Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: ugeBFvrzjtGt2Ubz6HVophaQ/yyshX+0DS1DLz73G0E=
Subject key identifier: 2A:D4:AA:2D:87:26:9C:DE:81:D2:0F:FF:D2:C4:D2:CB:B1:EE:9E:C1
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019D3866165DE1F3A3F5509BDEB76A85C6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: CGIv0VS3oZDjt8ci4TfUN+42mGPUaoLZRIMqZ2S1SqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:16:5d:e1:f3:a3:f5:50:9b:de:b7:6a:85:c6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=2ad4aa2d87269cde81d20fffd2c4d2cbb1ee9ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:54:78:77:ac:44:1f:a7:5d:2c:60:90:f7:
b3:d4:4b:c8:f9:d8:21:20:ec:2c:ed:d1:30:57:cb:
c4:72:4d:d6:b1:8b:4c:66:ca:2c:ed:c7:80:b3:05:
51:6d:6c:e4:3b:7a:0b:61:e7:6b:fc:09:fe:7b:94:
3d:58:34:33:32:db:bd:15:71:2b:25:f2:4e:94:30:
84:7f:1b:45:4a:e9:65:a2:65:01:56:56:a0:09:0b:
ff:52:e0:c6:2b:fd:4d:e4:fc:3a:1a:0b:52:89:f2:
72:79:d0:5a:a0:1b:94:d5:dd:7f:7c:06:6f:a7:1c:
8a:2e:d0:9f:c4:e5:06:83:34:bd:0e:38:e2:4d:28:
54:e7:77:47:0b:a5:b4:e4:94:b2:e5:bb:bd:90:d5:
fc:a6:73:cc:73:0c:3d:77:b5:7c:fa:92:ea:ca:35:
21:04:ac:e1:8c:76:89:97:c9:e3:57:4f:0a:fd:aa:
39:51:21:3b:5c:be:58:86:ba:23:1b:b5:43:c4:3c:
31:20:cb:7d:9c:54:3c:e6:3a:7f:5a:a2:9f:d3:cd:
46:ae:6c:2b:6e:e6:a1:ad:49:f1:f8:86:2e:8f:42:
c5:e2:3e:58:6e:e0:47:c6:e6:ee:4e:17:f0:60:9e:
60:1d:20:16:f3:a1:dc:45:74:17:55:75:88:8f:93:
6c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:AA:2D:87:26:9C:DE:81:D2:0F:FF:D2:C4:D2:CB:B1:EE:9E:C1
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c0:da:8c:16:ea:23:a1:3b:f9:a1:76:c7:17:6a:d9:40:05:
c8:b9:c7:09:fd:95:e2:63:01:97:4d:49:04:39:89:04:7b:8c:
34:b8:3a:c6:3a:3f:b9:0f:69:7f:c4:35:7f:87:62:be:07:a2:
e4:cb:cc:c7:d5:25:09:52:a9:61:14:95:8f:7f:23:f8:39:cf:
5d:b3:c6:3e:e4:52:39:9a:26:34:ed:ed:a5:83:e2:b6:d0:71:
e5:0d:03:54:c2:2a:29:7e:bd:14:e8:93:c5:29:8d:81:d3:41:
c7:2e:9d:34:84:8d:46:aa:f5:15:7b:e0:f6:ce:ce:cb:83:f5:
61:97:70:1f:7b:51:7e:f9:a5:1a:34:75:c5:dc:fe:5c:82:16:
ac:4a:9c:23:10:1e:fe:10:4f:78:78:55:11:c7:77:90:46:18:
34:8d:21:02:91:45:68:6e:cd:32:28:ce:6e:71:e2:82:59:09:
ed:f5:a6:f6:e3:1b:7b:f1:87:d4:2d:e6:05:e8:95:b4:dd:2a:
7c:bc:b1:ab:79:fc:80:5a:86:5f:85:52:6f:c3:ce:33:fe:bd:
05:6e:ca:c8:1a:f2:f9:ca:18:33:ed:d8:76:63:a9:56:7e:8d:
c9:4d:84:55:30:25:6f:96:69:ee:a8:09:d7:cf:f1:f0:5c:f7:
06:98:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:21 2026 by rpki-client