Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier: Cvr802xp2LkTw0W3Vqhg5MpihrAdEoQuapKSi4A3IQQ=
Subject key identifier: 43:94:24:80:6E:06:05:F6:35:49:67:E4:B6:E4:71:1E:6E:0B:85:4E
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial: 019D382E4133D258EEA1A6B093D6B6281D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number: 0B6F
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: Kh2+GZpytNT/tZfCGVjqbRuAT6qG1oX/9STVyTtVvwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:41:33:d2:58:ee:a1:a6:b0:93:d6:b6:28:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=439424806e0605f6354967e4b6e4711e6e0b854e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:25:3f:f7:d5:4a:8f:9e:aa:bf:30:a1:03:
54:5d:a2:c4:53:20:a9:46:0e:b1:be:ab:13:72:a2:
71:10:ec:58:ef:f4:e7:f7:ad:16:4c:21:5e:e9:6f:
93:10:9a:1a:68:45:b0:a7:ce:1b:b4:92:f1:b2:0f:
e6:cd:1a:3d:f6:f5:33:fa:c7:a5:e1:fe:69:5a:ae:
e8:f8:32:a3:22:06:02:31:88:62:85:9f:ba:b4:f0:
49:65:cd:3c:db:8c:e2:e8:db:dc:c9:ee:96:08:25:
33:01:d1:eb:03:ad:1a:79:93:57:d4:58:a9:01:3e:
1e:15:c1:32:f0:c4:dd:aa:8d:52:18:af:61:3b:5a:
dd:63:ca:db:1c:3f:66:e4:2c:6f:d7:db:77:db:c1:
b9:55:a1:bb:a7:0e:d7:d6:63:6c:38:fb:48:fa:7f:
f6:f5:12:a0:4d:ef:98:5b:c6:b6:86:7b:c3:a7:7a:
6a:58:3b:d9:b5:28:e9:71:28:d4:92:98:f8:2c:ed:
f0:14:c5:1e:e2:d8:7a:05:7a:77:d8:4a:6d:98:19:
d2:19:ba:ac:23:87:d0:10:fb:7e:d5:f4:13:9d:60:
24:68:3b:43:75:13:02:07:9f:65:9e:00:f8:e5:c1:
4b:41:00:3a:1e:99:3e:93:12:ae:88:04:5d:dd:55:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:94:24:80:6E:06:05:F6:35:49:67:E4:B6:E4:71:1E:6E:0B:85:4E
X509v3 Authority Key Identifier:
keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:85:01:35:c8:75:b1:8a:ae:a2:02:0e:b7:78:ea:15:29:6f:
17:e5:55:7a:41:57:23:73:95:80:49:bd:81:c1:ed:ca:7d:c4:
36:49:cb:91:74:2f:f8:17:93:0c:20:e1:23:a3:bf:63:03:13:
cc:62:65:cc:d3:85:cc:af:8d:2d:f3:fb:a7:81:a8:21:09:13:
69:c7:8a:d5:69:ad:b9:8f:65:1f:06:12:a6:84:f2:bf:0d:d1:
d0:76:f2:13:05:35:38:0e:ed:97:c2:50:5e:94:8f:1b:0e:05:
e8:fc:e8:87:58:73:52:be:78:11:92:f2:04:1d:0d:f5:5c:af:
49:9b:d3:86:60:cd:13:ec:28:1c:44:38:d0:1a:5c:28:1d:8b:
67:31:f7:c1:16:81:5f:f8:58:4f:12:73:ba:62:88:2d:84:11:
0e:99:4d:25:76:ba:4d:91:19:8b:87:1f:6c:a0:bc:3b:66:58:
46:d5:41:d7:ac:df:87:24:2c:63:66:ed:3d:f4:d2:49:8d:51:
1e:09:03:bc:2d:cd:62:f2:22:d3:9b:03:a1:b0:85:e5:de:50:
21:69:cf:30:dd:46:4d:60:f9:9f:79:31:a1:1a:ff:20:7a:64:
52:05:3c:27:31:ce:61:0f:3b:d3:3e:6e:78:8b:7f:f6:18:8a:
9c:48:37:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:19 2026 by rpki-client