Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
File: jQD6bCqG93lmcv_pyE8i2c_KVNo.mft (raw, json)
Hash identifier: sZZkGM7v6U/+IhlxZTTlCg2cWjlssvhs9WLvsrm7uiQ=
Subject key identifier: AC:60:66:E2:D3:A1:BC:A0:CE:86:EE:4D:85:F3:1E:34:2D:E0:BD:D1
Authority key identifier: 8D:00:FA:6C:2A:86:F7:79:66:72:FF:E9:C8:4F:22:D9:CF:CA:54:DA
Certificate issuer: /CN=8d00fa6c2a86f7796672ffe9c84f22d9cfca54da
Certificate serial: 019D3909CABAAE0C18D8F271DFE38F252B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
Manifest number: 33
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: jQD6bCqG93lmcv_pyE8i2c_KVNo.crl (hash: ZO+rwvTjjnJHiu347byrf9e6K7ITaErOqAfp5NaDFwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ca:ba:ae:0c:18:d8:f2:71:df:e3:8f:25:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d00fa6c2a86f7796672ffe9c84f22d9cfca54da
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=ac6066e2d3a1bca0ce86ee4d85f31e342de0bdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:bc:4d:52:24:5d:d8:fb:8a:63:ea:87:b8:
70:93:50:80:30:65:bf:50:c2:df:bd:2e:bd:8f:01:
70:0a:e9:32:2b:9e:60:80:25:85:40:9c:de:08:8a:
9a:de:e5:5f:99:aa:7a:b7:0f:de:75:24:5a:eb:8d:
df:de:c2:ec:46:ae:4b:73:6c:f0:62:e8:b1:fc:ff:
ec:7a:29:4a:83:40:f8:b8:97:69:b8:d3:a5:2c:2b:
2e:26:e7:f6:f4:7d:6d:9b:11:67:f7:96:56:ed:7d:
ab:49:bc:50:33:af:be:41:95:68:f0:65:a1:ed:ce:
cc:a1:5b:d1:55:1e:31:c0:f6:ac:55:29:ea:9a:ec:
05:05:15:fc:2e:f6:e0:b0:8c:ef:81:ef:12:a5:7b:
46:df:17:35:6c:fb:70:d5:d5:f6:4a:a8:93:a0:b1:
3f:21:67:4b:8b:ca:fc:f9:9e:c3:9e:5a:6e:25:c7:
11:8d:fd:1c:f7:bc:b7:9b:64:8e:6b:a4:1a:61:22:
8b:c0:2a:31:0b:6d:5f:9c:db:34:d9:41:39:cd:01:
d7:5c:07:4c:ce:44:e5:76:0b:00:2f:68:95:7f:c1:
bb:bf:10:b0:c1:b3:19:ad:55:5d:30:7e:bf:b9:2e:
1a:3c:3b:0b:bc:3c:7e:ce:8b:5d:a2:79:83:65:fc:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:66:E2:D3:A1:BC:A0:CE:86:EE:4D:85:F3:1E:34:2D:E0:BD:D1
X509v3 Authority Key Identifier:
keyid:8D:00:FA:6C:2A:86:F7:79:66:72:FF:E9:C8:4F:22:D9:CF:CA:54:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:10:ea:e6:c3:3d:7f:e2:e8:fb:6e:3e:85:bf:da:0e:a5:
1d:a4:b1:80:14:22:91:08:5f:ae:68:72:ff:11:26:f1:8a:24:
ee:2f:fe:11:9d:dc:5a:9c:47:63:aa:47:fc:1e:ab:d0:4f:02:
c3:08:0a:c7:c7:a9:fc:39:64:63:f0:4d:55:f9:02:b2:17:d5:
19:f2:8b:fe:49:25:cd:3d:1d:96:49:b2:f1:51:ec:ce:f9:82:
41:cb:15:62:a8:81:3a:97:2b:ec:9a:4d:79:dd:d1:ca:a9:cc:
57:09:b2:fe:5d:b9:6e:ad:c9:39:9a:38:17:7d:de:d2:b1:ab:
c6:60:74:a8:87:95:cc:31:a5:d3:de:45:da:ab:9d:fe:c0:de:
cf:7e:51:16:10:da:47:fe:32:3f:9c:5a:50:46:97:db:b5:f6:
fb:2c:3c:a7:40:37:73:a0:95:b5:bf:1f:db:0f:be:87:ec:b8:
b3:b3:a2:3e:b6:9b:2b:2e:cb:d8:da:20:ca:4d:79:8d:ac:f0:
89:17:2d:7a:9c:44:5f:75:15:e2:a3:ae:a6:9e:7b:70:9a:cd:
05:c8:7c:02:22:8a:e0:55:15:d2:99:52:47:b9:8b:a9:33:1f:
22:13:67:9e:37:a9:e2:9a:2c:c3:43:95:b5:c4:c5:dc:6f:58:
97:c8:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:33 2026 by rpki-client