Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
File: j_QxWS3s8oXDMtMGJTHA589hAsA.mft (raw, json)
Hash identifier: 9vhpKCIZ4QPAjwL5j34d7gIZ0YOMCxGXekWroaTHDOc=
Subject key identifier: ED:B8:71:BA:D9:9F:D1:A4:82:B1:7C:F9:F8:28:72:27:DA:77:A4:91
Authority key identifier: 8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
Certificate issuer: /CN=8ff431592decf285c332d3062531c0e7cf6102c0
Certificate serial: 019D9A074978DA61B9B41816F7B26ECF9FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 06:01:01 +0000
Manifest this update: Fri 17 Apr 2026 06:01:01 +0000
Manifest next update: Sat 18 Apr 2026 06:01:01 +0000
Files and hashes: 1: j_QxWS3s8oXDMtMGJTHA589hAsA.crl (hash: t+g+GVDeh1HhZVWMjGFjbP9dE681XKwMEIxDdlG+BKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:49:78:da:61:b9:b4:18:16:f7:b2:6e:cf:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff431592decf285c332d3062531c0e7cf6102c0
Validity
Not Before: Apr 17 06:01:01 2026 GMT
Not After : Apr 18 06:01:01 2026 GMT
Subject: CN=edb871bad99fd1a482b17cf9f8287227da77a491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:0e:0b:c8:1d:0e:55:99:5f:67:b4:f3:42:
30:f6:17:c3:5e:0d:6d:7c:43:07:42:46:ad:13:64:
05:95:53:8c:a6:4e:53:a3:a7:49:20:63:6d:cc:a8:
b1:40:cf:8f:04:58:bc:7a:ef:a3:fe:b7:b5:53:80:
ea:1d:a0:5b:b1:13:ff:f9:c8:7e:69:8d:49:83:56:
6e:41:d8:bc:69:5b:01:ff:85:df:f4:b3:7b:02:b5:
8e:07:88:e1:fb:05:1a:1d:09:65:aa:3a:2e:77:cd:
b5:29:06:08:aa:18:70:a3:f3:e7:45:a7:d1:78:6b:
0e:b3:7c:d0:69:d1:82:5a:cc:c7:57:31:e0:01:c8:
39:35:1b:19:49:41:74:12:f9:6c:04:51:0a:56:5c:
ee:b1:20:ad:77:9d:3b:c9:bc:97:49:b0:3a:64:fd:
39:3e:44:89:25:29:d4:59:90:47:23:af:88:3d:8a:
36:16:8a:1d:06:4e:41:82:e8:cb:bf:1b:84:9d:89:
8b:92:49:02:80:38:f3:34:26:b9:75:81:7b:4a:3e:
e1:05:2a:38:07:5d:7f:50:15:5b:f8:9d:4a:e4:28:
79:89:1f:fe:37:71:22:e1:f1:da:3e:56:4d:07:21:
20:54:cd:e0:81:76:c2:b6:74:67:96:1b:c2:bd:c7:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:71:BA:D9:9F:D1:A4:82:B1:7C:F9:F8:28:72:27:DA:77:A4:91
X509v3 Authority Key Identifier:
keyid:8F:F4:31:59:2D:EC:F2:85:C3:32:D3:06:25:31:C0:E7:CF:61:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_QxWS3s8oXDMtMGJTHA589hAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/be1fed-2e86-44a9-8a67-44b78e788deb/1/j_QxWS3s8oXDMtMGJTHA589hAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ea:5e:24:6f:2c:b8:37:bb:7e:59:48:41:89:f8:80:aa:80:
89:9f:31:88:fd:12:cf:4e:86:7f:b3:c0:70:56:1d:30:a9:34:
ef:a5:41:d8:d1:6a:25:97:cf:50:49:e4:69:41:9f:b1:1d:97:
19:bd:19:a2:d7:25:9f:22:07:51:a9:02:3c:6f:f0:e2:12:e0:
29:5b:13:da:fd:7d:2f:93:fa:27:22:66:0a:5f:81:ab:96:81:
4e:46:80:d0:68:1a:52:0d:8a:a2:19:9d:45:dd:a5:5f:c9:c1:
b6:27:17:ff:37:ce:fc:b6:75:63:9e:63:95:7a:19:12:cb:23:
00:67:8a:37:ba:ab:b0:43:c1:00:cd:5b:02:c8:ca:4d:12:1b:
44:53:ab:61:2e:be:66:46:36:21:1d:0b:3b:73:4c:9e:4d:1f:
14:56:2d:68:91:e3:22:28:8d:18:a6:58:6f:07:ca:a4:1e:71:
68:9d:9b:dd:a0:91:d7:6c:9a:78:e2:cc:1a:e5:47:e4:66:69:
fc:85:1a:f2:14:3e:cb:e5:c2:be:4a:8d:f4:c7:b0:6e:20:3b:
7b:a7:ee:ff:4d:10:f6:98:02:e9:f7:43:ce:64:2c:38:a8:1c:
3d:8f:59:23:f7:a9:58:1a:98:87:a0:24:74:9e:20:3d:d3:3d:
96:74:c7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:39 2026 by rpki-client