Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: ZaNaNTtMMFzkurY/TAI7GcaQZ0rt95mEGcJ9XxBr+II=
Subject key identifier: F2:FF:35:8D:87:3B:7E:F1:1B:91:0F:70:15:4E:4B:6E:A1:9D:09:FB
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 019D386564AE72637DC156A6E4C383577AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: VmvvQ9/ufnYtoTOJF62OLd6vhlCV6zEmsV4MBAtflYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:64:ae:72:63:7d:c1:56:a6:e4:c3:83:57:7a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=f2ff358d873b7ef11b910f70154e4b6ea19d09fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:a1:fa:f8:15:30:92:01:4c:49:b0:25:a3:
73:48:3b:dd:a9:d7:15:14:af:e1:5f:c5:54:56:91:
33:c8:92:89:8b:b7:91:e6:19:73:e8:c4:50:9d:32:
89:68:1c:23:92:15:e6:2b:7c:65:44:bb:97:6b:4f:
f7:fb:76:fc:ab:0e:2e:b6:44:5e:ea:b4:d0:ea:fb:
ce:0f:2e:41:56:88:95:32:eb:ed:95:5f:81:df:98:
28:33:f2:3c:c7:18:f5:df:9d:d0:26:59:f8:0f:e2:
f0:fc:42:87:3f:b4:3c:af:7c:22:6a:32:37:5d:76:
7b:b9:02:3e:aa:f7:45:6a:44:14:24:0b:98:59:6d:
99:42:98:5c:b1:8f:c1:eb:b5:4b:7c:17:91:7f:77:
9b:40:00:1c:c1:f7:2c:9e:04:8e:2e:ba:82:03:57:
d6:c0:d9:77:70:c7:cd:14:49:e3:37:c4:49:07:16:
a9:6a:bd:b2:0b:09:0b:d8:cb:59:27:ff:67:50:49:
19:4a:fc:00:4b:c3:74:43:3d:69:c6:57:db:be:ce:
88:83:76:be:e0:fc:92:45:8c:df:ff:36:b0:24:9f:
cd:5f:1b:1d:6b:af:29:46:c3:d4:e2:81:95:52:f5:
aa:51:3f:bf:07:94:a9:94:3a:c6:8a:d7:3f:3a:42:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:35:8D:87:3B:7E:F1:1B:91:0F:70:15:4E:4B:6E:A1:9D:09:FB
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:43:99:fd:75:c9:87:e8:f5:05:89:7e:d4:89:26:9d:49:
f9:29:61:d3:1b:08:af:c1:a3:f4:73:39:2e:46:0c:5f:fe:1c:
c5:25:79:b8:45:78:89:a3:40:02:51:a1:ba:78:d5:29:7c:36:
69:84:aa:c7:ef:71:b9:3e:eb:31:c1:04:d4:4c:86:d2:ea:e9:
b4:5f:e4:c2:df:87:49:41:08:2c:4e:bb:09:91:f9:1c:8c:68:
bb:55:16:b2:85:0b:eb:fd:1a:88:4f:aa:1f:c0:96:18:3b:84:
76:94:15:8e:8e:37:4b:48:f4:59:95:a0:d5:90:04:61:68:dc:
d1:2f:22:78:37:e5:ef:9c:00:e9:77:17:a8:f0:f3:d6:56:ff:
16:d5:9c:78:fb:fa:2b:cb:46:cf:28:a3:86:17:60:35:15:8e:
5c:49:18:1c:8c:fa:13:61:69:6e:2f:71:50:42:2e:69:78:10:
b1:c1:d8:3d:9d:05:a2:ee:82:63:70:17:de:9d:ea:d1:d1:1f:
01:a1:60:4d:5e:93:d8:04:bf:ec:ab:c1:bb:27:62:3a:7a:05:
95:b1:95:dd:f7:86:66:fd:50:1b:ab:46:f3:eb:b5:d1:53:96:
ae:fa:17:e8:94:99:14:2d:fa:4f:a3:e3:ef:31:1a:a5:fa:a3:
37:ec:f8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:27 2026 by rpki-client