Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
File: jbVG3KNrwMS1s0zljYBx6HXDpG4.mft (raw, json)
Hash identifier: y2Ffe/9rWiu3DXvs2IqfISv0iJQeJ4ztiKfuYzpAUTU=
Subject key identifier: 67:E7:27:B0:4B:6F:F5:D9:52:39:C8:E3:87:E8:67:89:91:A0:6B:F5
Authority key identifier: 8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
Certificate issuer: /CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Certificate serial: 019D38661846492B3B7151F6A1A12F12F2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: jbVG3KNrwMS1s0zljYBx6HXDpG4.crl (hash: 1Fo9oPpnp7g5UaMCtIG5NCIyLYbJ37lK3GHjAggFDWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:18:46:49:2b:3b:71:51:f6:a1:a1:2f:12:f2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db546dca36bc0c4b5b34ce58d8071e875c3a46e
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=67e727b04b6ff5d95239c8e387e8678991a06bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:32:29:5b:a9:e2:39:03:00:19:ef:1a:d9:
e2:c2:f7:3e:b7:c1:3b:01:cb:44:4b:0a:51:a3:18:
75:80:cd:e9:1a:20:93:ae:38:38:ae:d6:2e:d8:f2:
e6:f8:b9:e7:43:14:07:6b:5b:1b:ac:bd:39:2c:31:
88:86:a2:7f:1e:ff:97:dd:9c:42:5d:a2:84:ec:29:
03:d3:e9:34:c8:fa:15:f5:13:ea:a7:52:64:1e:a6:
e6:30:4c:69:f6:63:dd:43:68:eb:a9:4d:5e:ae:f7:
d7:df:3e:e5:ed:3b:19:d5:ea:66:70:87:1e:7a:89:
99:d8:09:e7:86:1c:d5:fe:84:73:9e:16:06:ef:6a:
19:71:3c:9f:06:d1:c5:76:0b:dd:0a:b1:ef:d8:1e:
1e:0e:90:6f:d6:1d:3b:2b:09:64:c4:1e:27:25:8a:
f5:f1:b2:0d:f4:b7:8b:6c:20:a6:cd:84:cf:98:6f:
85:0f:cb:1e:ca:1e:74:31:1d:93:ff:3a:89:5f:75:
26:26:f1:59:38:7e:bf:4f:5a:2a:a4:ca:da:0c:84:
e4:90:fa:13:f4:04:71:c8:8e:10:5b:6b:a1:b9:ab:
f6:0b:14:f3:6f:ea:5d:d9:e3:29:51:ce:71:db:c9:
77:89:bb:c3:74:c1:28:85:4b:64:13:5a:fa:d5:ac:
0a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:27:B0:4B:6F:F5:D9:52:39:C8:E3:87:E8:67:89:91:A0:6B:F5
X509v3 Authority Key Identifier:
keyid:8D:B5:46:DC:A3:6B:C0:C4:B5:B3:4C:E5:8D:80:71:E8:75:C3:A4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbVG3KNrwMS1s0zljYBx6HXDpG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0e673c-2534-4555-942e-800afa9bbfde/1/jbVG3KNrwMS1s0zljYBx6HXDpG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:00:51:a7:84:c4:e6:e4:47:64:2b:00:65:bf:41:46:90:24:
95:f0:27:80:3a:60:93:ec:a8:28:1d:f8:5d:b8:eb:fb:a8:df:
3b:e2:4a:3f:bc:95:61:55:c8:a5:51:e0:26:f5:45:ea:12:8d:
ee:7c:7f:ec:89:40:89:2a:c4:bd:49:79:e3:07:09:26:25:6f:
5e:d5:9b:c9:a7:8d:56:77:e9:83:ee:eb:42:03:e5:58:71:56:
53:84:22:d5:3a:49:86:25:f0:a2:fc:99:f7:6b:33:f8:12:57:
8e:14:ca:18:66:db:72:35:a0:15:7d:c6:20:4b:cb:88:22:a1:
0b:dd:37:ff:f6:69:97:5a:fa:c3:c3:c5:8b:0e:10:65:1c:3b:
40:45:ad:47:45:81:4c:41:44:28:dd:38:8c:0c:78:87:e3:c6:
ae:4f:4d:2d:ae:d5:0a:7f:6e:c8:39:39:90:5f:a9:17:91:4e:
c2:38:9b:fa:96:0f:bb:b7:4c:9a:5e:e7:23:ed:16:07:fa:80:
fe:ab:df:58:ea:d0:c9:2b:f9:27:11:07:a0:54:9d:3d:dd:cb:
79:f0:d5:cc:02:36:c3:4c:72:72:71:62:0c:9f:3d:d9:9d:0a:
4b:71:cb:57:0c:20:23:ae:75:cf:29:31:35:dc:b8:3f:4a:97:
7c:44:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:46 2026 by rpki-client