Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
File: j07qcuRTHJKm4A708ZGmEn6VbS0.mft (raw, json)
Hash identifier: 89LiIrERNvNHfmWG70DNY8vnOuM7PYSDZMR3ga2WLas=
Subject key identifier: 3C:D8:66:10:60:13:0D:B9:48:28:1D:69:06:F3:01:EA:48:CF:95:D7
Authority key identifier: 8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
Certificate issuer: /CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Certificate serial: 019D386596BDC6354951804200193EE14F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
Manifest number: 0D46
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: j07qcuRTHJKm4A708ZGmEn6VbS0.crl (hash: QAki1JTz0e51ZvXWbG21ErQeaoTftXUdNqjCh+ESBSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:96:bd:c6:35:49:51:80:42:00:19:3e:e1:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4eea72e4531c92a6e00ef4f191a6127e956d2d
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=3cd8661060130db948281d6906f301ea48cf95d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:23:ac:77:63:09:1c:80:4e:ac:47:ea:08:
cc:47:d7:c6:47:c7:7f:2a:03:a9:d0:a4:03:fa:34:
ce:b1:73:fb:14:a4:e6:fb:97:a9:d1:3b:0b:be:52:
eb:12:2a:63:e6:fd:8f:e0:c5:9a:63:45:fc:77:0e:
fe:de:23:5a:c2:98:93:1c:39:97:6b:34:b0:1a:dd:
d6:3a:bf:99:9f:7e:20:22:c3:87:d4:86:32:24:15:
9f:f9:2e:bb:34:30:10:4d:4d:14:0e:c6:7c:e4:4d:
03:e3:9e:aa:21:1a:27:5d:af:6e:51:19:9d:c5:6f:
9e:7f:23:3d:28:6b:0b:cd:44:07:3d:85:d4:cd:9a:
c1:d6:8d:f8:eb:8f:e5:fd:e6:d4:78:02:3a:d6:b2:
91:e5:34:c1:b9:d3:de:aa:c7:23:08:b4:8f:15:a6:
99:d7:0a:55:df:9d:e7:4d:7a:f7:1c:e3:54:e6:94:
92:68:ed:77:38:73:44:9b:f1:d0:b0:77:ac:27:8f:
a6:8a:d5:a2:8c:f9:50:6c:5d:d0:5d:42:37:e8:c0:
4c:6b:76:7f:8f:06:c2:0e:94:23:1e:30:90:2e:f3:
4e:74:a8:31:01:c1:39:3d:5a:af:0d:bc:7f:a8:09:
b6:bc:b5:92:40:e6:b1:e8:5d:0c:0a:8a:aa:ac:fc:
ba:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:66:10:60:13:0D:B9:48:28:1D:69:06:F3:01:EA:48:CF:95:D7
X509v3 Authority Key Identifier:
keyid:8F:4E:EA:72:E4:53:1C:92:A6:E0:0E:F4:F1:91:A6:12:7E:95:6D:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j07qcuRTHJKm4A708ZGmEn6VbS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/67e623-7945-409e-ad32-4618fbfa4c89/1/j07qcuRTHJKm4A708ZGmEn6VbS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:f5:9c:46:de:0f:01:dd:52:31:94:bc:f0:cd:0a:04:bc:
18:2c:1f:2d:04:1c:0d:5a:0b:bf:47:c3:24:84:35:a7:4f:4c:
00:5d:d6:f6:9d:d3:ef:15:10:9a:2a:da:c6:bd:7e:75:8e:e1:
50:de:4c:91:cf:57:fc:66:77:cc:64:75:7c:bf:da:f5:69:6e:
5b:a2:95:ea:a5:71:c5:5a:e1:a5:65:1b:7d:08:6b:6c:e2:57:
d5:b4:ac:a0:04:41:3c:9f:ad:57:e1:b6:0b:26:95:80:40:6f:
e0:dd:3a:bd:da:42:5e:fe:e2:3b:9c:09:27:04:40:91:e8:82:
74:2a:4f:87:03:4e:c4:ca:3f:d7:11:1e:65:d2:ba:cc:00:2a:
e2:dc:f4:50:59:ad:24:51:3e:cc:97:fd:52:3e:db:ae:a8:4c:
96:b6:22:f9:e5:5c:f3:54:22:6f:24:8b:88:e8:b3:0c:c1:2b:
f0:93:50:b8:14:71:e5:cf:86:cb:44:4e:3b:c8:5b:f2:90:da:
7e:d5:39:e5:ae:31:14:27:1c:3f:5a:cc:3d:34:8c:5d:82:02:
83:b9:7a:b7:72:2a:b3:be:ed:71:e6:f2:c3:f1:4d:96:8a:49:
07:20:b8:6e:46:4d:0b:b9:5b:28:05:a3:74:e0:21:04:63:52:
4e:c3:f3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZa9xjVJUYBCABk+4U8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNGVlYTcyZTQ1MzFjOTJhNmUwMGVmNGYxOTFhNjEyN2U5
NTZkMmQwHhcNMjYwMzI5MDcwMTE0WhcNMjYwMzMwMDcwMTE0WjAzMTEwLwYDVQQD
EygzY2Q4NjYxMDYwMTMwZGI5NDgyODFkNjkwNmYzMDFlYTQ4Y2Y5NWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoIjrHdjCRyATqxH6gjMR9fGR8d/
KgOp0KQD+jTOsXP7FKTm+5ep0TsLvlLrEipj5v2P4MWaY0X8dw7+3iNawpiTHDmX
azSwGt3WOr+Zn34gIsOH1IYyJBWf+S67NDAQTU0UDsZ85E0D456qIRonXa9uURmd
xW+efyM9KGsLzUQHPYXUzZrB1o3464/l/ebUeAI61rKR5TTBudPeqscjCLSPFaaZ
1wpV353nTXr3HONU5pSSaO13OHNEm/HQsHesJ4+mitWijPlQbF3QXUI36MBMa3Z/
jwbCDpQjHjCQLvNOdKgxAcE5PVqvDbx/qAm2vLWSQOax6F0MCoqqrPy6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzYZhBgEw25SCgdaQbzAepIz5XXMB8GA1UdIwQY
MBaAFI9O6nLkUxySpuAO9PGRphJ+lW0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzIt
NDYxOGZiZmE0Yzg5LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82N2U2MjMtNzk0NS00MDllLWFkMzItNDYxOGZiZmE0Yzg5
LzEvajA3cWN1UlRISkttNEE3MDhaR21FbjZWYlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0H1nEbe
DwHdUjGUvPDNCgS8GCwfLQQcDVoLv0fDJIQ1p09MAF3W9p3T7xUQmiraxr1+dY7h
UN5Mkc9X/GZ3zGR1fL/a9WluW6KV6qVxxVrhpWUbfQhrbOJX1bSsoARBPJ+tV+G2
CyaVgEBv4N06vdpCXv7iO5wJJwRAkeiCdCpPhwNOxMo/1xEeZdK6zAAq4tz0UFmt
JFE+zJf9Uj7brqhMlrYi+eVc81QibySLiOizDMEr8JNQuBRx5c+Gy0ROO8hb8pDa
ftU55a4xFCccP1rMPTSMXYICg7l6t3Iqs77tcebyw/FNlopJByC4bkZNC7lbKAWj
dOAhBGNSTsPz2w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:21 2026 by rpki-client