Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: 1By2kH7RJlYdwueoliYmTmsPkTgRjMqBuifUJ4lUZ2o=
Subject key identifier: 32:EC:25:7A:36:70:7C:7C:31:69:03:B0:94:A9:39:18:18:C2:E2:E1
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 019D9CD1B06B9E510EDCE194ED7D7096E8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 0C21
Signing time: Fri 17 Apr 2026 19:01:21 +0000
Manifest this update: Fri 17 Apr 2026 19:01:21 +0000
Manifest next update: Sat 18 Apr 2026 19:01:21 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: WLYdJOLqEGp4E20LXHA/2ubEMHFmJ9ndiHAzeCuND0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:b0:6b:9e:51:0e:dc:e1:94:ed:7d:70:96:e8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Apr 17 19:01:21 2026 GMT
Not After : Apr 18 19:01:21 2026 GMT
Subject: CN=32ec257a36707c7c316903b094a9391818c2e2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:30:79:41:05:64:1a:e7:43:de:ad:d2:f9:b5:
17:5d:37:d4:54:28:ae:fe:c9:dc:0d:7c:41:53:40:
2b:77:4a:be:c3:9f:27:33:75:51:11:b5:c0:88:d1:
86:5f:39:d8:bd:7a:cc:62:d4:96:7c:06:ba:85:ff:
e4:f4:40:e1:c7:db:d3:a6:db:a8:06:a6:a5:ae:e5:
87:dd:72:b0:b7:f7:ab:3e:7f:9e:04:44:b5:5a:03:
a9:3c:73:4f:46:b3:6c:60:ea:2c:cc:7b:47:6a:81:
98:34:40:e5:92:c7:a6:3b:fe:67:ff:14:a9:21:c1:
66:e6:a2:c1:95:cf:21:2e:6b:1d:5a:e7:69:8f:e7:
e2:b4:15:98:ab:93:0b:d8:c1:e4:17:38:a8:90:4b:
d1:b9:59:5b:ef:fc:56:8b:af:88:a4:88:4a:c2:89:
01:a3:79:a9:95:1e:21:dc:f2:fb:a0:f1:2e:b5:df:
65:dd:88:ac:01:0c:3c:cb:9f:dd:53:bf:52:8b:c6:
0c:30:e2:c9:dd:b0:d8:eb:60:7c:ef:7c:48:6f:5b:
b6:62:64:27:6c:40:b2:55:d6:e3:e6:37:c9:80:32:
ce:22:1f:80:68:45:5f:8a:8f:c0:d6:2f:f8:4a:86:
02:23:7b:55:66:7a:28:3b:8e:ad:6d:96:41:fe:bb:
4a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:25:7A:36:70:7C:7C:31:69:03:B0:94:A9:39:18:18:C2:E2:E1
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:83:b4:b5:76:97:fa:52:4c:f1:5d:c9:77:d5:c5:1b:8a:4e:
01:5f:e4:4a:68:b6:7c:0c:58:3b:8f:84:a6:04:5b:be:eb:b9:
97:8d:e4:04:d7:c9:5f:de:22:bb:f0:af:ad:a1:fe:50:72:b1:
0a:c8:4e:91:86:bd:a5:9a:ca:c7:db:86:9e:75:78:5e:e0:15:
0f:28:cd:0f:88:3a:a3:15:95:c8:c7:cf:88:a9:cd:ca:21:0a:
0c:37:48:3c:ef:b1:f1:c8:37:7c:c2:2f:32:d5:eb:39:d6:6c:
d2:2f:d0:f6:ce:ac:3f:9e:77:ec:54:bc:77:8f:fc:28:7a:9f:
3d:8e:ab:29:14:37:84:b4:e2:3c:fc:fb:89:08:c8:cf:28:0e:
15:c6:8f:3a:72:4b:77:86:4a:87:34:91:f0:4f:82:5e:2b:a1:
31:43:58:c0:10:fb:87:b5:b4:ca:31:94:56:10:c8:ad:3c:1e:
69:1f:5f:f1:f1:a7:6c:2f:04:76:ea:64:91:3f:4f:38:1e:0e:
6e:61:79:15:59:ab:aa:6c:d5:c7:75:6c:bd:7e:03:8f:30:4e:
cd:a5:a2:4a:77:cf:67:42:d5:5b:58:18:fc:87:6b:93:c3:21:
01:6a:3b:4f:9e:e8:7b:a0:a1:0b:85:55:c2:bd:6c:3a:b5:a2:
1b:35:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:57 2026 by rpki-client