Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: fSC5QASksqSxK2mEzn/9IBll5Ni0xd3a1bUnsqXRV3M=
Subject key identifier: 5B:85:FD:3B:64:BB:CA:C9:20:39:35:89:08:7B:9B:AE:EC:2C:91:72
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 019D371B3DC5891389241CE06238D083F3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 01:00:25 +0000
Manifest this update: Sun 29 Mar 2026 01:00:25 +0000
Manifest next update: Mon 30 Mar 2026 01:00:25 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: uarNIRIXe9DyUQXInJ32XyvYT80Fqdo+MUpOt4tLWGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3d:c5:89:13:89:24:1c:e0:62:38:d0:83:f3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Mar 29 01:00:25 2026 GMT
Not After : Mar 30 01:00:25 2026 GMT
Subject: CN=5b85fd3b64bbcac920393589087b9baeec2c9172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:62:4d:ab:b0:5b:4e:43:2e:b6:77:d5:6f:
b8:dd:e1:e7:1a:5f:39:d5:73:bf:dc:01:5e:52:3c:
55:6f:33:2c:8d:fa:7c:7c:a6:0e:06:0e:35:5a:61:
eb:30:18:b6:ef:87:02:80:4f:ff:aa:09:d7:6b:8c:
b4:79:3c:17:89:91:e7:57:51:1b:c2:56:57:cc:c1:
30:2d:c9:e1:9a:50:4b:7f:04:a5:85:8a:fb:69:e6:
b4:14:4c:c6:c3:6e:e8:67:9f:ca:5f:68:ed:5d:8d:
9d:20:31:79:d2:93:eb:a0:e5:78:f5:e4:40:17:4d:
63:f7:78:19:58:9a:8d:c0:6a:c2:e2:94:94:af:4d:
f6:d3:df:e7:84:dd:73:83:5c:71:01:aa:bc:4f:c8:
fd:56:42:2a:51:0e:43:13:50:ad:c2:60:1a:1b:90:
df:d2:7a:b2:4e:32:68:6c:ae:bd:0c:ce:99:fb:65:
b8:e1:f7:d6:ba:34:ca:52:ea:9b:ea:6a:4d:fe:bb:
2c:be:95:d4:f6:3f:f6:df:f8:1b:1f:41:82:28:57:
5e:7b:50:4d:eb:fe:6d:c1:ba:68:48:b5:35:ef:09:
1d:df:f6:ec:e6:8b:30:63:4c:fd:ba:f5:80:0f:7d:
88:83:6a:81:4e:5a:9c:af:fa:3e:f9:12:49:33:59:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:FD:3B:64:BB:CA:C9:20:39:35:89:08:7B:9B:AE:EC:2C:91:72
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:ae:6f:9b:d8:15:4f:48:7a:07:7e:d5:98:e2:ec:4a:36:
a4:ae:3b:d6:68:39:47:4d:41:37:b5:5e:e9:8e:3e:83:2f:ba:
48:87:7c:28:93:ab:e6:0f:ba:e1:11:ff:3d:b3:fc:68:83:13:
59:9a:4c:90:e6:6f:fe:46:fc:80:25:4a:1c:00:be:ce:ab:78:
75:f8:d9:72:99:bb:98:2f:f2:26:66:67:fd:9a:43:99:a2:41:
e5:64:7c:f5:50:e7:88:e8:31:12:c6:a5:6b:16:5f:b1:51:d1:
48:98:95:89:38:9b:9c:07:8e:8b:e7:9d:c3:55:06:33:86:2a:
e5:ea:c5:0c:ae:f0:dd:2b:ad:23:2d:9b:0e:1e:14:5e:c8:88:
b8:f8:67:b7:cd:d5:c1:df:45:a4:ec:3a:6d:fe:fd:62:31:ce:
e8:06:40:17:03:11:ca:40:36:21:c0:70:af:63:df:5d:2a:1e:
30:25:3d:a6:61:3a:f4:ae:4d:9e:59:fa:19:38:d0:ce:ca:02:
2b:c4:ee:11:b6:2c:c5:b1:ff:4d:39:71:cf:64:e8:4f:e6:4c:
30:df:19:54:90:fc:52:ef:b5:07:73:b1:78:d4:95:69:64:10:
43:8a:49:3f:a5:cf:cd:eb:70:d0:5d:7f:96:89:e0:0d:c0:02:
8e:ec:af:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Gz3FiROJJBzgYjjQg/OpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGE5M2E3MDJmMDNkNjAzNGIwMmM0NjM3MjEyYTc0M2E0
NzJjOGEwHhcNMjYwMzI5MDEwMDI1WhcNMjYwMzMwMDEwMDI1WjAzMTEwLwYDVQQD
Eyg1Yjg1ZmQzYjY0YmJjYWM5MjAzOTM1ODkwODdiOWJhZWVjMmM5MTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNFiTauwW05DLrZ31W+43eHnGl85
1XO/3AFeUjxVbzMsjfp8fKYOBg41WmHrMBi274cCgE//qgnXa4y0eTwXiZHnV1Eb
wlZXzMEwLcnhmlBLfwSlhYr7aea0FEzGw27oZ5/KX2jtXY2dIDF50pProOV49eRA
F01j93gZWJqNwGrC4pSUr03209/nhN1zg1xxAaq8T8j9VkIqUQ5DE1CtwmAaG5Df
0nqyTjJobK69DM6Z+2W44ffWujTKUuqb6mpN/rssvpXU9j/23/gbH0GCKFdee1BN
6/5twbpoSLU17wkd3/bs5oswY0z9uvWAD32Ig2qBTlqcr/o++RJJM1kLcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuF/Ttku8rJIDk1iQh7m67sLJFyMB8GA1UdIwQY
MBaAFIzak6cC8D1gNLAsRjchKnQ6RyyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAt
YTQ2NjFlZTNjOWE2LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAtYTQ2NjFlZTNjOWE2
LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsWub5vY
FU9Iegd+1Zji7Eo2pK471mg5R01BN7Ve6Y4+gy+6SId8KJOr5g+64RH/PbP8aIMT
WZpMkOZv/kb8gCVKHAC+zqt4dfjZcpm7mC/yJmZn/ZpDmaJB5WR89VDniOgxEsal
axZfsVHRSJiViTibnAeOi+edw1UGM4Yq5erFDK7w3SutIy2bDh4UXsiIuPhnt83V
wd9FpOw6bf79YjHO6AZAFwMRykA2IcBwr2PfXSoeMCU9pmE69K5Nnln6GTjQzsoC
K8TuEbYsxbH/TTlxz2ToT+ZMMN8ZVJD8Uu+1B3OxeNSVaWQQQ4pJP6XPzetw0F1/
longDcACjuyvaQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:47 2026 by rpki-client