Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File: JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier: bCNPKRGpQu5EdpMEgAxzUqitoYhPt/mgbO9JltU7y34=
Subject key identifier: D3:CF:D9:CF:97:25:AB:E6:0A:8F:8B:86:4E:33:46:26:92:B2:F3:77
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 019DDDD59936C6B1AA7085ADBDA96CEFB518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number: 1947
Signing time: Thu 30 Apr 2026 10:00:56 +0000
Manifest this update: Thu 30 Apr 2026 10:00:56 +0000
Manifest next update: Fri 01 May 2026 10:00:56 +0000
Files and hashes: 1: 9AbUngTypkaoNALibGKyeTkaz4o.roa (hash: 8et21MYSocigMDejcXNZOBoqIIUukvEWNLqIqh49CVQ=)
2: If-4jw8504k0DpzNI8J-eTjth_I.roa (hash: +7hlM1fpCVGHtefaNr3Hcn1BgELFnn/j/b88Js0gOWM=)
3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: JvBXcs9ZVR2caoowvDzH2FOIPC+o+krrW+KWFS2Sr9Q=)
4: RyBPSWBAyvgzI58JUex72WdudTY.roa (hash: dlQYrNWmjCNno8rPfDE7ZKBncib9oiUvaLSq8gqa3/M=)
5: UT5KF9vV1JL4qQULVX8xBydW-Ws.roa (hash: CZXMjETLne5/ANsavo0h/DI6L9lViMMTJK0r4r9Tp+I=)
6: YJKWmoUnloWqQAavfXfWWxqnJ5M.roa (hash: Ka2Kdw/WOaN1bcBViqXyM0PUv8ChNL0LTlaKVsUXAN4=)
7: ob6pDJB_JE3UJu9H-9gufeyselQ.roa (hash: xbSbO7r3hHkWAEnbnrsxUE2H3xriXhgsX8DyAPUq47c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:99:36:c6:b1:aa:70:85:ad:bd:a9:6c:ef:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Apr 30 10:00:56 2026 GMT
Not After : May 1 10:00:56 2026 GMT
Subject: CN=d3cfd9cf9725abe60a8f8b864e33462692b2f377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:e2:28:d3:e6:49:c7:77:2e:c4:b9:7f:50:
39:88:2f:22:64:0b:d0:16:3d:ab:f5:4c:47:a1:65:
5b:13:6a:44:34:c5:3a:9c:e8:29:10:05:31:fe:cc:
10:e7:e5:ce:ec:68:8a:06:c3:da:a2:51:da:4b:2d:
62:5d:00:bc:05:8c:27:c0:69:8f:00:1b:0b:4c:0e:
8a:78:cc:c4:e6:3a:56:90:5d:84:ce:bc:d1:4f:6e:
d5:40:fa:4c:90:3e:86:cb:bd:4d:b0:07:b4:9f:89:
c2:61:a3:a4:74:29:31:3e:47:18:e1:b3:d5:74:d8:
c0:ae:c3:07:5d:05:2e:bf:ba:5a:03:e9:28:5e:ba:
38:de:29:cd:07:36:06:ef:b5:69:c4:d3:53:ca:d6:
24:dd:af:29:40:e9:2f:f4:3c:cc:08:3b:a9:83:93:
76:be:f6:cc:05:9d:d8:88:6d:c0:71:09:75:57:b0:
df:3f:7b:0d:ea:95:94:4f:4f:90:25:ef:5f:1b:c6:
41:7e:9c:34:b0:28:54:5e:b3:26:bc:98:4e:c5:f3:
26:20:d2:1a:e0:56:3a:9b:93:b0:e8:ca:87:24:7b:
20:b9:c2:3d:55:c3:95:af:bf:4a:a4:3b:15:97:45:
bb:c3:56:99:f3:d6:82:a4:42:00:f5:2a:90:35:24:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:D9:CF:97:25:AB:E6:0A:8F:8B:86:4E:33:46:26:92:B2:F3:77
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:09:7f:05:62:a7:1e:53:73:ff:4a:62:46:ca:24:c3:d3:
25:c1:fe:83:5b:e4:7a:bf:ce:38:ac:dc:e1:d3:10:66:6c:57:
8f:e2:d0:a9:47:68:ce:14:67:a6:be:0f:9e:5a:2d:24:4f:0b:
bd:5e:1f:57:b9:9e:94:b6:31:cb:91:0e:08:28:b8:78:36:d4:
96:e0:b2:97:c2:c6:04:21:02:ad:da:44:2b:89:4b:00:69:0f:
82:4b:f6:81:5a:6c:7e:e3:f1:80:03:1b:64:07:45:bf:7a:d5:
d0:20:00:0f:5b:35:91:80:dd:09:8a:8d:6d:31:62:51:c1:76:
ac:02:5d:76:71:49:08:57:68:18:8b:db:38:42:68:7b:ab:aa:
3f:88:af:43:d3:a5:22:58:13:18:13:61:ca:3f:1d:bc:aa:32:
a5:f1:23:af:cc:c2:5a:15:50:40:1f:22:6e:a1:0d:58:a0:e4:
42:aa:9d:0c:45:8c:0d:d1:ee:c4:63:dd:79:38:4f:65:34:40:
24:ab:c3:50:d1:ba:62:e6:36:6f:9b:a2:4e:b4:14:e3:4f:9e:
6a:e0:e1:fb:3b:9e:77:6f:cc:84:d3:27:0e:1c:e3:4c:eb:8a:
22:87:00:7e:6e:c8:d8:f8:d4:f0:b8:13:b2:ab:d7:03:bd:17:
e5:72:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:33:32 2026 by rpki-client