Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: lRsOGITBy5VMW01znCJ/5lN9cFN3/QE1+w/1r6fuP7Y=
Subject key identifier: 0D:17:B9:32:35:56:4D:8A:9F:4D:03:E3:4F:3E:05:3E:1D:2E:67:76
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 019D389C44FC803EF83B248F59D7789CAE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: 0310
Signing time: Sun 29 Mar 2026 08:00:58 +0000
Manifest this update: Sun 29 Mar 2026 08:00:58 +0000
Manifest next update: Mon 30 Mar 2026 08:00:58 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: 8rQbT0PTb19HWsmuQEYX3Bl69P4e5YPWmqpbegZ/7sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:44:fc:80:3e:f8:3b:24:8f:59:d7:78:9c:ae:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Mar 29 08:00:58 2026 GMT
Not After : Mar 30 08:00:58 2026 GMT
Subject: CN=0d17b93235564d8a9f4d03e34f3e053e1d2e6776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:21:c0:ec:9a:63:dc:8e:1c:f4:a2:fa:3b:
e3:98:d2:6b:98:da:16:99:f9:39:af:e7:9a:ac:56:
c3:3f:5b:ff:63:28:55:19:95:fc:00:ec:ed:d8:0f:
1f:46:34:ad:76:91:54:4b:2d:ee:6d:76:3d:e4:ae:
15:ea:4b:8c:c7:a9:67:4d:96:0f:dd:85:6b:da:c5:
d2:3d:ad:89:16:c2:02:75:b2:9f:25:11:a6:4d:9e:
3e:e7:36:2a:3e:2a:d3:5d:c7:94:d3:e4:d7:77:5e:
a7:92:28:0c:bc:06:aa:21:95:e8:c8:aa:d7:a4:19:
d4:2d:f0:a2:5f:0c:9c:7e:47:1b:ee:4e:74:d9:25:
82:e3:3c:ca:7f:36:6c:2d:a1:0c:f9:3f:ba:5b:03:
a3:c5:74:b5:3c:3f:e4:1f:e3:55:ce:6b:91:05:8a:
e1:3e:5b:5a:1a:1f:3b:d4:d0:22:6b:99:ef:a1:41:
2d:4b:ba:de:c3:dc:8e:dd:f7:87:b5:ca:99:48:f2:
f6:05:1d:8b:4e:2a:e0:f3:30:34:29:7e:70:bd:11:
13:70:ee:b4:8c:e0:12:56:3d:9d:41:3e:5e:10:13:
93:b9:0a:0d:87:d5:ba:c3:6a:0c:ae:22:00:0b:10:
60:85:cd:b1:4b:76:d0:9c:13:ad:ee:c6:16:01:43:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:17:B9:32:35:56:4D:8A:9F:4D:03:E3:4F:3E:05:3E:1D:2E:67:76
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:7f:05:1e:06:90:9d:18:aa:31:bb:0c:6b:25:5d:74:27:
53:dc:d9:e1:ae:be:99:49:c0:e6:5f:b2:35:a4:67:21:19:0a:
3f:bd:fb:8d:9e:da:ab:4e:b4:a6:5b:f0:f7:c7:fe:72:08:03:
de:cd:4f:45:a1:bd:c8:47:a1:01:09:3b:da:47:3d:ba:b8:97:
62:6b:81:47:13:fd:7f:df:d2:82:0f:09:c7:82:1f:f0:ae:e6:
9c:64:e2:df:11:75:d5:cd:f3:50:1a:3b:31:22:db:07:80:7f:
c6:e8:54:d3:b5:29:93:0d:e9:b2:1c:6e:2c:e0:07:ee:4e:68:
43:cc:74:12:43:82:e1:98:c1:99:2e:90:a9:b0:fb:92:fa:62:
5a:9e:ed:47:26:ba:14:13:88:b0:6b:2f:f7:88:2b:05:98:d7:
38:54:bf:72:fc:56:cd:4e:74:75:2d:d0:3f:9f:bd:66:56:c9:
4f:0e:97:27:8f:8c:91:b0:66:7e:f0:17:38:2f:25:1c:62:c8:
cf:77:c3:30:de:a4:ef:0a:5b:fd:46:69:71:8c:d3:d9:5d:90:
50:d0:8e:d3:67:73:dd:6e:60:de:51:95:93:93:6b:99:58:5f:
a0:1c:2c:a1:99:68:11:71:4f:51:ec:83:12:b6:4b:d9:d5:1c:
9c:c1:ba:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:14 2026 by rpki-client