Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
File: Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft (raw, json)
Hash identifier: s3MYL52XzOuK8XiaxagCjMYUNKFfmut72ha6O31yDis=
Subject key identifier: 37:FB:61:69:B0:61:7F:F6:47:32:9E:AF:50:A3:65:C2:A5:1D:31:CF
Authority key identifier: 25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF
Certificate issuer: /CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
Certificate serial: 019D39AEC0091276ACFE632DF7C420AA55E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
Manifest number: 017E
Signing time: Sun 29 Mar 2026 13:00:46 +0000
Manifest this update: Sun 29 Mar 2026 13:00:46 +0000
Manifest next update: Mon 30 Mar 2026 13:00:46 +0000
Files and hashes: 1: Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl (hash: H9me2sLsYo99LJYDVrOFjyeKy8wpqEKGw3cCUvkgOeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:c0:09:12:76:ac:fe:63:2d:f7:c4:20:aa:55:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e76be86d59d4a215ac6a8455dbf10ae80adedf
Validity
Not Before: Mar 29 13:00:46 2026 GMT
Not After : Mar 30 13:00:46 2026 GMT
Subject: CN=37fb6169b0617ff647329eaf50a365c2a51d31cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:d6:4b:18:2a:55:05:eb:87:b3:75:bb:fd:
92:e9:94:b9:8a:2e:2e:3d:89:2e:2f:2f:f6:ae:2a:
79:2d:56:f9:bb:22:93:02:7d:14:4e:b9:fe:31:5e:
cc:42:e8:67:40:79:cd:04:6e:e4:5f:41:31:b1:0b:
52:97:06:a3:88:8d:5c:c6:ff:10:e2:9f:b1:91:36:
5f:fe:30:47:7c:36:dc:f3:92:ce:ed:ea:7b:6b:b6:
38:9c:ff:37:c7:d9:7b:ba:25:1c:9b:df:6b:43:e8:
2f:ff:2e:38:62:84:a6:3a:e6:13:40:17:fe:a1:0e:
7b:f8:19:31:77:23:8b:89:43:bc:41:c9:34:9d:34:
ab:6f:aa:54:23:60:b1:68:22:e9:f6:86:d1:3c:d9:
85:b6:79:76:af:5b:47:3d:6a:f9:9c:38:79:f9:ef:
4e:8b:a4:c0:68:73:24:3c:9e:71:59:09:ec:3f:33:
d8:88:57:98:49:fd:37:da:3b:5c:7c:3f:7f:6a:83:
c4:9b:36:30:43:3d:c1:33:48:c0:c0:2c:bc:43:d0:
af:d9:31:19:bc:1d:2a:cc:cc:61:b7:b0:a5:b3:d1:
0e:23:e1:11:02:47:e1:6b:cb:a2:45:7e:e5:5a:db:
d5:e7:1d:cc:ea:7c:b6:61:e0:50:0d:9f:32:85:1d:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FB:61:69:B0:61:7F:F6:47:32:9E:AF:50:A3:65:C2:A5:1D:31:CF
X509v3 Authority Key Identifier:
keyid:25:E7:6B:E8:6D:59:D4:A2:15:AC:6A:84:55:DB:F1:0A:E8:0A:DE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jedr6G1Z1KIVrGqEVdvxCugK3t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/fae2ba-651b-45a8-90fc-c461bf651c9a/1/Jedr6G1Z1KIVrGqEVdvxCugK3t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5c:b1:d5:b8:47:0e:1b:9e:37:89:b1:b9:33:aa:56:0a:1f:
8c:df:69:fe:d6:c3:a7:1c:47:c9:d2:7b:77:7c:20:e3:d1:f4:
13:f7:6b:a9:2b:b4:de:52:6a:e6:df:5f:32:6e:70:2f:cf:3d:
5e:73:b9:0f:95:4e:d1:b8:37:14:dd:76:b4:f2:fa:36:ca:6b:
a1:de:14:4b:90:82:81:6b:aa:52:63:c7:47:47:a1:54:23:56:
2c:7c:89:6e:98:60:29:42:1b:c3:49:a6:26:22:5d:32:64:87:
26:d1:e6:f7:34:0e:f3:2d:d6:11:50:a9:bd:c1:09:72:bb:0b:
78:84:0a:46:90:16:0f:ac:a6:d1:04:e5:30:c6:9b:1f:85:38:
95:b5:ed:1f:2a:1d:cb:1c:27:08:f0:74:7f:1c:31:a4:04:51:
43:ed:be:db:4f:8b:69:b4:da:a0:e2:b6:02:92:8e:3c:89:e0:
75:6a:d0:3d:2d:bd:ed:b6:0e:5a:4e:d4:7e:da:24:35:66:91:
71:0c:6b:5e:cd:00:eb:6f:82:e4:23:86:31:cc:7d:f0:3d:8b:
48:ec:03:c4:98:1d:a5:3f:60:1d:da:ae:8e:d5:1d:1b:e1:f9:
e1:3e:c5:a8:82:45:58:7a:bc:79:84:48:e5:cc:af:d6:c2:7d:
d5:15:73:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:12:05 2026 by rpki-client