:59:c5:69:
f4:3a:97:f4:28:4e:b1:35:8a:6b:7c:34:f1:09:f0:
da:78:88:f0:0e:da:7a:0a:53:63:c6:21:ae:82:e7:
b0:8c:54:bf:86:41:a5:99:91:b7:3c:c6:1e:14:25:
bb:b7:08:fa:1a:12:20:4e:f6:82:eb:b6:f0:55:62:
33:93:fc:60:76:d1:e3:35:00:a3:c4:37:5d:34:f2:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:33:6A:25:98:88:F3:C0:35:20:C4:36:A4:12:11:57:99:2C:EF:76
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d7:c4:15:42:25:61:99:38:13:45:2c:02:ff:5b:61:fd:bc:
92:a6:cf:1a:11:7c:d4:ff:76:96:e8:38:88:5a:61:9d:1c:eb:
2b:69:e0:ac:d1:18:61:7b:fe:65:ee:88:36:ca:8c:0d:ac:e2:
26:12:8b:53:10:8e:0f:c4:a2:e4:51:2f:4a:0e:2d:d8:03:8f:
f5:b0:dc:46:46:23:a7:43:a2:ec:ea:42:05:7e:96:02:ec:ce:
b0:33:b9:de:5f:4d:9f:ee:c1:22:00:c5:a6:52:76:e0:8b:1f:
f0:95:c5:b4:62:bd:c2:3f:ac:1d:83:11:62:0d:8d:88:82:19:
eb:78:6a:24:c0:06:89:0f:78:32:fa:cf:6a:2f:7c:cc:74:0c:
ad:72:f2:b9:89:0e:26:44:39:09:98:e4:de:64:fd:47:bc:69:
5d:53:73:3d:fa:49:23:f0:72:61:5b:44:7c:28:02:81:13:42:
56:b2:92:dd:5f:12:c3:d5:cc:11:4b:62:d7:9f:58:4c:7d:94:
1e:d7:a0:10:f8:cb:7a:ef:82:aa:d6:82:30:73:da:07:d9:6f:
ac:00:af:1c:34:fd:73:0e:6b:2c:88:02:ed:2b:93:87:46:3c:
92:10:f5:33:07:f8:c9:04:4f:0b:4b:bf:17:f8:5d:75:05:ab:
c8:e3:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:29 2026 by rpki-client