Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: ap5l2hfthN43blomB0umoWPxW0GIAaPzw+bp5LWHLaw=
Subject key identifier: B1:AE:FB:E9:E9:ED:B2:03:23:FD:43:13:88:85:55:E0:5C:C5:28:DF
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 019D3941794B69510C078F4656946C26923C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 05E0
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: 9A+dk9CnSkIbzku4AsMqdgBhBJj8qV1Fb1vTmYqCxyI=)
2: Qh17y8ZXko2zCvW7ongm_2OyBMU.roa (hash: GkjSo29sLFooCbJSX6NqzSiNxXF5on4FQp+sbGAp9ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:79:4b:69:51:0c:07:8f:46:56:94:6c:26:92:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=b1aefbe9e9edb20323fd4313888555e05cc528df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:45:8f:2a:72:93:2f:90:54:d9:e6:28:d1:
11:97:6b:fb:15:a0:56:18:89:39:62:9c:c6:a6:84:
ef:98:39:3f:11:a4:0a:73:26:e6:7d:19:ce:ca:0d:
a8:61:80:fb:b9:68:de:8f:91:00:f1:a8:c2:a1:5f:
c4:2d:cf:a1:ad:b5:1f:ce:3a:a8:0e:60:7d:33:39:
c5:71:e1:d4:e9:f2:52:d0:72:85:6f:29:61:8e:01:
bc:d4:e5:5a:5e:e7:31:74:54:b0:2a:09:82:8e:d2:
64:cc:f3:11:1f:13:36:85:b4:0c:f7:a9:52:3f:13:
1d:4d:25:61:cf:8a:e8:7d:61:93:7d:cf:5c:14:7d:
9c:0e:f3:d2:56:c1:19:83:31:83:8e:df:e3:2d:91:
c5:bf:b3:f0:73:66:ca:7f:52:86:3c:5b:31:98:04:
e7:62:44:a0:24:e9:ec:52:1a:d8:c2:28:96:a3:b4:
fb:ca:5d:07:9a:04:14:26:a7:e2:03:7e:38:c6:75:
20:8a:a4:e0:10:10:96:c7:d6:0e:dc:78:80:3f:e9:
85:bf:05:74:4c:24:dc:7f:e7:28:c7:c0:0c:cf:26:
c2:57:98:3e:89:8f:39:28:bd:80:61:3d:6a:e3:1b:
c5:08:c8:f5:a0:92:d5:8c:ea:99:26:f7:5c:78:83:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:FB:E9:E9:ED:B2:03:23:FD:43:13:88:85:55:E0:5C:C5:28:DF
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ec:94:ea:b0:fc:8f:e8:e1:ca:da:70:4a:75:d0:ce:15:2b:
3c:a8:d9:af:ca:a1:2e:30:b2:d5:8f:de:41:72:20:7e:f7:ac:
33:b1:49:60:90:0d:d8:18:cf:06:17:ae:a7:5b:1c:06:ec:07:
34:e4:3b:0e:72:53:fc:40:63:6b:16:74:7e:3c:e5:ae:86:00:
d0:a7:a9:89:eb:ce:f9:e4:c6:31:43:29:1e:21:a7:c5:dd:23:
4d:51:01:a5:6e:29:c0:fa:a0:28:01:95:00:9f:0b:90:7b:a8:
0f:c7:91:b8:10:f3:cc:dc:15:89:ca:1f:fc:80:32:6c:f8:92:
c0:15:14:03:ac:8b:28:ed:7e:b8:7a:73:a4:88:ad:eb:b3:cd:
04:2f:28:21:43:9c:70:e7:67:f2:1d:58:bd:b6:c1:5a:01:ee:
93:39:c7:cc:4a:3d:87:3e:32:50:7e:fe:e5:7c:7d:83:10:ff:
e1:c9:9e:ed:d0:64:7e:17:8f:8d:61:d1:1f:28:70:dd:3a:9a:
cf:20:7a:bb:c6:f7:0d:c5:d5:cb:2c:7c:3e:d0:48:a5:e8:54:
72:78:f9:5b:f1:b9:d1:dc:a9:fa:cf:e6:42:c7:71:c5:c6:41:
72:67:9c:d3:6c:0c:bf:b5:9c:ec:8a:3c:ce:fa:d1:9b:8b:8d:
96:5d:9b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:12 2026 by rpki-client