Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier: +C8YnbyNoOEoFIE/QuRWuJzxOD6o6SEz1UKDVx/ULUw=
Subject key identifier: 22:56:19:E4:E8:32:9D:2B:78:AA:4A:11:96:70:CB:A8:45:F5:41:57
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial: 019D39780EBC3F5D385ADF3CEE619881D364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number: 045A
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: GdA9XtD77fymjVui8xIVNNyrX5an1dw/++KKDoBtZjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0e:bc:3f:5d:38:5a:df:3c:ee:61:98:81:d3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=225619e4e8329d2b78aa4a119670cba845f54157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:b2:ce:2a:5b:9b:e3:34:38:dc:dc:75:13:
ce:68:9b:eb:63:33:ea:e6:7b:11:47:d8:df:99:13:
7e:bf:79:0a:d7:fc:43:bd:ff:e2:0a:4b:f1:87:12:
c2:f1:1d:dd:2d:31:9b:e3:5c:fd:74:65:be:e9:a8:
0a:e9:f3:fc:1a:cd:e2:34:c3:cf:ac:c5:a1:2a:e0:
7a:0b:cd:42:cb:b5:38:ab:6a:97:3a:36:cd:64:81:
d4:ed:ba:ec:b8:53:5c:78:22:12:3f:d6:51:58:5c:
7a:66:d5:2b:2a:db:c7:dc:94:03:53:94:11:f4:f6:
61:7a:32:bb:00:35:3f:48:ec:15:ab:6a:e7:41:91:
84:fc:45:81:57:a1:f4:01:fa:d1:5f:05:73:2d:d4:
98:43:4b:a4:ef:c7:a4:99:ae:c4:03:28:13:80:59:
fb:eb:64:43:00:9a:3e:45:a6:62:2f:ef:13:4e:8e:
10:b8:dc:45:65:73:00:f8:60:2b:9b:66:a7:71:3b:
8e:86:f0:27:15:c0:ad:a0:8c:35:92:28:9e:a8:20:
8d:06:52:3d:f6:1a:c1:17:55:96:87:41:d5:50:4e:
db:f7:93:c3:30:e9:12:a3:5b:7e:f7:94:12:43:08:
a3:f8:e8:a0:c4:ae:0d:06:8a:ff:b1:b7:b8:5d:12:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:56:19:E4:E8:32:9D:2B:78:AA:4A:11:96:70:CB:A8:45:F5:41:57
X509v3 Authority Key Identifier:
keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:b3:8c:7c:7c:80:bb:31:f2:e0:1a:47:ed:65:dd:39:74:
81:11:52:9d:28:31:a1:bf:aa:e0:43:f4:ed:cb:36:a4:87:d9:
15:c4:47:4e:58:3a:1c:fe:b8:c5:77:c3:50:d4:c7:74:27:0f:
ab:a9:47:b2:6a:71:4a:03:26:fb:58:6d:24:07:2d:fd:67:1d:
52:89:f2:a8:40:6d:92:9e:17:13:9b:bf:bc:25:f5:ac:67:e0:
ca:00:0a:54:65:33:48:32:28:f9:42:72:81:08:e0:78:bd:bc:
eb:e1:b0:4a:6e:b0:44:dc:e9:fd:2c:4b:9e:1d:10:7e:d4:b8:
cb:60:61:bb:bd:97:d7:4d:df:a9:cb:40:08:35:02:2f:30:bf:
c3:bb:23:11:30:df:3b:8d:a6:42:4b:9d:76:96:6a:63:ec:40:
c7:ef:40:2a:5e:fd:49:bb:3c:0c:0f:c3:49:4e:1b:bf:bf:1d:
76:92:3b:bb:8c:49:f5:14:96:a4:65:c5:a6:66:37:53:95:c1:
b2:c6:43:c4:2a:db:97:1a:0a:15:9e:30:44:a4:2c:0e:54:35:
ec:45:84:fa:9e:0f:b6:78:53:4c:52:da:e2:fa:f0:ff:b7:7b:
46:71:02:8d:33:37:32:84:7e:43:13:bf:12:c7:95:14:17:18:
ab:64:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:43:08 2026 by rpki-client