Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
File: JkOSPnc-snBJKuzI2hXC5cpXwso.mft (raw, json)
Hash identifier: rDivoOKE8vr+RSAnFh6Ie8TAaVXTKmqtJVy79LHCybA=
Subject key identifier: 79:3D:18:0A:51:3D:F1:7C:B4:2F:49:FD:4D:77:67:A4:21:B3:37:FE
Authority key identifier: 26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
Certificate issuer: /CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Certificate serial: 019DB16AF2E0471B7DCB61DA9A8E2F72E5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
Manifest number: 18D0
Signing time: Tue 21 Apr 2026 19:01:09 +0000
Manifest this update: Tue 21 Apr 2026 19:01:09 +0000
Manifest next update: Wed 22 Apr 2026 19:01:09 +0000
Files and hashes: 1: JkOSPnc-snBJKuzI2hXC5cpXwso.crl (hash: o2dmxJvaz6BFQ8b2FWjfTS2I+Y2F1U9K/sbxRXf7XhU=)
2: NcvqQEHq7t81xbxiR-3wQxKy6sk.asa (hash: T6uf6iqamEiscrQRCCpxXU6qFtuegEXN91mKxUf+/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:f2:e0:47:1b:7d:cb:61:da:9a:8e:2f:72:e5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2643923e773eb270492aecc8da15c2e5ca57c2ca
Validity
Not Before: Apr 21 19:01:09 2026 GMT
Not After : Apr 22 19:01:09 2026 GMT
Subject: CN=793d180a513df17cb42f49fd4d7767a421b337fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:2b:e9:b5:0d:00:18:6c:37:97:8e:a6:7d:
ed:9e:09:a7:11:2b:66:40:1e:b1:09:9e:e7:07:47:
c8:1d:38:12:72:f9:d0:e5:5b:dc:4e:9f:d4:fc:54:
57:33:5e:62:6f:c0:33:f7:02:fc:dd:1e:6b:5a:c7:
0a:a2:d0:c6:21:f7:27:08:fd:2d:44:98:d6:07:74:
81:fb:da:a7:e7:c8:7a:77:42:b7:13:97:d5:14:cd:
fd:bc:9a:23:b0:cf:e0:8e:19:b4:04:b3:7b:b6:86:
db:bd:b4:be:e7:b5:9b:4b:ec:83:6a:5a:56:b4:2a:
d4:a6:b3:78:66:14:c0:1e:4c:32:a8:a9:96:5c:3d:
0a:42:c1:f8:c8:5a:ae:cf:93:86:21:7f:fe:57:11:
ae:9c:3e:f8:f4:b8:69:fc:85:1d:d6:fd:e4:25:71:
b4:33:fa:20:7a:65:99:e0:07:62:cb:53:cc:04:db:
6c:13:d5:c7:26:01:de:4e:5f:d3:cd:93:69:49:7b:
ff:03:3c:97:bb:a3:ea:4d:51:49:83:45:b7:aa:aa:
88:ac:be:09:47:53:98:e9:f1:e2:99:bd:94:cd:0c:
fb:a8:1d:8b:26:d3:b7:b1:b2:38:eb:13:c6:05:be:
d5:49:f6:c1:12:9a:c7:6b:2c:0f:16:ba:f1:cd:f9:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:18:0A:51:3D:F1:7C:B4:2F:49:FD:4D:77:67:A4:21:B3:37:FE
X509v3 Authority Key Identifier:
keyid:26:43:92:3E:77:3E:B2:70:49:2A:EC:C8:DA:15:C2:E5:CA:57:C2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkOSPnc-snBJKuzI2hXC5cpXwso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0631a7-416c-41be-8e45-78c37c0b0d97/1/JkOSPnc-snBJKuzI2hXC5cpXwso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:98:ca:34:a9:f2:6e:2c:d3:b0:5f:98:56:bb:ab:52:e9:cf:
ff:be:d7:7c:0e:2c:ae:20:c8:7e:e5:0f:a2:05:e9:37:be:24:
7f:27:2d:cd:c5:a3:44:ed:6e:5c:0d:fb:ea:4c:df:0e:0b:eb:
a0:04:7a:d5:4b:27:2a:1d:e0:d2:a0:42:3d:57:95:75:ba:6d:
bb:f1:75:88:61:ab:d0:88:df:dd:de:4c:ef:a0:86:25:5c:cc:
4c:ea:63:9d:c4:d6:4b:c2:be:5d:4d:af:67:db:91:80:07:02:
6d:b5:e3:f5:d8:a4:af:47:39:e7:ed:4d:b3:b1:42:f6:a7:f7:
b5:40:00:b5:ba:30:e5:1d:1a:62:e2:5f:32:3c:86:e6:8f:57:
48:22:3f:ea:7a:de:8b:d2:52:b4:5c:04:d6:b2:7f:4e:a8:8d:
62:91:fd:85:ef:d1:30:4c:29:2a:cf:13:e9:74:78:d6:9b:ea:
4c:43:4b:f8:96:db:bd:d3:8f:6a:2d:fd:bb:a7:c2:99:2a:29:
3f:6b:26:0a:92:ed:bc:1b:af:b7:30:00:6d:32:94:15:b7:74:
4a:a7:b4:80:d5:9f:4d:14:ff:87:da:12:b3:e3:f9:15:2e:e1:
8f:53:4a:21:46:15:92:8c:8b:5f:f8:76:c2:52:e2:e4:4a:37:
44:fc:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:56:27 2026 by rpki-client