Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: 7Gc2hxSkILyNyxIflqabadedwQs63y3BNLmEioGok90=
Subject key identifier: 05:3A:25:7E:D6:63:C6:6E:A1:C7:EB:F0:BF:DF:A0:27:94:32:E0:AF
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019D981859826B514087D9FECB06295FAE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0648
Signing time: Thu 16 Apr 2026 21:00:25 +0000
Manifest this update: Thu 16 Apr 2026 21:00:25 +0000
Manifest next update: Fri 17 Apr 2026 21:00:25 +0000
Files and hashes: 1: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: VvsddoRA08pndfpD+2f19PIJlGoaRnx27ngpYT6qF/w=)
2: m1C5L7CbhAcIOumOYRBFsLzm0eE.roa (hash: SYAtLc5fN9d8S/lPjJCzeOzecwlCkRAmvHG5vPw/tRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:59:82:6b:51:40:87:d9:fe:cb:06:29:5f:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Apr 16 21:00:25 2026 GMT
Not After : Apr 17 21:00:25 2026 GMT
Subject: CN=053a257ed663c66ea1c7ebf0bfdfa0279432e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fa:46:09:b7:3c:59:b3:ad:51:c9:7b:80:80:
ee:b8:13:38:1c:b5:25:08:10:60:cf:1c:02:d6:ab:
83:66:93:e0:3c:ef:9e:cd:b3:75:f3:65:48:35:96:
75:bc:4b:b5:79:87:6d:f9:dc:30:bb:40:9a:27:cf:
c9:9f:af:9f:97:cf:7b:27:d6:c7:a7:7f:fe:75:61:
ce:af:24:e7:74:9d:e7:0a:5d:e6:7c:78:a3:f6:65:
c8:15:d2:c0:7a:3d:70:26:d6:ac:3f:28:73:19:37:
12:d7:95:4b:03:08:9d:c4:19:17:88:6b:f7:7c:fe:
a3:3c:ad:f7:cc:aa:fe:c2:7e:bc:1e:97:12:e2:7d:
fe:41:45:0f:2c:0a:a9:1e:e5:da:f7:a0:1d:b8:c9:
a7:fb:c7:68:f9:9d:a1:d2:65:26:cd:30:16:f5:c2:
1e:82:06:38:b8:ec:4f:a5:4b:08:e7:72:87:ee:61:
6e:e8:a8:d3:4b:b7:cb:2e:cc:90:f5:c2:e9:d8:c3:
4e:ca:6b:4e:72:ae:ac:6f:7a:76:85:b2:50:eb:9b:
ef:47:2a:37:bf:20:6b:f0:ed:d6:23:c0:fe:88:4a:
c5:be:28:e6:64:25:94:a4:cf:f5:84:0a:66:49:31:
6b:ed:92:97:19:d6:91:34:a4:0a:9d:d5:a7:e0:4c:
9b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:25:7E:D6:63:C6:6E:A1:C7:EB:F0:BF:DF:A0:27:94:32:E0:AF
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:41:e9:4a:6b:cb:5f:f6:04:29:78:54:6b:49:77:1f:c8:8a:
49:21:c2:37:6f:3a:de:a1:5d:19:46:82:8a:ea:ca:f2:22:cb:
e2:9d:80:d3:3c:56:59:2e:40:f6:81:54:c9:6c:f0:c4:a4:08:
9f:bd:99:1a:4c:5c:3b:64:f1:06:ac:42:b0:23:82:a4:92:7d:
5c:49:35:f2:02:1a:ae:16:cf:d9:ea:8a:da:4a:34:d1:1f:4a:
62:db:e2:a4:7f:d7:a8:8f:55:b2:76:c3:88:27:73:57:61:64:
d0:50:ca:df:9a:a7:d9:df:c9:29:b6:a2:41:ff:19:0e:1d:82:
1f:ff:11:9f:be:b7:1b:aa:b3:34:b7:81:35:11:30:dc:d8:81:
f7:ef:9e:91:56:47:03:e4:2e:3b:ca:48:0f:6d:a5:e7:06:e6:
ee:b9:af:80:56:24:99:27:fb:17:5f:6a:d4:a1:54:af:d5:c9:
99:58:c3:2c:ec:89:2e:08:d7:f3:99:55:24:fb:f9:8a:39:6d:
84:ce:67:79:7e:95:35:b4:cf:15:e4:b4:c7:14:2a:aa:7a:7e:
8a:9d:ee:4e:59:5c:5e:ef:02:44:5c:13:b0:4f:b1:a9:bf:90:
0a:fe:b3:16:0a:f8:cf:23:e3:c9:b6:54:7b:96:95:b8:4f:34:
2f:f9:b4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:12 2026 by rpki-client