Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: iPh651qKVZOP9oChk+ViHOpZV51dgshvp8nk2ooMwUo=
Subject key identifier: 5E:DF:A4:14:22:E2:0C:C5:96:92:3D:C5:BB:6F:48:83:DD:97:9F:54
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 019D38663744FCFA0EA9F76EB6A890503E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 0A25
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: F2jRAc10E0c0Raq7Jop8jrKwj2UzP3EkuqEpKnmSWCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:37:44:fc:fa:0e:a9:f7:6e:b6:a8:90:50:3e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=5edfa41422e20cc596923dc5bb6f4883dd979f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:e0:54:42:8c:2d:bd:59:6c:b4:7c:ed:9d:
fc:85:ff:5a:72:7a:a0:dc:d3:83:a5:6e:18:87:fa:
d5:53:ae:78:80:75:ce:c8:51:a8:cc:1d:19:90:82:
c7:27:7a:18:95:fd:92:ac:b3:6e:ca:cd:87:d9:8f:
05:8b:a4:2a:e9:d6:af:59:2f:ee:c8:65:9b:b3:5a:
5e:d8:7c:a4:43:e0:38:e8:5b:1c:e9:a0:26:5d:b8:
1c:27:30:3f:7d:52:be:83:9f:8b:5c:35:91:95:01:
c2:53:9b:b9:46:5b:5e:b6:1a:a9:40:8a:9a:41:83:
40:e7:bc:ce:c1:cc:a5:07:e3:52:50:63:3e:34:51:
44:3e:e5:83:87:db:39:54:7c:12:ce:61:95:e1:ba:
56:cd:4a:fd:f5:ab:98:d8:3a:42:0b:75:a7:53:14:
8c:a6:48:38:da:ca:9f:9a:c6:2c:2d:63:6f:ad:a0:
df:61:81:8c:d5:a4:14:24:6c:b1:d2:45:d7:d7:da:
6f:5c:24:5b:a4:5f:6e:eb:83:63:8b:c7:7a:07:ce:
9c:5c:19:e8:a9:75:f9:56:67:6a:61:24:74:ad:55:
e6:07:1a:ce:5f:61:21:f9:4a:6f:83:17:35:5e:38:
ff:20:fd:d7:bf:0d:ee:ad:e8:42:60:6a:c6:14:6d:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DF:A4:14:22:E2:0C:C5:96:92:3D:C5:BB:6F:48:83:DD:97:9F:54
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e7:00:6b:a3:5a:18:81:4f:4d:24:2a:fe:b6:57:d3:cd:75:
fe:32:1f:60:2a:33:ba:04:ec:bf:c9:a9:a4:29:c8:8b:ec:d9:
2d:49:58:19:2a:26:e9:7e:ba:a9:d3:9e:12:81:7d:aa:6a:4e:
d1:57:77:7f:50:dc:06:f0:fd:4d:b7:8a:f1:f7:f6:60:85:a2:
3f:5e:77:f6:f9:39:b0:83:84:ba:b9:3c:6d:e3:34:25:04:27:
a5:9e:aa:df:c7:d2:44:10:cc:e8:47:f1:1f:31:8a:b5:d8:17:
b6:11:51:f2:74:73:02:18:5a:15:37:51:a7:64:4a:0e:60:88:
ee:95:f8:b5:cc:45:20:ad:65:ca:05:50:3d:f0:b6:24:dd:7e:
49:4c:cc:83:49:9c:16:da:df:05:35:0e:1f:d8:60:0b:b5:5a:
75:4b:c2:17:3b:a2:02:70:8b:ed:62:4e:6d:bf:9f:99:61:1d:
c8:ef:6b:dc:93:af:42:87:b4:f9:44:b0:86:64:5f:e6:bf:d6:
95:95:e2:a7:24:e8:6e:98:3d:5f:c2:5e:8a:02:c0:f3:d8:bc:
e9:3b:35:34:03:a9:c7:cb:96:7e:55:00:12:ca:d7:63:65:7b:
da:2d:47:b4:cc:3e:26:cc:3b:d7:4e:14:2a:48:53:b5:03:fa:
4b:27:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:26 2026 by rpki-client