Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: n3FLXkT9/Q0wtOUI3ZK3nukLATud3fuAaf7hP+/MR2o=
Subject key identifier: 15:2C:5A:55:3B:05:6F:2D:51:25:0A:DF:36:A7:1D:C2:7C:06:B4:0D
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019DA89EB62B95F8D014F98AFA29DB050B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 05EA
Signing time: Mon 20 Apr 2026 02:01:06 +0000
Manifest this update: Mon 20 Apr 2026 02:01:06 +0000
Manifest next update: Tue 21 Apr 2026 02:01:06 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: g9KnfEey5MIZlawwEgBF1TLc5QInUZhPaEjcZg1gTkU=)
2: gUQyWeEpQgGbTNbqg5fkirZYaTk.roa (hash: Uag44MrYWD7AlqlTHqDCPjaMLMN6/SqLUtWcxqj+gh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:9e:b6:2b:95:f8:d0:14:f9:8a:fa:29:db:05:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Apr 20 02:01:06 2026 GMT
Not After : Apr 21 02:01:06 2026 GMT
Subject: CN=152c5a553b056f2d51250adf36a71dc27c06b40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:36:92:13:0d:41:9a:0a:fb:ca:ee:7c:a5:
58:09:ed:96:1f:43:21:8a:0a:95:20:d3:48:8a:13:
55:06:b5:b9:5b:3f:df:6f:d1:8f:4c:97:80:35:96:
68:44:7e:53:bd:d8:18:e6:ce:af:5e:f5:42:ba:48:
fe:c2:e4:6b:7a:f8:9f:15:e6:8c:42:b5:2d:1e:58:
f0:9e:68:91:e0:00:d3:be:e8:84:82:60:60:67:5e:
24:89:70:04:7e:10:f2:35:ba:e6:4b:0c:8a:8a:4f:
26:92:6f:09:2f:5c:29:a5:a8:08:50:96:57:ea:40:
08:34:a7:cf:5d:a4:50:3f:53:f9:21:05:14:6a:76:
0e:4f:4c:62:21:92:4e:2e:c7:6c:ed:e6:b4:2a:5d:
f9:6d:5a:d7:fd:f4:d0:0a:83:d3:ad:1a:99:6d:df:
cb:82:3e:5d:9d:ae:c0:64:db:83:0e:0f:ab:ed:ae:
1e:4e:62:5b:0a:d0:33:57:17:d8:b3:59:dc:00:b1:
a3:02:67:58:c1:cb:72:2e:0d:56:e1:c4:15:de:42:
82:57:1a:34:6c:97:79:d6:73:63:4d:3d:36:40:a1:
1a:4c:3c:e0:18:0c:23:87:0f:29:15:44:db:39:3a:
2d:34:1e:fc:03:cb:b9:1c:ad:11:16:d6:63:4b:48:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:5A:55:3B:05:6F:2D:51:25:0A:DF:36:A7:1D:C2:7C:06:B4:0D
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:06:a4:51:a2:eb:c4:9a:2b:b3:67:85:a0:7b:6d:91:0a:a9:
01:47:39:70:21:b6:34:90:94:bf:1d:50:9b:89:f3:45:e0:52:
92:f2:95:fd:ee:17:73:90:e1:72:84:4f:c6:dc:d4:2f:14:64:
6d:2b:56:5a:22:4d:fd:7d:79:06:b7:28:ba:c3:57:6d:88:77:
a0:41:33:70:bc:6a:e9:cb:fe:5e:11:b4:0a:3f:63:8a:89:4b:
66:07:6c:fd:30:b5:80:f2:f9:96:91:97:35:df:d6:e6:74:5c:
c9:d5:ef:3a:f2:7e:1e:ae:a4:37:af:b2:7d:89:a4:52:93:67:
41:90:e7:f0:b7:ad:7b:d1:5c:83:f8:55:8f:85:16:3f:ac:fe:
63:79:e9:7f:d4:00:e9:cf:3c:43:f9:d9:cb:3f:15:f6:17:62:
37:69:f0:b8:93:1f:55:dd:ff:b5:2a:f9:ca:88:ee:1d:56:07:
77:33:92:1c:e8:81:5b:a9:34:6e:07:3b:3e:7d:f2:5e:55:42:
ba:57:31:ab:84:69:bb:fe:81:86:f5:9a:3b:89:38:9a:d3:cd:
94:4e:04:61:4b:9d:b3:ca:e0:3f:78:2c:90:b4:1b:1d:65:30:
94:74:d5:6f:13:03:91:89:de:a0:d5:97:40:37:dd:75:6c:44:
ff:1a:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 06:09:12 2026 by rpki-client