Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: phHcFJvH0tITyDG/WeiIcv8BXRualim4ApXAjEMa+Ow=
Subject key identifier: 0A:DE:B2:60:A6:C8:FA:90:AF:5C:A0:97:9B:94:54:14:49:C7:65:18
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 019DD01A022CB48320E28C9E75B01E2730F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 15B5
Signing time: Mon 27 Apr 2026 18:00:58 +0000
Manifest this update: Mon 27 Apr 2026 18:00:58 +0000
Manifest next update: Tue 28 Apr 2026 18:00:58 +0000
Files and hashes: 1: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: ffD9lHNcNo0VZ1EJXuDGzRJpee9EPOb9ex8t+uTB2bY=)
2: M2jHykXP5tshdup3cmW0BBbfpFc.roa (hash: GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:02:2c:b4:83:20:e2:8c:9e:75:b0:1e:27:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Apr 27 18:00:58 2026 GMT
Not After : Apr 28 18:00:58 2026 GMT
Subject: CN=0adeb260a6c8fa90af5ca0979b94541449c76518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:32:ea:37:4b:52:70:53:de:7f:75:32:1d:
2c:db:7c:5f:be:44:bf:0c:8b:a5:c8:47:06:20:52:
c0:78:bd:0a:6b:14:e7:be:7d:32:bb:b5:81:03:24:
ff:a7:1a:58:92:1e:8b:f5:17:fb:15:31:c5:5f:a3:
68:b7:7e:68:06:5e:aa:c8:16:98:f5:ff:b1:cd:4c:
c2:86:0d:0a:b0:67:87:03:ad:26:3e:2d:1e:9d:6c:
31:3e:63:4a:21:25:3f:b6:a1:0a:c7:97:b3:60:19:
76:cb:75:d6:b0:26:fa:a7:5f:7e:18:70:22:37:b2:
00:1f:50:d6:94:ba:07:0a:77:36:b8:ce:60:b5:80:
09:88:64:d0:da:2b:f4:c4:09:8a:d5:f0:a3:0c:13:
8e:38:0a:5b:b0:d1:19:d8:00:3f:79:a0:b1:be:5a:
ae:4b:48:01:f4:f7:38:59:3e:77:17:a4:00:d9:36:
72:74:39:d7:e3:91:ee:26:92:ea:8f:8e:25:98:ff:
26:15:8d:f6:15:b5:06:40:83:72:fd:4b:aa:62:b2:
72:45:cb:e1:0d:16:7f:0a:11:2b:d6:ce:1e:89:b6:
1e:2f:77:11:39:46:b0:b4:2a:eb:f9:0f:7e:45:9b:
c5:84:10:17:64:e3:1c:8b:5d:f5:16:53:9d:62:ac:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:B2:60:A6:C8:FA:90:AF:5C:A0:97:9B:94:54:14:49:C7:65:18
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ad:c9:39:8d:8e:42:64:49:da:9e:bd:23:78:05:fb:4f:8b:
12:a4:e6:5e:7a:6c:c1:85:42:37:da:28:98:c5:a8:cc:36:3e:
dc:83:bf:17:29:cd:0f:63:ab:20:e3:ea:95:fd:16:cc:36:d7:
5c:98:56:90:9f:68:7c:f5:c5:59:78:bf:03:92:02:fd:09:df:
1f:73:35:61:b5:ee:98:24:c2:91:e5:f5:ca:89:6d:13:8f:d5:
63:77:bd:08:7d:37:7b:b7:90:7e:d6:8e:17:b7:9c:34:3d:9e:
1b:25:f2:03:0e:e9:97:70:46:9f:3e:e1:15:2b:39:a9:a0:3c:
bd:37:49:ab:50:7f:29:0d:d5:cd:64:2a:ba:e8:8a:0f:76:82:
2c:9d:36:b9:2a:85:bf:64:ea:b8:33:51:65:99:4e:5b:d3:89:
8d:84:3b:55:b9:ca:33:51:d3:a6:d7:87:f2:25:db:94:92:2a:
5d:59:bb:64:6f:f2:7a:e4:35:ef:90:e3:bd:40:69:6b:f5:08:
66:69:5d:7f:61:3c:52:03:61:bb:ac:30:3b:6f:7f:44:4a:99:
08:2c:b2:77:35:69:f8:51:93:99:5c:8c:2d:85:e0:b3:26:c3:
d0:34:3a:12:25:c2:2f:b9:97:e7:8b:3b:4d:a9:9e:70:f0:53:
71:a4:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:23:04 2026 by rpki-client