Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
File: jmcNnjgoGVjuocw46s67vcM4HTY.mft (raw, json)
Hash identifier: qiH/QgD1p3rH4DfU+4GV1jORsUlH/kIkXfwK+vtIg8s=
Subject key identifier: 90:98:ED:F7:BA:AA:21:AA:B1:AA:60:E0:20:AD:24:6E:CA:1F:90:33
Authority key identifier: 8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
Certificate issuer: /CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Certificate serial: 01A0B0BEAFCC3559B02D9124B5A6FB14A736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
Manifest number: 0F35
Signing time: Thu 17 Sep 2026 19:01:21 +0000
Manifest this update: Thu 17 Sep 2026 19:01:21 +0000
Manifest next update: Fri 18 Sep 2026 19:01:21 +0000
Files and hashes: 1: jmcNnjgoGVjuocw46s67vcM4HTY.crl (hash: zPWyvVTJNfmy6qFW4dAC/fDqnycyrzwMM6upSS9GsZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:be:af:cc:35:59:b0:2d:91:24:b5:a6:fb:14:a7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e670d9e38281958eea1cc38eacebbbdc3381d36
Validity
Not Before: Sep 17 19:01:21 2026 GMT
Not After : Sep 18 19:01:21 2026 GMT
Subject: CN=9098edf7baaa21aab1aa60e020ad246eca1f9033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:3b:67:d2:35:67:0e:0f:c6:c3:b8:88:f4:
1d:f2:f9:14:58:a5:93:9e:67:d3:d4:84:69:5b:04:
fe:79:02:e9:0c:4a:04:3c:91:ee:9c:19:d5:dc:81:
89:0a:4d:8a:ea:ec:7c:fb:07:f7:a5:88:88:b7:68:
36:ee:5e:6c:2d:9a:80:56:bc:4a:2d:94:aa:e9:c3:
e1:e4:9e:80:3f:72:c2:11:fe:8e:85:0a:ea:46:ba:
6b:57:f3:e4:70:9d:40:31:79:f8:87:23:27:96:65:
38:3d:6d:39:82:5f:20:4f:fb:88:d3:58:7d:32:ba:
c1:66:81:85:fa:fc:df:5f:14:66:d7:9f:86:5a:bf:
b7:3b:d5:88:5e:59:eb:46:a7:f6:2b:ce:be:05:c4:
fa:52:b7:d4:24:3b:4b:08:2d:e1:be:fc:1a:4e:13:
9b:05:14:55:03:ec:77:68:ed:f9:1e:e1:2b:46:10:
2c:f5:5b:6a:d3:4c:57:e1:b1:5a:89:d7:ea:e3:16:
87:ee:a7:5b:42:aa:31:28:37:42:45:c1:07:f6:b8:
3e:ac:fe:96:76:c6:8b:5c:53:c2:f4:a9:84:14:b8:
74:23:5c:39:d8:b6:27:51:79:65:5a:6a:9b:8c:07:
e6:f6:7a:ca:5b:34:4f:f8:5f:41:59:79:85:e4:73:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:ED:F7:BA:AA:21:AA:B1:AA:60:E0:20:AD:24:6E:CA:1F:90:33
X509v3 Authority Key Identifier:
keyid:8E:67:0D:9E:38:28:19:58:EE:A1:CC:38:EA:CE:BB:BD:C3:38:1D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmcNnjgoGVjuocw46s67vcM4HTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5a1cad-0c65-4800-8865-cca9df6e19e3/1/jmcNnjgoGVjuocw46s67vcM4HTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a4:cb:2a:c5:38:1d:bf:8f:13:2a:30:db:7c:64:74:e0:fa:
ee:41:89:c1:0d:1e:5d:36:06:d2:50:c0:b1:08:39:3a:a3:ae:
75:22:c6:c0:bf:cc:6f:b7:d6:e1:08:8f:a3:45:98:d1:f4:60:
6c:04:d3:ef:b6:6a:35:dc:f8:e9:5a:e0:7f:10:ea:3a:ba:ac:
65:9b:e5:00:40:dc:7b:ae:1b:16:cb:9e:06:fb:1e:75:fe:a7:
17:01:fb:11:df:44:2c:b3:b4:80:3e:9d:fd:92:ae:58:6e:63:
08:3c:a3:14:c1:69:6c:72:e4:f5:41:95:3f:96:9f:c3:7e:5e:
c3:94:be:f3:84:9c:48:36:cb:56:1e:f4:52:e7:54:eb:eb:52:
32:a2:ba:94:71:3b:72:7a:20:48:c6:3b:eb:8b:16:90:9c:5e:
5b:87:82:42:a3:46:9d:3f:e6:6e:d4:c4:b2:ee:39:c5:1a:3a:
7d:3c:fc:ab:76:35:d8:3e:12:db:8a:93:40:c4:3c:d6:4e:57:
75:90:7e:d7:b3:9f:1f:fd:24:7a:3c:c7:cb:7d:5a:9a:67:d7:
09:bf:89:be:3c:91:e5:02:65:f8:fb:57:b4:af:db:76:08:90:
e0:90:f3:6a:db:3d:01:2c:6d:25:1c:9d:2f:65:83:f0:63:51:
50:e3:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:30:41 2026 by rpki-client