Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: 1XV68NPwwWDVa6BlhiRQ/UrGMJhMX8677WOWJed73EI=
Subject key identifier: BF:39:9D:C9:D8:E0:9C:42:55:9D:58:F4:E8:2D:4D:DA:43:04:69:FC
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 019D37C02841212A8C77D401945B7F4AF0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 0985
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: 83o2pvt+RB7nS4D6VkL46iMtWDeo79Y6/fkxB2MW5qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:28:41:21:2a:8c:77:d4:01:94:5b:7f:4a:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=bf399dc9d8e09c42559d58f4e82d4dda430469fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:d1:c9:de:1d:81:82:be:0c:d2:21:5e:e8:
76:77:c0:fa:1f:3f:89:db:b2:b6:cb:04:78:20:3b:
e8:09:51:a4:7b:d2:08:8b:76:46:62:84:73:4e:87:
6d:0e:f7:3e:7c:b9:41:d7:6a:42:77:6b:c5:1d:b8:
26:3a:52:b8:92:7b:99:aa:e1:2e:b7:ab:9f:9b:0f:
9b:7b:cc:25:cf:2c:b2:57:a1:73:13:6f:cd:6d:75:
83:b3:0f:df:ac:5d:f2:35:28:cb:18:52:15:a6:b5:
df:00:4e:99:0c:9d:d5:3a:a7:79:0a:6e:f5:c9:51:
09:4d:83:6d:51:f7:19:3b:8e:d0:35:30:fd:b5:20:
0a:c9:00:96:62:35:76:3d:c0:68:9f:18:ff:31:fc:
62:4a:36:8f:96:0d:fd:f2:85:97:6e:51:ed:4d:a3:
fa:c3:a4:ab:88:05:5c:00:b9:f8:43:58:a0:de:24:
43:4f:9a:ac:a0:75:cc:3b:f0:65:92:4e:52:87:a2:
39:1d:5a:95:89:44:22:91:18:5b:0a:bb:59:e0:d0:
43:24:b9:64:5c:ef:c0:cb:35:86:a3:f6:d2:35:89:
3f:5b:73:33:3d:7f:65:75:c1:c9:4a:47:d1:e4:36:
5b:9b:67:a8:61:a5:e8:45:ea:db:9d:86:8c:47:d2:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:9D:C9:D8:E0:9C:42:55:9D:58:F4:E8:2D:4D:DA:43:04:69:FC
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:b8:56:11:46:e0:78:1b:8c:f9:f5:71:9c:38:b1:cc:37:
9f:10:9f:0d:72:04:6a:35:6b:d1:81:dc:77:e2:f3:62:25:fd:
0f:cc:68:7e:10:cb:75:80:18:c5:c8:a4:0d:3e:a0:31:f8:94:
a4:ae:7f:29:14:ed:dd:35:d1:38:5c:36:4a:50:f3:ab:23:15:
44:f0:ce:de:2f:c2:4a:e7:f0:bd:f3:7c:cd:2e:c3:c5:8d:73:
d1:2d:d8:ad:7f:74:c6:47:20:a5:da:a0:68:be:1a:09:e3:d3:
81:37:c5:ba:15:3f:1e:98:db:19:14:40:df:70:c1:5e:5a:28:
73:d4:74:f5:a2:6c:87:5a:1e:9c:f1:fb:40:fc:50:e9:e1:5b:
fc:24:75:d9:e7:e2:b4:51:63:f6:11:ff:f3:a7:b2:9b:80:93:
71:91:a1:dd:48:ea:a8:cd:a9:ed:c9:40:a0:70:52:ce:96:69:
dd:03:4f:75:10:04:7e:4a:20:14:5e:c0:92:17:9a:8c:aa:61:
f1:65:4f:60:e7:db:3a:31:a5:2b:62:db:aa:c7:03:7a:08:41:
8d:d1:0b:63:6b:b3:88:91:97:1a:34:cf:a1:cf:38:29:6d:77:
1d:9e:a5:bd:e2:e5:50:04:f7:d6:12:cc:97:12:60:c1:e6:f5:
3a:7e:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:15 2026 by rpki-client