Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: vk8zHw4sypjZ7PRG5SJbnFFnBL6PS5fz6fgi0Lf68yE=
Subject key identifier: 68:19:C9:A3:27:A1:B5:A5:4E:F8:38:3D:7B:84:2D:1B:35:88:BF:D7
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 019D378986A8A471F3ACE69B11BA8D406766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 11BF
Signing time: Sun 29 Mar 2026 03:00:52 +0000
Manifest this update: Sun 29 Mar 2026 03:00:52 +0000
Manifest next update: Mon 30 Mar 2026 03:00:52 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: qqEE+0bcSwiGbrBlOHZEEHlDkHcfl+5IMxwbFrJW4M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:86:a8:a4:71:f3:ac:e6:9b:11:ba:8d:40:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Mar 29 03:00:52 2026 GMT
Not After : Mar 30 03:00:52 2026 GMT
Subject: CN=6819c9a327a1b5a54ef8383d7b842d1b3588bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:06:50:0a:be:c8:13:94:e7:67:47:b4:2d:4a:
c6:46:a8:ae:46:a0:ec:8c:03:99:37:99:30:7b:af:
f0:eb:9a:64:ad:13:84:d5:a3:fa:98:c8:8a:c5:99:
0b:cb:51:93:b4:1c:2f:c8:c4:26:76:83:c3:14:62:
82:8f:bb:c1:8c:d4:44:30:bd:2c:70:4d:da:3d:ce:
a8:10:46:b5:71:47:24:96:f3:25:45:6d:c3:90:22:
42:0d:b4:2f:f9:79:e3:4f:a6:fe:e6:57:9f:38:9a:
70:14:c6:1e:a2:3d:01:99:78:2d:12:e3:0e:17:22:
4d:0d:8b:83:c8:24:a0:41:44:3b:c5:67:25:73:db:
da:9a:13:8f:60:bd:ee:f6:3c:2f:7c:30:a1:49:3a:
24:1f:84:92:1c:33:20:1c:04:35:e5:32:a5:2b:ef:
49:c6:42:1c:15:3c:41:6e:84:b7:de:8c:8a:3c:e5:
bc:60:30:cb:9e:19:e3:cd:e1:31:cf:d0:96:16:34:
b5:42:b9:f7:bb:29:a7:e6:c0:ca:1b:16:1c:d3:d1:
7d:d6:52:c9:43:c0:c9:10:91:31:07:d2:85:3b:6b:
ee:27:60:9a:91:27:21:21:92:00:b8:c9:fe:f2:6a:
0c:fd:b3:ef:50:f2:e5:42:38:f7:49:40:e7:71:6a:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:C9:A3:27:A1:B5:A5:4E:F8:38:3D:7B:84:2D:1B:35:88:BF:D7
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:cf:56:cc:74:5e:d1:ed:88:ae:21:cf:8f:1c:70:4f:c6:
19:69:90:59:c3:f5:5e:aa:6a:5c:62:0b:8a:9b:39:eb:23:90:
51:b8:a0:61:b6:e7:cb:a6:49:1b:76:5e:da:16:90:4f:38:25:
34:87:11:f5:c7:64:ec:ab:c1:5c:57:fc:0d:f0:58:33:96:dc:
98:a7:0f:f3:5c:1d:c7:08:87:17:9c:0a:07:63:03:6b:09:61:
03:e3:b0:ae:57:7c:40:68:0e:89:2f:5a:78:8a:75:55:d0:91:
f5:60:29:f3:56:e0:20:67:6a:c3:0b:77:23:a4:49:f4:da:3b:
cd:1c:69:2d:1f:eb:fc:5a:ac:85:e8:66:25:29:8f:f5:6f:f4:
35:8b:04:0c:c0:32:28:0d:8a:82:fc:fb:11:2a:5b:58:aa:80:
4c:12:2b:d9:e2:9e:52:3e:f1:b2:4d:1f:89:7f:ae:9c:b0:2a:
1a:b7:40:b9:de:10:d7:88:e7:d1:2a:be:8d:99:66:a3:7b:f6:
19:05:22:32:9a:ae:10:0c:bf:9d:c4:19:df:e9:e3:51:69:63:
9f:01:7b:70:d2:bc:8d:b0:e5:62:1c:05:eb:dd:f8:5c:65:84:
aa:e6:33:d7:cc:64:ef:13:f8:62:7d:c8:f0:5e:e1:be:5e:82:
9a:66:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client