Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: VkvAH/F1Ds9vlfGH1r/TqEsMxPeIXIzAmw4kyplz5N8=
Subject key identifier: AB:FD:BB:58:CB:B4:F0:AB:A9:70:43:D2:B8:04:ED:AE:10:63:CC:4D
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 019D3865A9406CC2F0B5B4817CEAC44C2D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: w4XShmmmzpqNl4EdanHo5xle9EYx7rCtv9zKrXWUt78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:a9:40:6c:c2:f0:b5:b4:81:7c:ea:c4:4c:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=abfdbb58cbb4f0aba97043d2b804edae1063cc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:03:63:f9:87:c7:d6:a4:03:c6:bf:1d:4c:
f9:b4:92:fe:b9:ad:ef:b5:5b:47:ba:db:e9:87:de:
16:9e:36:08:aa:c8:29:8f:d3:b4:14:d1:6d:a2:35:
61:c1:e0:de:fc:6f:65:53:f0:c4:74:c9:f7:f8:ac:
62:6e:a7:de:40:7a:f8:32:4c:64:cb:d5:e6:38:28:
05:64:38:c3:68:b3:05:68:7d:eb:4d:df:79:7b:ec:
f7:8d:55:9c:b2:d6:e7:f3:d4:d0:d0:97:a3:cf:77:
23:14:dd:ee:22:85:c7:f4:16:6e:7f:75:f0:97:aa:
9f:e1:d5:45:6e:4d:fc:72:78:bc:47:9f:52:9d:18:
b7:40:16:da:21:b9:47:94:a9:6f:a2:65:08:35:5f:
68:5c:be:93:74:e8:32:24:3c:af:37:c2:da:7b:e0:
e9:8e:96:c1:e7:19:24:a7:94:1c:2a:f6:55:d2:70:
ef:6a:89:b1:b9:ac:d8:ff:e3:79:ac:f8:d5:70:28:
6b:c3:2e:7a:48:96:4e:18:e5:8c:74:14:fc:e9:0d:
65:4f:03:2d:e6:85:5c:62:69:1d:12:cd:05:2f:f4:
91:32:9d:ad:57:b3:dc:86:a9:b7:4b:71:29:2a:0e:
62:9b:9b:e4:f2:e5:e3:fa:08:86:77:45:cd:61:7b:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:BB:58:CB:B4:F0:AB:A9:70:43:D2:B8:04:ED:AE:10:63:CC:4D
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:eb:5b:d0:b4:4b:43:76:c5:05:f7:f7:ec:67:57:f9:3f:2e:
70:73:ff:85:4e:98:88:5c:4c:1c:db:c2:5f:74:e2:3d:26:b1:
ee:34:8e:17:30:f5:b5:f8:00:66:13:6d:26:98:58:c8:6b:2c:
10:5b:a0:a4:ae:cb:08:27:d6:da:88:98:42:6d:f5:89:1a:9f:
87:9c:87:3a:e8:d4:6b:56:6a:db:c4:3c:aa:03:3c:af:ac:b7:
91:ec:b2:2b:d1:f0:39:24:1e:9f:b5:76:22:21:1b:73:df:04:
30:9b:03:af:5e:31:33:ed:80:54:16:27:71:68:7f:b3:30:8f:
d2:82:b1:82:ec:27:c5:34:a3:0a:e4:f2:8d:c0:11:fd:7a:21:
0a:79:ca:29:f1:14:5f:d0:9e:fb:7f:8e:ea:52:7c:ce:bf:49:
fa:62:37:b5:ea:97:c2:08:e1:b9:05:9c:cf:ee:be:88:83:e8:
8d:df:59:da:6f:6d:84:a0:a9:37:8d:aa:9a:39:e4:db:bd:9b:
ff:a8:d0:b3:f2:f9:37:20:f1:f2:36:4e:ac:1c:6a:d3:9a:b3:
61:f6:59:3a:19:b6:f9:96:34:6a:bc:59:9b:df:b7:a8:53:97:
18:4a:78:e6:5b:e1:f9:1c:28:b6:95:7c:e2:a3:e1:82:bb:6d:
29:c3:c3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:43 2026 by rpki-client