Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: sLDLjPDNDaSsX9OsIGKTUNHkpW3mUZMFYSPrGbILn8k=
Subject key identifier: 24:00:20:72:BB:16:81:A8:3E:40:D1:4A:36:6D:A1:4F:6B:E7:49:76
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019DCD8665CC111467780DBA18B78BF822E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 18DC
Signing time: Mon 27 Apr 2026 06:00:30 +0000
Manifest this update: Mon 27 Apr 2026 06:00:30 +0000
Manifest next update: Tue 28 Apr 2026 06:00:30 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: oxmNz/MveJn/m2n48gn32Lq0Shwh+ketynYsBqMqHmA=)
2: p2IMZfuSyzWUQCvrAkoFeLo46oo.roa (hash: hxar/HLUHEBtlzcjTx3TaCuWIzPYRzZYjjh5egyYeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:65:cc:11:14:67:78:0d:ba:18:b7:8b:f8:22:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Apr 27 06:00:30 2026 GMT
Not After : Apr 28 06:00:30 2026 GMT
Subject: CN=24002072bb1681a83e40d14a366da14f6be74976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:c2:ce:cd:85:cb:34:a9:16:9e:cd:c1:43:
95:80:c2:43:d7:88:9f:56:20:5c:b5:38:02:bc:25:
64:0c:a0:de:1e:ca:f2:f3:40:59:99:a5:89:16:8d:
81:ef:6b:03:ee:48:5a:ee:64:94:5e:07:f5:a4:88:
70:7b:be:c6:a9:07:89:f7:a2:f3:77:80:ba:62:ab:
54:d7:dc:47:6b:0c:12:51:9f:9a:79:d3:fd:33:6a:
d5:34:9f:3f:b6:1b:f4:26:73:9e:74:6f:3e:97:bf:
62:8f:d1:5f:82:93:0e:96:1b:c9:d5:42:43:23:60:
f5:86:4c:6d:40:e0:17:0a:59:49:d7:05:75:be:c9:
b4:b3:88:89:e1:38:21:7c:e2:94:f2:f3:5b:3f:73:
22:50:0e:ab:1a:b3:11:41:17:a1:5f:54:59:54:46:
d9:5c:dc:ea:2f:95:be:8e:9c:e4:20:fc:9e:37:01:
37:04:6a:98:77:aa:f1:3e:82:ef:95:da:91:7d:b5:
7d:9e:1c:ae:ee:3d:50:09:52:ac:8f:8c:bf:06:1c:
2f:69:6b:e0:10:41:2f:cd:a9:fc:c9:75:26:46:61:
1c:df:0d:da:01:9e:af:39:67:6f:e1:0d:a0:aa:e3:
93:19:1d:f5:c8:a7:d8:dc:d1:81:b2:22:b6:03:4e:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:00:20:72:BB:16:81:A8:3E:40:D1:4A:36:6D:A1:4F:6B:E7:49:76
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d0:26:48:0a:1b:4a:1b:2f:e3:fd:f6:77:9c:91:aa:4e:de:
a6:ef:77:9f:1a:45:53:8a:ca:34:1d:66:09:7a:c7:58:32:b3:
89:22:5e:d0:77:7a:2f:ec:f0:87:b8:b3:e9:0c:a5:b9:eb:5d:
0e:2e:65:9f:72:f9:52:e7:b9:8c:51:8c:9d:83:02:9e:e7:dc:
fb:47:27:8a:2a:9d:7e:97:b2:08:a5:31:9e:b4:fa:48:32:20:
05:d4:9e:97:a2:2e:ba:b3:79:8f:cc:68:7d:e2:93:28:ac:98:
a6:8a:e8:d4:d6:b9:b4:28:44:dd:b2:06:c9:d7:ac:1d:81:03:
5e:f3:82:a5:23:c9:18:f9:ef:42:65:ed:93:d4:c8:a8:99:24:
93:04:42:93:36:75:aa:ff:25:27:b9:b5:36:b3:28:d6:8b:77:
84:b3:bd:7b:cb:4a:c4:9e:f7:e1:f2:ea:43:c5:4d:91:34:b9:
c2:ad:ed:49:b4:e6:55:30:87:0a:dd:ca:4a:bc:92:ec:50:fb:
00:aa:d7:9a:a0:ba:3d:cd:98:7f:0f:c3:5e:ea:7c:8e:60:eb:
ab:5d:ec:f2:0d:20:b5:60:d0:17:e5:a1:5f:cc:7e:bb:52:61:
83:64:bc:00:5b:29:ba:8f:f9:e5:a2:34:6f:f3:c6:a9:ac:cd:
84:46:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:55 2026 by rpki-client