Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: FLs2X1aPIN28oEs5ovJPtuM8aeWA2MlV/Lbmgwa868o=
Subject key identifier: A1:E2:26:96:C3:88:83:4B:59:8A:D2:BF:21:B9:38:F1:D6:31:9D:B6
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 019D99CFC219A4A8C32CC07324B3F70AAD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 0A2B
Signing time: Fri 17 Apr 2026 05:00:22 +0000
Manifest this update: Fri 17 Apr 2026 05:00:22 +0000
Manifest next update: Sat 18 Apr 2026 05:00:22 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: dTUmp3t/KwQSNS1nqvVgeAVMYuGQ7prPxyBY3Hbe8V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c2:19:a4:a8:c3:2c:c0:73:24:b3:f7:0a:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Apr 17 05:00:22 2026 GMT
Not After : Apr 18 05:00:22 2026 GMT
Subject: CN=a1e22696c388834b598ad2bf21b938f1d6319db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:49:48:44:44:13:b5:e1:6e:0d:5c:56:52:
61:25:a8:5f:49:6a:43:5c:5c:25:0a:58:7e:31:48:
7e:12:e1:5e:f0:10:d2:37:44:ca:24:09:8d:f7:2e:
66:c4:39:a8:7b:97:3d:74:1d:e9:08:14:5b:cf:ba:
83:96:8e:e5:d9:44:3f:2f:58:b4:61:8d:21:97:be:
c6:dc:68:89:3a:09:3f:40:51:0d:df:7c:59:a1:4e:
84:44:7c:1d:2c:aa:c0:13:d8:a1:86:2e:2f:e5:d2:
4a:c4:f3:22:41:5f:cf:72:39:d0:54:2f:70:89:1f:
0f:1e:f5:42:bd:c4:ab:5a:c4:53:33:64:37:4c:9e:
e6:8c:54:ce:63:e6:04:2b:5d:ac:fc:b7:d9:16:af:
06:e0:19:ba:f7:9b:63:67:dd:b0:bf:84:bb:f1:90:
2a:f6:25:24:57:47:08:ef:9d:55:33:40:d5:97:f4:
b3:36:44:00:0e:34:7b:ef:9e:6f:2b:8a:c8:46:67:
d8:28:d3:bd:23:70:5e:7b:cb:a3:45:b5:ba:ea:f0:
41:d3:51:11:d9:ab:cd:87:ab:32:30:63:86:30:3c:
90:c6:67:b1:6a:18:ad:2e:5b:26:bf:7b:29:df:f7:
cc:3c:34:dd:d2:7e:41:97:a0:b7:fe:b4:32:ed:f1:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E2:26:96:C3:88:83:4B:59:8A:D2:BF:21:B9:38:F1:D6:31:9D:B6
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4a:d3:f3:97:60:f6:22:7b:39:e8:c3:d8:6f:93:74:95:17:
90:38:b2:ff:f8:d6:0a:07:39:f1:ae:e8:15:e9:70:f4:c8:ea:
12:ac:a1:18:b5:36:62:04:99:c9:ff:f1:16:04:23:3b:35:f2:
ad:22:14:d5:26:63:e7:f2:f1:e0:68:9e:d9:8d:c1:7f:4f:80:
52:91:83:7e:b1:e9:bd:7e:33:52:72:c0:5f:c7:6d:c5:c2:53:
91:39:f3:c8:0e:bf:5c:72:09:e5:32:d5:88:f1:60:10:67:b4:
32:c0:db:b9:5f:26:f1:0a:98:18:1c:a6:cc:eb:f0:e3:30:ad:
1a:25:37:58:e9:fe:82:70:0f:39:23:0f:7c:e3:91:3f:4b:44:
e5:5d:74:71:1d:16:a3:14:f5:18:56:78:90:92:2c:5d:7a:f0:
68:33:21:0b:38:74:ad:88:bf:65:98:b0:94:d9:e5:23:8c:d4:
48:be:7d:4d:bf:d0:48:ea:e8:cb:cb:09:d9:55:e9:75:3f:1f:
a0:a6:76:e2:9b:0a:c6:90:f3:0f:7a:2a:72:15:24:e3:7e:cc:
8b:43:b9:9a:c4:ed:e6:08:2f:28:b8:b6:21:08:b4:88:1b:de:
cd:0d:1d:07:dd:a0:c0:e7:35:b4:4b:f0:96:e2:6c:75:8e:1f:
bd:e9:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:10 2026 by rpki-client