Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: c9QxhMbotTUorJF/Vtpt3Hom5QypDtZTW3hWva6BJKo=
Subject key identifier: C9:59:40:BB:E7:4D:76:19:AD:1E:0A:C6:ED:C9:EB:B4:21:24:7E:05
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 019D389C5A4BF7D27A2F4A29DC14469E764C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 13C3
Signing time: Sun 29 Mar 2026 08:01:03 +0000
Manifest this update: Sun 29 Mar 2026 08:01:03 +0000
Manifest next update: Mon 30 Mar 2026 08:01:03 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: iMJM0hWeeaTN3b1NBJVCOfIKbFhZmciJQ1qo061vQVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5a:4b:f7:d2:7a:2f:4a:29:dc:14:46:9e:76:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Mar 29 08:01:03 2026 GMT
Not After : Mar 30 08:01:03 2026 GMT
Subject: CN=c95940bbe74d7619ad1e0ac6edc9ebb421247e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:81:dd:a3:eb:76:da:b1:8a:48:5a:1b:a6:
46:98:e7:9a:46:43:d7:41:c8:4f:01:7c:3d:db:1d:
b5:41:de:4d:e6:a1:a7:c7:d5:ee:95:56:39:ef:1e:
0e:ed:58:02:93:30:b7:36:72:20:5b:16:6b:71:ac:
f6:8f:8f:02:7e:68:13:e4:22:fa:44:41:ec:ea:0e:
e7:45:01:b7:f6:e8:42:0b:f0:e5:c0:3e:df:98:b1:
98:0a:c9:59:77:77:4c:35:39:7e:8c:77:35:ec:1c:
21:a7:ba:0b:51:4d:02:b0:96:70:cc:47:4a:1c:5b:
a5:0a:61:c4:39:63:62:23:c8:9b:2f:9d:97:9c:41:
4d:bd:51:14:5c:04:c7:55:f2:92:90:77:85:46:e5:
e1:b2:d4:94:dc:1d:e1:68:b6:d7:2b:d0:e6:6f:c8:
91:a2:17:6d:ae:df:12:56:c2:d4:0d:fe:84:87:92:
18:cd:12:7d:80:a3:2f:23:48:2b:18:79:13:d3:0b:
31:64:65:b5:92:43:39:90:d7:43:72:e9:05:0e:79:
9f:b9:ee:c7:64:0e:cf:05:99:94:26:25:53:04:c9:
f3:73:24:1c:af:ea:e7:1a:2e:2e:a6:6c:d8:71:40:
b4:0c:ab:0a:33:8b:9f:9a:0f:3c:c0:2e:d1:55:18:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:40:BB:E7:4D:76:19:AD:1E:0A:C6:ED:C9:EB:B4:21:24:7E:05
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6b:16:1d:eb:2e:13:6d:d3:48:af:82:d0:72:8e:a3:f6:ed:
ea:59:69:79:9a:e6:c0:4b:55:9f:2f:ab:75:f3:ab:30:85:23:
50:d2:e3:98:e4:32:24:8d:7f:3f:97:41:1f:43:a1:3e:d9:7a:
d2:4c:96:b8:c0:02:1a:6f:20:f6:d4:9e:a8:01:ad:b6:37:ac:
a9:37:d3:03:c8:58:69:8f:96:93:49:60:32:a3:ae:75:e3:24:
b9:b0:65:c0:1c:bb:e3:8a:67:38:ce:54:92:0d:1f:11:9c:c9:
2a:fd:28:d9:97:3b:64:12:97:4a:f2:e7:7e:31:42:58:1a:98:
01:3e:56:5d:43:92:1a:d9:a8:9f:f7:19:bf:6b:9b:54:9e:93:
61:a8:2e:56:cd:c4:48:77:54:e4:c0:b5:ad:7d:ee:c5:14:bb:
ae:07:15:2f:8a:6a:36:63:28:67:06:68:7e:43:11:56:02:87:
8f:35:b1:c3:d4:d1:38:dc:7e:1e:9a:4f:8a:c2:77:cc:68:d9:
e8:bb:78:99:92:16:46:6b:a2:c0:a3:3e:89:a8:1b:e8:b6:b5:
4d:bd:66:61:17:9c:94:2a:1d:a4:b5:ec:2d:98:cf:93:6c:44:
97:a7:db:6c:1b:b3:6b:e2:9a:19:d3:9d:0e:a2:14:40:f8:a3:
94:3c:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:52 2026 by rpki-client