Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
File: Jo42omah9d-VuWprWNoRwjVNtV0.mft (raw, json)
Hash identifier: zm+iBgKQdF+4u1l+qNfMOq+1NwIrpgYFoHmd0zjzh3U=
Subject key identifier: B2:D8:DA:7C:85:2F:AF:6D:AC:51:D5:2F:56:AD:AF:28:EA:B9:5E:2D
Authority key identifier: 26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
Certificate issuer: /CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Certificate serial: 019D3865969F57BFFA1A747AF81FC96F3E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
Manifest number: 0C34
Signing time: Sun 29 Mar 2026 07:01:14 +0000
Manifest this update: Sun 29 Mar 2026 07:01:14 +0000
Manifest next update: Mon 30 Mar 2026 07:01:14 +0000
Files and hashes: 1: Jo42omah9d-VuWprWNoRwjVNtV0.crl (hash: OQStXXic/a0xrwEKlP4+R7GKqvLsi52+M/XjtgP8qMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:96:9f:57:bf:fa:1a:74:7a:f8:1f:c9:6f:3e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268e36a266a1f5df95b96a6b58da11c2354db55d
Validity
Not Before: Mar 29 07:01:14 2026 GMT
Not After : Mar 30 07:01:14 2026 GMT
Subject: CN=b2d8da7c852faf6dac51d52f56adaf28eab95e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:3a:b9:2b:a6:8a:85:24:24:98:06:21:cd:
5b:f4:46:f4:47:21:ba:34:63:a8:b7:07:0c:ed:3c:
33:6f:e6:05:0c:22:be:63:9e:53:2b:a3:0f:8b:ed:
f1:8a:2c:44:20:b8:5e:f4:20:48:0d:f2:9c:35:f8:
18:c1:8e:3c:71:f0:09:72:ba:09:2e:76:a2:fd:f8:
cb:6b:47:b4:a9:71:fc:51:c4:37:e8:ff:7d:ef:b9:
68:43:e6:35:86:a0:b7:79:07:3b:5c:d3:11:a1:a1:
85:e2:5c:7e:31:3c:9d:f5:3e:5c:b2:c3:c2:7d:e0:
56:a6:ad:a9:c4:d6:40:cd:fe:93:50:e7:fb:f0:95:
e7:40:0c:a2:90:ba:3a:9f:6d:ab:1c:35:2d:8d:43:
26:95:1a:6b:2b:cb:32:ec:1a:86:f2:fb:f9:55:88:
ff:d4:14:fa:26:c6:1c:7f:37:44:db:48:33:ab:56:
ea:43:f6:56:7a:69:21:e6:0f:98:55:f0:c6:f2:5a:
50:ab:bc:cb:a3:9b:a5:23:64:90:37:28:fc:4f:0c:
61:08:8d:18:58:8a:58:de:b0:87:3c:88:fd:36:a8:
c4:b3:3a:8e:d5:51:13:01:7f:8e:23:4b:84:f3:6f:
d0:9d:ff:83:45:d4:80:c3:f7:35:82:31:06:a8:be:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:DA:7C:85:2F:AF:6D:AC:51:D5:2F:56:AD:AF:28:EA:B9:5E:2D
X509v3 Authority Key Identifier:
keyid:26:8E:36:A2:66:A1:F5:DF:95:B9:6A:6B:58:DA:11:C2:35:4D:B5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo42omah9d-VuWprWNoRwjVNtV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f31f24-4cf0-48ef-a978-e2c6b0d6ed96/1/Jo42omah9d-VuWprWNoRwjVNtV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:1e:70:62:b6:3f:be:ec:4a:d2:b2:ca:5d:fe:9e:d4:24:
52:80:b5:75:06:b6:d1:e4:85:03:f2:50:57:77:cd:09:51:fd:
e8:a2:7c:cf:8b:5f:67:ec:24:54:93:78:57:a6:46:f6:6c:54:
9c:9a:c4:ca:24:69:27:aa:5a:49:a9:a0:60:a6:c0:7b:86:13:
f2:46:03:ae:e5:d1:29:0e:b5:ee:dd:e9:c8:1b:e1:1c:1b:a9:
45:d1:4e:8d:41:69:d9:32:03:c9:ed:7e:e3:25:79:a0:38:ac:
b1:68:cd:bd:66:94:42:4e:5d:6a:33:5b:ec:1b:65:c5:5f:4e:
26:87:19:14:35:a8:5e:33:e7:df:a1:9f:61:3a:66:0a:20:5a:
d1:87:38:46:a5:8f:2f:5c:d1:7c:8f:86:7c:ce:ea:7a:b0:0f:
2b:3b:08:e3:33:73:b0:2a:a1:ed:8d:b0:36:35:fd:74:bf:ed:
8f:b9:2f:ac:ce:b5:d8:d5:d7:5d:2a:19:cb:91:6b:0b:0e:86:
aa:30:de:c0:75:31:b0:c8:25:19:b4:19:6e:90:bc:2f:41:e8:
0a:d5:36:a6:4f:3d:78:91:fd:25:7d:e8:d2:5d:f6:90:8c:c7:
97:49:4e:4d:8f:7d:e8:65:2f:6a:65:9c:dd:a2:28:b5:1e:22:
57:f4:75:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:53 2026 by rpki-client