Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: J++Rb20TLGhiZQhR6Jq1BwlU109V/Z9FQ69oBMXhT6E=
Subject key identifier: F3:6F:4D:A8:C9:32:F5:67:83:AC:AE:A6:41:3B:77:3F:61:EF:60:80
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 019D38D37E27927CE2C0210B695B4AB756EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 0609
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: SapNiqlHzcgyqTdmvvPCjJ23krqf4huuqcsN2aEoOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7e:27:92:7c:e2:c0:21:0b:69:5b:4a:b7:56:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=f36f4da8c932f56783acaea6413b773f61ef6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:97:8e:d5:8b:ff:21:f3:e8:9d:47:cf:1d:
b4:e8:25:18:e0:67:20:84:6b:32:c3:14:af:9c:4d:
7f:66:78:18:a3:44:7a:ab:c2:b0:8a:02:3c:6a:9a:
ef:b4:ab:41:ce:f8:94:1f:13:57:38:11:5f:51:a5:
e4:18:c1:ed:06:d5:aa:51:0f:60:64:f8:c0:12:81:
71:4e:35:27:5a:ec:eb:4f:06:31:8b:40:99:18:e5:
ca:bd:ed:52:48:54:e2:9d:25:bd:eb:dc:e9:89:07:
62:ae:af:f9:31:18:94:e7:95:f9:4a:80:d4:e6:17:
e7:5a:91:8c:29:be:17:13:9c:b6:1b:86:90:18:07:
45:3e:85:36:85:7b:55:e3:91:07:fc:85:94:f4:b3:
80:a5:3b:b4:0d:22:9e:c2:7e:8d:c8:d7:60:6b:a9:
db:61:fc:19:93:89:cd:ad:a3:af:67:f2:3b:a2:c2:
8d:4b:9e:86:22:2b:89:6f:d6:9d:0a:5e:80:25:28:
17:f9:d8:b8:29:c8:92:98:de:20:54:4a:06:d5:ee:
9c:3e:82:12:ee:40:e0:72:4a:79:ad:ab:f4:52:87:
e2:97:ca:da:2d:dd:01:ab:4d:6e:f8:a9:14:77:a9:
6f:c6:25:b7:4c:f8:12:63:33:d0:e8:6c:86:4a:89:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:4D:A8:C9:32:F5:67:83:AC:AE:A6:41:3B:77:3F:61:EF:60:80
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b6:1e:52:16:c7:0c:cd:2c:ac:e7:03:9f:7e:e7:50:c8:c4:
96:69:08:0b:2f:c5:20:55:ce:23:b0:e7:4e:d5:3c:b4:d6:ad:
da:3d:3f:49:a4:90:e1:2d:f6:73:1c:43:28:8e:15:2b:00:96:
81:fd:2e:5b:6f:e4:20:e1:b1:d4:ae:4b:fc:ca:34:21:f1:ff:
af:14:00:1c:eb:88:04:58:ef:d5:73:52:ab:d8:46:40:fa:8a:
fb:42:23:91:7c:9e:c8:35:06:be:ac:19:94:ec:73:39:ea:49:
19:d1:1b:af:8c:71:9b:d5:20:f0:0a:b2:d0:7d:49:42:35:1b:
85:b0:29:b9:9a:63:1c:ab:b4:d1:86:3a:71:a6:f7:87:14:ee:
f3:a7:3b:94:c5:87:7f:2a:5e:75:b4:a0:13:6e:fc:46:4f:56:
67:b8:65:a3:52:b0:d6:ab:39:ab:b4:cc:65:fc:3b:50:d3:2d:
b4:00:21:df:c0:76:a4:7b:63:3c:e7:3a:aa:ad:0d:3a:18:c7:
fe:ba:76:42:d1:64:93:70:72:58:36:66:96:5f:da:5c:4f:52:
01:f1:7e:f4:45:5f:b0:f8:0d:2f:53:c7:35:79:a1:b8:26:e8:
a7:2e:7c:04:10:21:21:95:26:3e:4a:9f:b3:e7:dc:38:d6:fe:
99:10:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client