Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
File: jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft (raw, json)
Hash identifier: 9/OgUWX03IgrL6AnP2KI/arBOvngUa358pZ9QMDFKyQ=
Subject key identifier: 95:A1:91:F9:B2:88:0A:80:35:C5:30:58:86:D1:08:D8:17:6E:C8:9C
Authority key identifier: 8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
Certificate issuer: /CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Certificate serial: 019D9962837321463BEBC4CC7568BBAA508B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
Manifest number: 0EAD
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl (hash: 8oktoS8TKCHaRg7h3RGyE31RdxNkU++URGExYhsJx1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:83:73:21:46:3b:eb:c4:cc:75:68:bb:aa:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f04c615e0db0c5b98a80b25b52d8932dbfd05df
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=95a191f9b2880a8035c5305886d108d8176ec89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:61:37:82:3f:c8:ba:08:25:a1:18:14:87:
ad:3e:be:d3:36:89:15:6e:02:bc:d9:b2:94:2c:89:
6a:b3:0e:72:1e:5f:6a:4c:11:7f:42:f5:5f:a3:1c:
96:2a:80:44:77:35:d1:2a:b0:28:e8:36:ce:99:19:
7f:bd:98:e1:a3:08:d0:27:96:9d:7c:8f:40:6b:26:
d6:ae:ee:dc:93:65:75:ab:8d:45:9c:ee:21:b7:3d:
d3:0e:82:9c:17:9e:fc:3e:50:62:d1:ae:c0:da:ad:
c7:22:99:64:96:eb:fa:99:6d:92:e5:92:d2:99:9d:
f1:7e:8c:8e:24:0f:35:fb:c5:2f:da:ec:96:4c:75:
ee:2c:64:73:35:d1:79:81:61:ae:ae:b7:1f:27:40:
43:10:4f:13:ae:aa:f1:8a:78:d1:b7:1e:82:9f:e4:
8c:41:4a:74:83:3e:33:cd:c9:c8:a1:f4:a7:ec:76:
ec:10:fb:72:3d:ac:7e:72:32:af:67:51:05:25:82:
f6:eb:53:65:77:39:e3:93:d2:16:6c:dc:b0:7d:85:
de:22:07:ea:e7:57:45:28:0b:08:9a:48:4e:12:0b:
a0:1b:01:7b:19:0c:0d:ab:7a:84:25:0f:e9:0b:0a:
8b:7a:73:21:10:6d:c8:d9:97:bc:51:6b:2e:5c:ae:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:91:F9:B2:88:0A:80:35:C5:30:58:86:D1:08:D8:17:6E:C8:9C
X509v3 Authority Key Identifier:
keyid:8F:04:C6:15:E0:DB:0C:5B:98:A8:0B:25:B5:2D:89:32:DB:FD:05:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwTGFeDbDFuYqAsltS2JMtv9Bd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4b7fa8-eb1d-4441-aa18-f2b0b27a1cb6/1/jwTGFeDbDFuYqAsltS2JMtv9Bd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:18:02:cd:00:2a:06:b9:b7:2f:3b:37:73:1f:3d:28:1f:47:
25:96:dd:62:3f:50:ec:d1:cc:a2:1a:37:b8:b1:53:c3:59:0e:
21:69:c3:3d:a2:e4:7e:f1:f2:65:47:2d:3b:da:83:81:f2:35:
5b:24:86:32:a5:8d:97:41:c5:4c:ca:d9:18:ae:a4:9a:2b:38:
0f:24:ec:c0:3b:91:92:06:f8:79:bd:58:a9:cf:d9:16:d8:82:
ec:66:59:04:09:47:b4:f3:22:85:4d:d4:a1:d2:a8:b3:41:ce:
d2:ff:72:ce:c1:62:72:02:cb:9f:2e:c4:48:9e:fb:50:34:1a:
c8:a0:ab:9a:9b:a0:4f:b5:87:4e:19:60:b4:bd:97:92:ca:2c:
21:76:6a:11:c2:32:c5:c8:90:c7:51:11:fb:f9:b7:bc:80:34:
4b:ee:09:10:ab:8f:0c:e7:70:33:dd:42:da:3c:64:cf:b8:92:
1c:bf:4d:4c:ab:f9:11:2d:97:b1:49:13:9d:a3:c6:31:9e:4d:
60:41:cb:0c:0c:42:e5:98:66:a3:23:4e:d6:f8:a1:0f:f6:c6:
11:d8:07:88:4a:0d:ae:29:64:ce:ba:4c:7e:db:71:61:0e:90:
a0:11:9f:84:df:64:1d:73:84:31:b4:d2:d1:fe:f0:c7:9b:e4:
65:13:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:21 2026 by rpki-client