Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: nshi1BAQsWaCD38lYgMkIARBREW3lPY5FzgHElepY2Y=
Subject key identifier: AF:4E:FB:BD:01:03:BE:A1:AC:61:1F:4D:40:9F:35:AE:C9:E5:0A:1C
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 01A17D73FD375BC8B92225CCB8E984536053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0D11
Signing time: Tue 27 Oct 2026 13:01:55 +0000
Manifest this update: Tue 27 Oct 2026 13:01:55 +0000
Manifest next update: Wed 28 Oct 2026 13:01:55 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: CazRpIG2K6Dtb2onotJx7yK2vJNQtRo9TQEyXh67Wlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:fd:37:5b:c8:b9:22:25:cc:b8:e9:84:53:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Oct 27 13:01:55 2026 GMT
Not After : Oct 28 13:01:55 2026 GMT
Subject: CN=af4efbbd0103bea1ac611f4d409f35aec9e50a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:41:b3:3b:3e:30:a7:0a:83:79:5b:4e:72:
2e:bb:77:da:df:ca:8c:c4:4b:99:2e:61:7c:a7:92:
eb:0a:48:e6:97:52:dc:42:0c:8a:56:23:83:a9:38:
3b:c6:d6:cd:2a:be:c6:94:7c:1e:6d:cd:a3:53:e4:
bd:20:b6:7d:9a:ac:70:45:f5:af:f6:62:dc:39:c9:
91:b8:4e:e8:47:d8:c9:49:77:c4:3b:ba:57:a0:53:
13:1c:1c:4a:02:e9:44:d7:47:84:67:1e:33:17:09:
93:33:7a:94:ec:0a:86:5c:0a:80:5e:61:1a:bc:c8:
35:21:c7:1d:c2:84:51:50:7f:ed:e3:4e:1e:6d:7a:
5d:45:9b:4a:fc:c4:57:f8:d0:ab:c2:5f:ee:84:e3:
00:fe:cb:a7:46:e6:de:1b:17:c1:7e:05:80:be:8d:
53:66:ea:7d:d8:4e:a2:8e:bf:fd:21:d1:ab:22:9d:
1f:df:d1:9a:4c:d9:9a:2b:e9:d6:3b:89:eb:70:5b:
de:f5:6e:02:94:36:ef:89:de:ac:b3:7c:83:f0:03:
d9:15:b9:31:99:29:62:60:09:f9:7f:1a:b2:a1:f6:
6d:70:ce:35:48:87:2a:6b:82:1d:e4:db:d2:5b:fe:
a0:62:ef:3a:c9:ae:e3:9a:37:e2:89:66:b7:ae:eb:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4E:FB:BD:01:03:BE:A1:AC:61:1F:4D:40:9F:35:AE:C9:E5:0A:1C
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:6a:bc:6e:fd:5c:96:7d:f8:32:4b:e3:f3:66:b8:37:2f:
6f:2b:3a:a0:5b:a8:ef:a0:9f:a6:db:ac:e6:ef:03:64:ff:5b:
4e:80:2f:48:8d:16:be:28:eb:84:ca:66:14:1a:a2:f3:77:26:
ec:4d:5d:5f:1a:47:ce:4c:a7:c4:90:5c:85:8d:e3:2b:e9:1e:
77:a4:09:3b:c1:0c:6e:a8:c1:66:a5:cb:fa:48:8e:6e:8f:fd:
80:a6:d5:df:9b:9b:3b:1f:8a:6f:f0:0f:be:6c:2e:ee:a2:e1:
8b:97:fd:73:48:b1:16:d0:56:91:4a:f2:03:f1:19:e9:3b:20:
36:3c:d4:e5:e8:4c:f0:1c:19:9e:2b:8a:b5:86:f9:bf:97:ff:
42:05:27:4f:e5:4f:bf:82:67:79:0e:0d:50:1b:f3:0f:8d:37:
6b:bd:c1:16:2e:49:a8:0f:19:03:e8:0e:7b:18:53:6d:c1:1c:
f2:6d:31:4b:34:54:06:3d:0a:40:7f:e3:cb:72:a8:c9:ae:4b:
30:79:14:be:19:c3:6f:c5:e2:2a:00:27:5a:45:d9:8a:00:ba:
21:c4:e2:d7:1f:28:1d:ad:c7:a0:eb:19:ec:43:bb:50:ec:69:
b2:07:ac:7c:27:54:fa:b4:f5:34:e4:10:42:db:74:75:fa:78:
d7:48:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:41:36 2026 by rpki-client