Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json)
Hash identifier: CYCdx+9E93rPL+LmwoAU4D0kAQFj9OydGMKHkNrEdtI=
Subject key identifier: DA:F9:1D:9B:33:C8:9E:19:43:21:A0:06:AB:E9:6D:6D:6A:FD:85:72
Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39
Certificate serial: 019D3865E297BB7BA76D5B8B411335835CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
Manifest number: 0346
Signing time: Sun 29 Mar 2026 07:01:34 +0000
Manifest this update: Sun 29 Mar 2026 07:01:34 +0000
Manifest next update: Mon 30 Mar 2026 07:01:34 +0000
Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: b/lkglZXdG6Ax1A+njHcBAw+fnCtLWZinL64kJzjBwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e2:97:bb:7b:a7:6d:5b:8b:41:13:35:83:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39
Validity
Not Before: Mar 29 07:01:34 2026 GMT
Not After : Mar 30 07:01:34 2026 GMT
Subject: CN=daf91d9b33c89e194321a006abe96d6d6afd8572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:52:95:39:4a:a3:85:2f:5a:70:d6:17:bf:
10:db:2c:87:79:71:0c:e7:bd:0a:0f:26:8f:c0:1b:
dc:24:2c:d1:9c:e3:d5:90:97:92:90:0a:8c:5a:e4:
28:00:ef:c7:ac:65:ee:68:36:b3:6f:f3:7c:64:cf:
ee:53:17:53:64:50:f7:2f:64:cb:a3:ba:8d:b2:e7:
13:d8:a0:ad:61:76:ad:3f:36:1d:89:bb:94:f3:ab:
2c:e5:26:13:ce:57:e7:83:3e:ba:80:95:79:68:d4:
56:7b:9d:0b:e7:67:aa:12:72:9f:da:ec:77:2a:6f:
f5:e4:c0:bb:6f:35:ab:21:f5:df:c2:db:9d:3c:19:
a8:44:ad:2e:a1:d9:92:8d:80:5d:5f:c0:fb:c4:f4:
86:87:b2:12:50:0d:19:ca:03:32:88:3b:e7:fd:79:
10:33:b9:dd:f8:f2:34:e5:93:cc:62:f2:77:1b:52:
ba:ad:7d:9f:a4:44:43:bb:63:9b:c1:e4:4a:79:4a:
43:ec:8e:d6:57:3d:83:0f:3b:52:01:5e:06:6f:81:
0c:fb:3a:6a:73:ee:ec:c9:e0:31:70:7b:af:e1:67:
73:ef:42:ae:db:3a:f9:2f:c4:98:03:f9:5c:72:bb:
b5:69:73:60:f3:22:96:5e:14:18:79:07:e3:a5:7c:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F9:1D:9B:33:C8:9E:19:43:21:A0:06:AB:E9:6D:6D:6A:FD:85:72
X509v3 Authority Key Identifier:
keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:35:64:b1:34:f6:3f:1a:c9:1a:54:aa:86:27:a6:6a:be:37:
d8:4b:02:ea:db:c3:10:c5:46:e5:34:6f:cb:6d:d6:81:8a:b9:
b4:d1:9b:ce:fa:9f:fc:ee:fa:32:77:1f:68:5d:23:bc:d0:de:
cd:cf:6d:4e:16:7d:73:89:ef:28:54:57:26:71:07:df:ba:17:
7f:d0:48:9c:1e:3f:59:2e:c8:36:9f:c3:db:20:60:a0:24:63:
b8:9d:4f:28:4a:e0:9a:f1:48:8d:c8:76:bb:06:74:c8:6b:64:
56:a2:c9:53:4c:52:ed:35:ca:0a:93:c4:ed:42:91:4e:f5:48:
b4:2c:71:3b:2d:32:07:6a:30:75:ac:2d:04:aa:b8:b8:71:77:
cf:66:eb:15:64:d4:a8:e5:0a:05:fc:85:e7:63:34:56:7a:61:
b9:d8:44:6e:f0:ef:47:9d:ff:9b:df:3f:c7:85:24:99:31:05:
14:30:cf:2c:00:a4:47:fe:fd:41:67:b0:bc:9b:c2:6d:92:69:
0e:be:c1:c8:4f:0c:fb:ee:79:1e:9d:d4:82:77:63:e0:2f:c2:
1a:66:45:67:99:e3:03:ca:9a:b8:a6:e8:2c:04:ce:70:14:ce:
88:f3:5a:25:39:02:13:ca:fd:64:40:d1:13:ce:0d:bd:ac:99:
04:f5:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:23 2026 by rpki-client