Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: vgkh39FX/ykR+AElX/IEpHdC1p/gJ6wmAhdI5OXu4rI=
Subject key identifier: 69:AF:09:F7:D1:0A:62:14:8D:88:38:05:0D:DE:A7:4C:AC:0F:68:B4
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 019D394158989B9E02488BFE376C382EC9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 1390
Signing time: Sun 29 Mar 2026 11:01:16 +0000
Manifest this update: Sun 29 Mar 2026 11:01:16 +0000
Manifest next update: Mon 30 Mar 2026 11:01:16 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: s8iaBUdnVfq6d5erYk3Wzme+SYxsJgMuCei4m3OLb9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:58:98:9b:9e:02:48:8b:fe:37:6c:38:2e:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Mar 29 11:01:16 2026 GMT
Not After : Mar 30 11:01:16 2026 GMT
Subject: CN=69af09f7d10a62148d8838050ddea74cac0f68b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:88:41:8a:a1:cd:13:a9:29:76:d3:74:53:
ea:57:1b:02:f0:6a:13:43:1e:6b:05:ff:5e:7e:50:
a6:ee:ef:19:cb:7d:55:3d:8c:be:50:0d:91:4b:e2:
dd:29:53:d1:2d:e4:f3:5e:03:bb:ea:d3:06:fc:6f:
51:d2:a2:f2:5f:66:b8:12:02:78:48:b7:33:e0:27:
1e:ba:19:7d:55:7f:d0:5c:61:2d:2a:92:e3:2a:f6:
e7:55:d7:04:d8:cc:f7:1b:f5:07:4e:40:07:dd:53:
2a:ba:41:04:02:28:39:a2:58:73:3a:61:0d:2d:e4:
17:98:dd:21:35:79:d2:c8:67:22:2d:51:7e:f5:5a:
06:93:39:72:ab:97:5b:ea:77:a8:b7:c5:1e:0b:0b:
40:57:85:49:2d:54:b8:a7:9f:73:8f:0f:21:d4:ce:
50:fb:6e:41:dd:ab:2d:1f:e6:5b:e0:8a:fb:3a:5f:
a5:37:d0:3c:c5:a0:38:56:18:d1:f3:d1:65:c6:ce:
e8:da:37:06:50:13:e3:22:c8:07:96:ca:5a:0a:81:
87:1a:4f:dc:4f:88:01:f8:6d:cd:ce:7d:55:d3:fc:
8f:2f:b7:87:fc:4d:24:65:e8:31:52:3c:1e:b5:88:
68:0f:6e:67:8d:c0:8f:de:88:b2:e5:b7:20:a0:79:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AF:09:F7:D1:0A:62:14:8D:88:38:05:0D:DE:A7:4C:AC:0F:68:B4
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:17:af:e4:50:f3:bf:09:dd:0e:ea:b6:df:dc:0b:a8:8e:
78:14:b5:87:bb:85:04:e3:91:c6:3c:f2:be:08:41:5a:3b:60:
f2:bb:42:0e:5c:0f:74:96:44:ba:4d:9b:3b:49:c7:1b:e4:0b:
6b:18:48:78:d7:3b:cf:d8:96:5d:80:85:da:62:42:10:23:62:
1e:f5:ea:11:20:db:07:f9:93:e7:27:fd:d8:14:1f:87:11:40:
89:19:db:ab:3a:8f:fd:32:1a:02:f7:1a:75:0d:67:43:5c:ca:
cf:5c:5b:a9:c8:8e:b5:84:2c:23:58:29:f0:d1:aa:4e:b3:6b:
d1:7d:c6:71:ea:c3:fd:a1:c3:e0:c4:36:2a:95:ac:ea:ee:d7:
37:c8:b3:30:db:a4:47:17:43:aa:0c:f5:85:cb:e0:4d:84:c3:
06:78:ac:dd:b0:d5:43:a6:60:b3:33:7e:98:10:e0:cb:5d:ef:
0e:16:8a:c4:1f:1b:d2:2d:23:23:39:fd:ec:7c:f1:48:fc:1d:
92:bc:8a:eb:60:5a:e0:8e:c8:bb:26:22:4d:27:fb:b5:b1:3a:
6a:d4:6b:1d:ef:bc:ea:d3:b1:88:a3:71:78:d5:b1:8c:61:0b:
f1:58:4f:29:9c:fa:4e:11:13:e7:e6:da:5a:e6:4f:a9:27:18:
d0:ad:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:12 2026 by rpki-client