Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File: JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier: r0TLkR0559fVxTLpcqA5FFmtvip9yHUj6t8VYK4r5kc=
Subject key identifier: 36:A7:7E:F8:27:FD:F7:21:76:A5:F1:0C:E9:C0:BA:F9:C9:64:94:2E
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer: /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial: 019D38D35895C1CF932E84BF06C185137656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: jpA1EOD7MX/N9GbNARMpaMT5ZDgmtnZ1vYZnreD6Pc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:58:95:c1:cf:93:2e:84:bf:06:c1:85:13:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=36a77ef827fdf72176a5f10ce9c0baf9c964942e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:e9:b6:cd:86:98:aa:3e:34:b9:50:67:f9:
2b:db:c7:f6:db:9c:93:07:89:4d:03:90:ec:34:51:
9d:cc:60:4b:3d:2c:a5:c3:da:06:0f:d2:5f:7d:ab:
40:b3:46:36:d0:ff:3d:99:bb:03:25:53:0c:24:6d:
7b:23:98:72:a5:a5:88:15:7e:1e:03:bb:b2:c5:08:
c7:b1:9c:37:9a:07:c9:9a:c5:ea:8c:ad:dc:bc:bb:
6e:cd:ee:ee:ef:4a:18:5e:5e:75:7e:b8:ce:9f:15:
d9:be:15:e5:c8:93:fa:aa:87:22:aa:c1:dd:b7:09:
f0:e9:0b:0e:1a:e9:00:47:7b:4d:ac:01:3a:f2:b2:
0d:48:8f:ff:0f:9a:69:65:16:ae:c7:25:66:6e:ef:
8e:7f:ba:df:19:4a:2d:9e:c6:e2:93:49:f9:e8:8b:
f4:f8:a9:47:ea:62:10:10:a1:d5:82:26:56:03:08:
dd:00:84:27:7d:a2:1f:9b:8b:b7:29:95:50:11:01:
56:56:07:94:26:70:e8:04:c3:83:9f:01:c9:2e:e7:
a7:9a:85:78:ad:61:02:77:c9:55:e2:1f:05:5c:77:
04:b7:ae:d4:86:df:6b:f0:bc:e2:30:a6:54:79:60:
c3:5e:8b:bd:a6:37:00:80:3f:b2:08:59:f4:e7:79:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:7E:F8:27:FD:F7:21:76:A5:F1:0C:E9:C0:BA:F9:C9:64:94:2E
X509v3 Authority Key Identifier:
keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:32:0b:90:79:80:d9:13:7f:43:54:c5:62:e0:db:22:87:b4:
e5:21:3b:76:2c:3a:46:d4:59:56:1a:14:ad:44:33:47:a3:50:
c2:ee:64:14:8b:b2:40:ae:6d:48:72:95:9c:d4:3b:a1:f2:55:
83:08:e2:bb:fa:c9:e5:ab:3f:7f:71:e4:af:77:cb:d1:70:11:
b1:10:28:84:f8:2f:6a:bf:13:ab:56:52:64:4b:8e:cb:d0:c2:
23:aa:6e:77:93:0d:24:b6:70:a3:2f:d6:2c:2d:74:56:de:05:
ae:cb:31:a3:9f:80:7c:51:82:10:97:a0:08:80:2e:b8:c5:f2:
66:e4:f4:a1:1c:b8:d1:c8:0f:ba:c4:62:5a:a5:81:2e:50:18:
a7:bd:bf:77:98:52:a7:38:ca:f0:bc:e4:e8:66:33:bb:9c:90:
30:df:5f:2b:c8:f7:4a:64:92:be:2d:4e:9d:f5:7a:01:8b:5e:
50:cc:fd:16:e1:f9:c2:cc:41:aa:74:ac:73:30:a8:b6:3e:95:
d9:27:58:1d:ef:7c:72:18:47:c3:29:db:90:03:50:7e:95:eb:
6d:a8:76:83:2a:a2:6c:b0:55:2c:90:e1:1d:3d:29:2f:3b:b2:
52:b2:29:15:6e:b0:70:08:f8:d0:ef:11:d8:2a:e7:57:a0:d9:
45:6c:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:07 2026 by rpki-client