Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: zCvz4IQrL7K44nL2xBFhNh7uEPMCvAXq6cG3eBJb/wY=
Subject key identifier: C2:0E:09:D2:5B:BF:7A:6E:C2:59:74:DB:BC:BD:52:D0:81:85:11:70
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 019D390A5AA7B073D8C8A72392211942E762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: hSjfqOCbfDYduvz/Fbl1/J/qTiH98RfpUQt3AQ+AHz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:5a:a7:b0:73:d8:c8:a7:23:92:21:19:42:e7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=c20e09d25bbf7a6ec25974dbbcbd52d081851170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:6a:f7:80:23:47:8e:da:7d:60:13:ca:98:
ea:71:20:76:b5:cd:e4:13:c5:8c:e7:df:df:6d:04:
69:40:c2:bc:0b:83:ea:90:29:d9:59:79:a0:63:7c:
7c:b6:bf:53:37:5e:e9:b3:29:7a:c1:23:af:78:b6:
7d:4a:6d:8b:09:5d:3d:9a:67:26:05:4c:9b:36:16:
b8:07:4a:36:22:ff:ec:d2:dd:f0:6c:cc:89:58:6b:
ed:5f:58:fe:52:d3:13:95:25:88:90:63:ec:61:cb:
00:70:bb:b6:e0:84:bf:fc:c5:40:97:78:9a:af:8f:
1a:39:e3:36:8b:a7:0b:bd:f8:22:6d:78:6f:64:25:
19:25:d8:6b:bb:81:e9:72:ad:4f:ad:cd:d6:c7:f4:
85:7e:a4:97:7c:68:87:2e:7c:84:6a:90:85:9f:17:
d6:a9:66:61:18:44:3d:ed:4f:e3:fd:12:e0:2f:26:
24:db:2c:42:96:4a:b0:16:50:4b:21:53:95:d7:93:
8a:75:9d:45:66:a5:c7:1e:cd:77:dd:73:6b:1f:b5:
5b:42:ce:83:d1:85:73:d2:be:44:ae:e3:b3:fd:5a:
3e:0b:31:08:6a:e1:a1:e5:88:49:df:d0:53:84:0e:
74:d7:36:c3:0e:a0:bf:04:a1:82:12:a6:c2:fc:90:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:09:D2:5B:BF:7A:6E:C2:59:74:DB:BC:BD:52:D0:81:85:11:70
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cd:fa:7e:0b:69:b3:83:44:97:92:5b:3c:9e:d2:96:d1:8b:
1b:c4:a6:25:e3:53:dd:58:d4:15:56:aa:6b:a7:08:3b:7f:51:
b0:29:cd:ca:53:c6:49:7f:a8:a2:8b:fb:82:33:04:aa:f9:26:
a1:a1:83:aa:68:c3:85:dc:9f:42:5f:84:00:20:6e:30:d4:68:
c3:e8:35:cb:28:da:70:c2:af:d9:bb:73:c7:e7:c0:3d:44:ec:
86:e9:73:f1:60:58:3c:69:f8:83:5d:88:cb:06:8a:83:75:2e:
d9:39:a9:56:74:51:7a:af:3d:1f:dc:78:5b:05:bd:a6:db:fc:
a4:54:61:da:cc:28:dc:5b:3e:b6:49:8a:09:ae:03:64:01:ef:
9b:dd:39:87:93:f3:51:85:58:2b:2f:3d:a3:dd:7a:07:d7:c6:
30:c4:ae:1f:4b:55:88:42:7f:0d:9a:8b:52:1b:5f:42:de:98:
89:1a:ae:ac:98:06:f8:ab:52:a0:b0:bf:1a:89:34:48:57:6f:
65:ce:80:e4:88:41:bf:89:87:98:b0:ca:3e:df:7a:c4:4f:26:
41:80:73:e8:3b:60:5a:0f:af:c1:a1:16:c6:5b:40:76:57:6f:
08:e2:af:48:d4:3c:c1:da:4c:5b:b8:d2:84:80:9f:fc:7b:aa:
41:43:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:54 2026 by rpki-client