Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: uP202X7xwJ8EZXjv9Ys+Wj/OmD4LZL14k81ihFzORn8=
Subject key identifier: 5D:9E:0D:BF:C0:EF:AF:E7:B1:FC:1D:4E:0E:00:0E:C6:3C:3F:CD:B8
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 019D9B51161F87089CDBDDA2A5B06D102659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 123E
Signing time: Fri 17 Apr 2026 12:01:15 +0000
Manifest this update: Fri 17 Apr 2026 12:01:15 +0000
Manifest next update: Sat 18 Apr 2026 12:01:15 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: s2EAdREH3jFMwXoI3p16B9YIPRi3r7tHUL8ksk4ul8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:16:1f:87:08:9c:db:dd:a2:a5:b0:6d:10:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Apr 17 12:01:15 2026 GMT
Not After : Apr 18 12:01:15 2026 GMT
Subject: CN=5d9e0dbfc0efafe7b1fc1d4e0e000ec63c3fcdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:aa:c4:80:13:85:91:34:38:6b:c6:74:ce:
c6:7c:9d:d9:5c:b1:5f:ac:01:54:50:ca:8d:57:67:
97:f9:49:90:a1:2e:d0:f9:a0:bf:57:82:67:40:4d:
20:f5:ee:f9:4a:69:1e:cc:02:8b:88:b8:78:ee:36:
7e:47:74:b0:37:f4:c5:67:68:32:29:d7:d5:e0:7b:
f2:8a:45:a5:e2:9c:04:04:ad:6f:d4:cd:d4:b1:72:
a2:84:41:98:fb:67:26:40:1b:c8:3c:09:53:bc:1e:
f3:98:f2:ff:2b:a1:0e:64:f1:df:91:a4:58:28:65:
34:5d:dd:f5:03:45:2f:c0:79:6b:25:6a:1a:3b:26:
f9:58:4f:e3:72:e4:4a:30:cf:e3:25:6a:82:25:a4:
81:be:49:3f:14:b6:0c:6d:f0:a3:b8:02:c6:67:f2:
37:60:53:0a:23:63:fb:bb:56:b3:40:68:0f:a7:51:
b5:00:d5:65:75:8a:8e:dd:39:15:15:dd:79:85:d8:
7e:95:a0:02:9a:dd:b9:95:64:ef:a8:d2:86:e9:50:
ee:74:88:a9:08:3b:24:08:37:37:36:e6:ae:aa:ac:
0a:9c:56:86:e2:31:0e:25:fc:c3:c7:9a:b8:84:7e:
b0:97:13:a7:1c:d0:7e:18:59:dd:89:d8:cf:40:de:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9E:0D:BF:C0:EF:AF:E7:B1:FC:1D:4E:0E:00:0E:C6:3C:3F:CD:B8
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:d6:39:e9:9b:ee:12:9f:cf:85:d6:f3:cc:18:af:aa:52:
4d:92:c7:49:b0:34:0e:93:32:94:33:40:b9:8b:ce:3a:5d:e0:
3d:1b:34:13:ca:92:55:bc:01:60:ec:75:5a:0a:aa:f4:cf:b9:
3e:be:8b:04:9d:2a:df:fa:a7:b5:e8:97:0f:ae:6f:7f:21:98:
88:e5:f5:9e:00:fe:ed:08:3c:1b:3f:35:1c:98:6e:46:01:ff:
87:c0:93:63:a7:4f:38:92:f2:66:87:79:f6:06:de:54:d9:7d:
f6:5d:ec:d0:61:b5:40:5e:5e:32:3a:4e:ae:40:b3:d6:c6:83:
a8:50:b3:43:af:f4:ae:a3:d2:95:b4:a6:f0:db:e1:51:1a:00:
df:b2:ba:da:79:14:09:7f:71:1d:7a:03:aa:40:2c:7c:67:0e:
4b:fd:98:2c:ae:12:94:b5:f5:80:8b:51:23:ef:b6:44:29:9e:
06:a7:ed:45:a9:81:3b:73:fe:ef:d1:ab:e2:2b:4a:97:1a:fc:
72:44:26:97:06:5b:81:2a:2e:cb:9f:22:56:37:2e:02:63:93:
d7:9d:07:f2:f3:8d:ba:1b:17:64:15:36:01:c4:6a:3d:56:f6:
31:34:c3:84:3d:1b:84:a0:ee:5f:fc:23:65:e4:20:00:c7:3f:
02:7d:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:29 2026 by rpki-client