Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
File: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft (raw, json)
Hash identifier: qeA8ukFf1O7Cvn5gbJq5MTHyHrcLrajSprs8XaLDiEo=
Subject key identifier: 28:E1:96:0B:98:FF:98:A4:E4:5C:85:DE:20:8A:A3:E5:EC:E1:2C:EB
Authority key identifier: 8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
Certificate issuer: /CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Certificate serial: 019D3865C38D3CEBE272D10D62C9DBAE7D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
Manifest number: 0EBC
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl (hash: A0Q22Qp+koDwS6SRYUv1DXb/0em5hIUTTz7dXBTtz60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c3:8d:3c:eb:e2:72:d1:0d:62:c9:db:ae:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc0d6407528538642fb0d3d4346615fea71dc2e
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=28e1960b98ff98a4e45c85de208aa3e5ece12ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:47:bc:84:e8:e3:48:a9:72:ad:07:ce:7b:
f9:0f:4d:7c:17:3f:49:bc:3a:08:20:fe:98:cd:02:
46:ae:75:23:0f:5d:e7:ae:bf:94:75:e1:52:f3:0e:
44:ad:fd:a8:e5:1e:87:fb:37:0e:45:4e:7d:55:b8:
45:69:31:0e:43:59:3e:c3:9b:7c:46:8f:7b:3b:f2:
42:c3:6f:b7:27:0c:44:ec:e8:72:29:0c:c0:94:a4:
69:1e:3e:28:1b:d8:98:40:5a:91:cd:f3:94:df:87:
73:2a:e4:68:7d:f5:13:3f:93:e6:11:ee:bf:6c:d4:
c2:ce:56:6d:22:3e:bf:dd:29:56:62:df:38:b5:d9:
86:74:d1:bb:93:2e:bd:12:a6:d7:24:30:8b:78:58:
cb:c7:ad:1f:8f:e2:c9:74:91:e2:08:98:5b:cc:bc:
94:ed:ca:1b:e8:2f:f6:ac:1f:30:ee:2f:75:c9:42:
51:8f:fb:b4:ed:4c:99:09:42:62:3d:5b:98:20:52:
e8:42:4a:03:58:a2:8b:8d:02:2a:78:3a:1b:42:4d:
b2:de:8c:79:46:cd:2c:fd:9b:47:b5:d5:79:7d:82:
2a:5d:49:ab:27:81:c1:a0:e4:b8:bd:6c:b6:7c:c9:
df:80:16:77:43:a0:b5:0d:c8:f9:89:58:3f:5b:25:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:96:0B:98:FF:98:A4:E4:5C:85:DE:20:8A:A3:E5:EC:E1:2C:EB
X509v3 Authority Key Identifier:
keyid:8F:C0:D6:40:75:28:53:86:42:FB:0D:3D:43:46:61:5F:EA:71:DC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/474282-5f5c-45e4-bfbf-45f5779d8cb4/1/j8DWQHUoU4ZC-w09Q0ZhX-px3C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:48:eb:70:08:dc:68:44:3c:51:51:f0:9c:f3:f2:bf:b0:9f:
97:b6:85:4d:43:bf:64:7b:93:4a:9e:1d:68:da:0d:38:fa:f0:
14:f2:0a:e5:d8:2d:7b:3c:6a:9c:03:51:3c:90:25:2e:98:5f:
20:ea:57:8f:11:a3:a6:28:3a:bc:7f:08:9e:17:2a:da:b0:7d:
14:ac:9e:35:a1:d0:65:9b:fb:e6:c4:60:4e:68:a8:bb:d9:ff:
c8:15:77:46:6c:ea:2d:30:ea:d3:bf:48:51:a0:e8:78:09:fa:
20:a0:d6:86:2d:bc:89:08:8b:81:45:55:76:33:d2:c3:b6:9e:
3f:ae:3e:46:14:22:08:42:a2:fc:11:b0:07:d1:d4:86:b9:e5:
ba:33:ef:89:64:76:8d:6e:eb:b1:76:07:95:3a:c9:b7:7d:24:
69:88:81:01:c3:1f:a8:45:96:27:eb:de:d7:a2:b8:ae:3b:a5:
3c:7e:42:fd:4c:70:5b:2c:ee:e1:a7:59:b7:e5:1a:80:dd:12:
fe:7d:aa:eb:69:95:19:9e:5f:13:ef:69:19:71:4c:f2:ff:74:
28:c2:92:37:03:ad:b0:58:17:8d:05:c4:4e:15:7c:48:08:4f:
37:52:86:65:cd:17:d9:f9:03:99:5e:b6:18:35:e8:ba:7a:b1:
24:59:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:06 2026 by rpki-client