Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
File: JKX0o6fsZAySNFB5lMDGXyji_Fk.mft (raw, json)
Hash identifier: LkM/DYw+6ejnRjvCyHjL+givtQeKeO0PJSrRzPfXfAk=
Subject key identifier: EF:D4:88:B1:96:12:3A:0D:76:7D:38:ED:EC:45:A1:49:A0:4C:10:AF
Authority key identifier: 24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
Certificate issuer: /CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Certificate serial: 019D98F44C07484F22B860AAC1592BB5F622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
Manifest number: 163F
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: JKX0o6fsZAySNFB5lMDGXyji_Fk.crl (hash: JUrP410wLWuZ4DOB3UG8b0Y81brJukUA1ELcgI56egQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4c:07:48:4f:22:b8:60:aa:c1:59:2b:b5:f6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a5f4a3a7ec640c9234507994c0c65f28e2fc59
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=efd488b196123a0d767d38edec45a149a04c10af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:70:38:88:c9:25:13:a9:43:81:11:c9:4f:
ef:90:03:1b:ca:47:3f:86:be:15:22:9a:06:c7:22:
4c:f0:b2:71:3d:a5:6c:2f:ad:21:b5:05:49:84:43:
99:11:20:58:ad:1c:16:c5:69:f8:86:4b:90:33:77:
86:2f:6f:f4:61:85:d8:79:6c:5a:1c:b2:28:18:94:
42:46:46:d0:2a:12:a0:45:09:77:81:7c:d5:c1:25:
0b:09:1f:34:ba:af:54:55:a4:09:5b:03:a8:d8:fe:
0a:f3:c9:28:78:d0:a8:82:27:01:91:2b:d5:6c:b4:
10:42:44:40:15:ef:18:1a:a0:3b:34:8e:85:3e:a8:
67:f3:13:94:3d:1d:c0:5f:75:98:77:08:b7:b7:71:
48:e5:35:56:de:70:fe:06:29:bb:ee:c6:4e:b2:9f:
0d:8c:9f:0c:00:4b:e2:57:6b:d0:bc:a8:09:56:e0:
8a:2b:ce:f5:b9:10:e2:b4:e0:fe:fc:79:81:fd:fd:
eb:eb:4a:a8:f5:81:98:40:32:15:f5:f0:af:d4:bb:
b1:cc:ab:ce:29:b5:0f:ee:0e:37:08:27:88:4c:f7:
9b:bd:3c:31:07:4b:fe:90:69:da:16:9d:42:47:49:
76:d3:ec:69:ca:ce:90:9b:3c:8a:6c:eb:79:97:ed:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:88:B1:96:12:3A:0D:76:7D:38:ED:EC:45:A1:49:A0:4C:10:AF
X509v3 Authority Key Identifier:
keyid:24:A5:F4:A3:A7:EC:64:0C:92:34:50:79:94:C0:C6:5F:28:E2:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKX0o6fsZAySNFB5lMDGXyji_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e5c7ce-051f-498f-88de-bdd9b4303c96/1/JKX0o6fsZAySNFB5lMDGXyji_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b5:6e:30:e4:12:78:65:73:f6:d8:a8:9a:23:fd:ac:27:d4:
b0:ab:12:16:c9:43:1a:cc:2c:06:12:34:7f:7d:f4:53:76:4d:
a9:7e:71:1b:47:b9:d5:81:b9:5f:ff:cf:a7:d4:53:f0:6a:87:
e3:0b:32:0d:1b:6e:27:4f:24:f3:c7:28:82:d6:8c:38:13:77:
0a:97:71:73:d8:a2:d5:44:85:09:bb:91:98:7e:fd:b4:44:b3:
d7:85:a5:b2:d3:4a:ac:a9:01:b4:5b:45:ef:81:74:39:ec:6b:
c2:b0:22:37:b8:bb:ef:87:8f:d7:ab:ea:6a:94:08:4e:85:ed:
47:87:c3:40:65:b9:36:97:87:c5:05:c2:6f:c8:9e:54:65:d6:
34:ef:5b:12:10:e5:88:68:13:f2:54:ed:60:dc:b3:52:a1:a7:
e9:b2:10:8c:e3:d2:6a:30:eb:51:cd:42:25:a0:10:9c:47:95:
00:b3:e5:af:17:6c:2b:98:bc:d3:a6:ac:d7:6c:80:ba:98:95:
3a:56:f8:76:c8:81:ab:ef:ef:95:e0:36:56:4d:49:fd:d8:34:
ea:52:e6:f9:b7:82:7e:1f:92:16:4f:a5:54:b1:52:72:c8:da:
c4:7c:6c:7d:5a:dd:75:dc:8b:2b:61:d8:47:cf:55:5a:34:a0:
01:d6:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:41 2026 by rpki-client