Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: HzGAAe7EK3MdY8hROV56umsE2xXNeli3I/T0w9o0xPE=
Subject key identifier: CE:A5:F9:AA:CE:CE:99:4F:F8:99:5F:43:42:D6:3F:A9:07:BA:5A:24
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019DCDF4DB79FDA6E880C4627A3CCDD7D800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 16B9
Signing time: Mon 27 Apr 2026 08:01:09 +0000
Manifest this update: Mon 27 Apr 2026 08:01:09 +0000
Manifest next update: Tue 28 Apr 2026 08:01:09 +0000
Files and hashes: 1: 5tyTgc_srf_03kELs6a4U2s2DWk.roa (hash: wbWsBOeJNFN6rAIBpjdQWOFJx9S5x9ucHlt9PYYje98=)
2: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 0nWIlFZgXCJ2bJqWwHoa1H3edzsnPOKimOpe3+/j3ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:db:79:fd:a6:e8:80:c4:62:7a:3c:cd:d7:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Apr 27 08:01:09 2026 GMT
Not After : Apr 28 08:01:09 2026 GMT
Subject: CN=cea5f9aacece994ff8995f4342d63fa907ba5a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:23:6d:3d:52:75:c2:02:b5:5f:ec:2c:e9:
7d:43:6e:d3:5d:dd:bd:b5:48:12:b8:4a:7d:43:d6:
2d:b5:05:77:0a:c8:c9:da:22:50:80:5f:a0:ac:45:
16:e2:84:60:90:c5:20:53:c0:1f:72:0a:34:34:f6:
ed:b3:9f:51:82:96:6f:64:5c:a0:de:4b:34:cf:8c:
da:73:57:62:0b:d8:99:81:85:70:c7:f4:50:9e:98:
a0:5b:62:38:8d:63:9d:e1:06:74:be:11:14:ce:3b:
60:13:e9:18:9c:79:99:26:c7:3f:c2:bc:64:76:74:
a7:9e:89:30:51:8a:7c:31:a6:40:8c:bb:88:1d:5c:
c2:72:45:e7:f6:2a:9b:43:11:b6:ed:84:9d:42:31:
f4:82:0e:62:45:60:24:6d:12:8b:dc:ea:0a:eb:47:
3c:47:32:f0:0f:62:28:0c:b1:f1:dc:8d:45:39:ce:
4e:68:e3:27:39:7a:c1:7a:a9:23:52:3d:4b:d3:68:
a4:30:78:e2:20:e0:a3:c1:af:d2:f6:89:9d:b0:f5:
0f:28:d8:39:09:9c:96:17:35:14:58:4e:98:6a:96:
83:87:ce:81:92:3e:a8:b1:62:d1:94:e4:f7:de:85:
0a:f4:c1:b6:93:73:7f:e0:5e:23:5a:86:47:5f:6c:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:F9:AA:CE:CE:99:4F:F8:99:5F:43:42:D6:3F:A9:07:BA:5A:24
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:49:d7:af:a9:4e:28:7f:d2:de:44:b3:52:2e:62:6b:da:6b:
f6:71:5c:d0:62:6d:8f:5c:ef:59:f3:25:39:d9:8b:07:8e:50:
ff:1b:7b:b5:35:42:2a:eb:6a:fa:ef:53:dc:f4:e4:4a:27:88:
eb:3e:94:fd:e4:32:69:e6:dc:4f:6c:8e:4f:62:6b:23:e6:c8:
d6:3f:8a:4d:e2:11:5d:a0:e9:f1:2d:97:22:55:1d:bd:98:1c:
cd:68:0c:32:3e:8b:66:3f:d8:fb:c3:7e:6a:6f:c9:ef:9c:d1:
68:23:19:69:a7:46:90:51:e2:e1:f6:a6:ba:61:69:59:d4:db:
8b:42:22:cf:9e:77:9f:cb:04:dc:72:69:be:91:22:87:32:ed:
e2:74:c8:80:39:54:09:2b:b8:6e:9b:0f:da:df:75:b7:92:8d:
4a:ef:3b:d1:fd:fa:dc:52:03:bc:13:f2:3d:cf:e9:e1:49:43:
cf:30:3a:f7:4b:61:d5:40:95:7e:84:20:37:6f:6c:29:6d:b7:
db:85:86:dd:04:f0:a7:2c:ec:c8:04:e1:2c:03:43:b7:9a:f5:
cd:5b:11:bb:0b:12:8b:6d:54:70:57:06:5a:59:fa:23:e8:c5:
65:20:ff:e9:ec:87:9d:ec:2b:7e:84:c9:ec:fe:a3:c0:1f:c2:
a7:f3:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:06:08 2026 by rpki-client