Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: 5F/tu0+8NZCzXMpwYZX8AvHrMwJtw9BhT3MKDWCMiaw=
Subject key identifier: C5:BF:B4:AC:7D:AA:82:61:4B:AD:82:6B:99:F9:E3:3C:D9:C2:01:7A
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019D999950EAA9492C23A510901EB3AA50A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:54 +0000
Manifest this update: Fri 17 Apr 2026 04:00:54 +0000
Manifest next update: Sat 18 Apr 2026 04:00:54 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 3k3QOsHN4VvOcOIisODvtjOYeK8o8TMXx103O5PWYWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:50:ea:a9:49:2c:23:a5:10:90:1e:b3:aa:50:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Apr 17 04:00:54 2026 GMT
Not After : Apr 18 04:00:54 2026 GMT
Subject: CN=c5bfb4ac7daa82614bad826b99f9e33cd9c2017a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:4c:02:38:06:da:d3:dd:68:bf:4c:1e:3f:
7c:3d:6a:48:1e:81:50:bc:a2:ce:d6:ec:55:77:d2:
a8:8c:08:04:e7:c4:14:6c:31:2f:ca:72:4d:f7:49:
ca:b3:70:12:34:71:18:28:c5:58:a8:53:8f:18:35:
80:a7:c1:ec:82:48:e5:85:e8:45:83:f6:2d:ba:40:
2e:27:3c:72:72:4e:67:c5:6a:82:44:0a:b8:8c:ea:
9d:ea:73:42:fd:94:23:77:b1:a6:96:5a:03:78:c2:
97:45:ea:58:43:ad:54:77:f8:4e:08:8f:b7:66:1f:
2f:7d:d4:37:80:b7:b4:64:85:1f:fd:30:11:e4:18:
a9:9c:f1:6e:27:1c:84:11:22:e7:2b:6b:3a:b3:e2:
76:99:fa:01:2b:7a:a8:56:74:a6:81:cb:6a:f4:55:
87:5f:d6:13:1f:76:d0:43:d9:44:c6:88:92:be:01:
f0:63:c5:ed:22:54:12:83:f2:80:0d:07:a6:9d:22:
69:61:ff:23:93:80:4c:46:e3:b4:2a:5b:62:0c:f9:
79:b4:df:b8:b4:4d:39:89:7c:db:d7:50:db:52:99:
b3:19:aa:04:64:25:e1:a0:ac:50:16:5a:ad:20:8b:
c3:00:5b:7e:76:13:b6:d8:4c:df:39:fb:b8:3f:ea:
67:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BF:B4:AC:7D:AA:82:61:4B:AD:82:6B:99:F9:E3:3C:D9:C2:01:7A
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dc:cc:cb:61:5f:b7:fd:8b:1d:8b:29:d3:f9:96:ee:4f:a9:
31:c9:9b:1c:0a:9d:4c:ea:71:f2:cf:df:e6:8f:36:b7:10:8a:
8a:1e:98:ea:4b:2e:fc:43:d3:1b:4d:ef:4f:3a:bd:07:88:4f:
35:0e:11:69:23:bf:11:75:73:2c:72:a6:f1:7b:6f:2e:e5:b6:
c3:51:79:19:50:e3:de:be:8e:1d:82:99:1f:46:cf:05:53:66:
54:d5:e3:c2:39:21:4c:de:aa:37:65:0e:0e:12:61:10:18:0c:
b4:95:66:0a:05:86:de:27:56:a1:27:26:06:e9:3a:93:a4:1f:
b7:01:9f:0b:b3:c4:f8:8f:82:70:cf:13:cc:5f:8e:e1:62:0e:
05:89:f9:d6:53:0d:1d:81:dc:73:3f:4a:ec:2c:7d:bc:a1:58:
3f:eb:69:38:1d:50:05:6c:9b:80:13:b7:4d:ca:af:bf:ba:eb:
46:eb:ca:2b:32:d4:3d:9c:80:a7:2b:09:2d:1a:4e:e7:7f:9f:
a2:11:a1:4f:a0:d4:16:4a:49:ca:7c:c1:e8:35:3a:f4:8e:93:
ac:65:11:f8:2b:dd:8f:f2:89:f1:71:25:6e:27:cc:95:85:7d:
f7:0c:ac:fe:99:cd:b5:f4:36:07:d6:61:9f:e2:e6:bd:e8:f0:
1f:3e:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:39 2026 by rpki-client