Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: h+IuPDq13rrv7R0saFqgHMmvq5JnTejwYHPnmRnK8PI=
Subject key identifier: 6D:12:70:12:0D:53:10:F9:CC:44:01:E7:48:1E:90:7E:89:4E:90:A4
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019D9C2C4A04691E187490CADEA6DDFD9ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 0697
Signing time: Fri 17 Apr 2026 16:00:41 +0000
Manifest this update: Fri 17 Apr 2026 16:00:41 +0000
Manifest next update: Sat 18 Apr 2026 16:00:41 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: bmX35gJPZdCt438/ufi0di3Q2OhP7eA9bqoc25aIwtw=)
2: Ti99byxMxEultByMj_ZtpNccqro.roa (hash: FyYPPJ+YgErTDDfONgmR0NO8SDJKFzr8LmNtsMbfpr8=)
3: kc-jaUVimyh7h7ZPoNuGNT6F-Uw.roa (hash: ntudmzWpvPZIJiKJAFzm/9dUZxLPcjchhqmnjmjWXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:4a:04:69:1e:18:74:90:ca:de:a6:dd:fd:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Apr 17 16:00:41 2026 GMT
Not After : Apr 18 16:00:41 2026 GMT
Subject: CN=6d1270120d5310f9cc4401e7481e907e894e90a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:49:6d:25:d5:a9:d8:7b:b1:62:94:9b:58:
60:09:4c:26:57:9f:3d:0b:99:6f:0b:b9:41:2c:2c:
eb:17:7c:2e:71:61:8e:4c:c4:0c:2b:86:19:e5:ce:
90:79:80:54:df:ec:9d:3c:7b:ab:fe:cb:b3:3f:71:
9a:02:c7:f0:44:e6:02:fe:ac:59:b4:fd:eb:2e:be:
b0:22:de:dc:c5:0f:51:bb:5c:04:8a:92:6e:ac:fa:
21:f9:bd:9b:54:71:ac:65:bf:64:2c:84:fa:c8:84:
dd:20:56:d0:18:cc:97:7b:48:47:52:13:ae:16:5b:
95:df:c8:78:46:bc:be:51:24:56:16:28:90:cf:51:
4f:b1:28:94:c6:60:79:8a:45:23:a9:db:8c:b6:c4:
12:c3:68:78:8e:e3:47:d0:df:6f:6f:a9:7a:56:a0:
e8:16:bd:92:fb:fb:03:d3:eb:de:60:32:5e:73:24:
9d:80:06:2d:3c:ad:c6:fa:40:74:44:ef:f3:02:1a:
37:4a:5e:db:c9:02:03:92:e5:27:28:db:9e:af:e5:
b8:81:22:64:a0:20:d5:f4:e6:0f:97:66:dc:76:a1:
da:3f:88:ed:33:3a:4d:50:34:18:ee:56:ea:d8:52:
aa:85:83:b1:48:be:07:20:ec:4f:82:41:22:94:41:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:70:12:0D:53:10:F9:CC:44:01:E7:48:1E:90:7E:89:4E:90:A4
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:84:95:51:0a:01:5e:f8:80:ca:c6:da:47:61:2a:33:4d:75:
01:65:41:80:6a:73:ea:fd:b7:b8:99:83:3d:74:49:53:37:06:
5e:04:b3:50:53:03:63:64:38:4f:2c:37:7e:2f:82:e7:d7:72:
fa:c1:d8:d4:d8:e9:f8:f9:9f:77:09:6a:73:88:fe:d9:f1:d9:
e8:43:ba:56:c4:13:87:69:c7:64:df:5d:b2:ae:a1:87:9c:17:
d7:b9:bd:e6:d4:41:f4:45:60:6b:ca:1c:79:67:3f:19:5f:41:
97:e8:3f:05:6b:71:dc:92:ef:bd:15:b3:85:b4:31:71:96:3d:
b4:22:e8:cd:73:38:f0:18:b4:45:60:84:1d:60:48:a8:5e:e6:
4d:99:6d:93:08:45:6f:ce:93:19:f7:c8:a0:9f:da:bb:af:f5:
fd:46:31:b9:94:af:6f:c7:b4:9c:9a:9c:bb:4f:d6:f4:47:c1:
be:a4:52:33:28:80:75:02:46:ab:7c:4a:e2:54:54:ac:e2:c9:
00:98:4f:62:12:9e:ab:89:9b:d3:27:32:52:37:f2:16:10:e1:
e5:e9:18:2d:ce:64:bd:aa:0f:3d:b9:38:3d:bf:d0:e0:2f:5b:
5b:95:c1:2b:df:a7:5f:c3:da:a4:80:97:3c:44:21:b1:59:66:
30:04:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:09 2026 by rpki-client