Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: 7aGEm+6ksqekqwHHIq11OVVe4ECPS13km3AXO4Ta3Qc=
Subject key identifier: 01:3E:90:B1:97:0A:20:31:D7:46:3A:ED:DF:1D:B7:CB:F7:97:F3:80
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 019D07AFDFEE65918E1883884EECD3037CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 16E8
Signing time: Thu 19 Mar 2026 20:00:59 +0000
Manifest this update: Thu 19 Mar 2026 20:00:59 +0000
Manifest next update: Fri 20 Mar 2026 20:00:59 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: YBS0qHJPfe7ptgiBUiMeiMFJ4r+FXX583HcVdmhGc/g=)
2: QT5YaQtwh10kjLMseFaZ5StOfCw.asa (hash: mXFjq/NajihGSXsqBXu5vBTGi2iI8iMdEQGHWiYPM84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:af:df:ee:65:91:8e:18:83:88:4e:ec:d3:03:7c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Mar 19 20:00:59 2026 GMT
Not After : Mar 20 20:00:59 2026 GMT
Subject: CN=013e90b1970a2031d7463aeddf1db7cbf797f380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:f9:51:29:96:0c:0f:d9:e4:e5:18:4a:6c:
77:82:ca:68:14:8d:4e:f4:92:c1:e3:a5:b8:0b:93:
0e:25:f3:59:ba:3c:9c:b3:3e:41:ec:f3:45:25:4e:
1b:d4:a3:d0:16:79:0d:bf:2e:5d:df:ff:b3:f0:30:
b7:e9:66:16:e4:78:60:8c:1f:11:a6:cf:40:23:b0:
98:45:6f:25:b1:e4:98:38:a9:83:b1:a6:1b:99:1e:
52:90:d3:3a:1c:50:9f:b6:bc:ee:12:a8:d5:61:d0:
8e:b3:29:5d:cd:66:50:fd:dd:f4:5b:57:b8:63:78:
75:57:68:22:4d:0a:a2:c9:14:db:13:69:9c:ca:d1:
2f:a7:7f:13:76:72:b1:44:53:79:82:a3:c2:b6:e8:
7b:1a:48:56:d5:c2:c7:f0:cc:39:75:b0:86:90:b8:
d5:9b:eb:d5:63:5a:44:6e:43:9b:25:8e:23:2b:52:
89:96:8b:2f:ff:36:4b:54:6b:ea:80:44:7b:60:5f:
70:fe:f4:d5:29:14:51:df:1c:f0:71:e6:a4:37:6d:
3d:ce:7f:c1:c8:32:86:97:10:da:f4:c6:38:cd:54:
bc:02:69:05:9f:6a:9b:c9:c1:6c:a6:a2:b6:3f:1b:
8f:4e:13:51:45:b0:2b:9e:e1:b3:e1:e0:2f:b3:e1:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:90:B1:97:0A:20:31:D7:46:3A:ED:DF:1D:B7:CB:F7:97:F3:80
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ed:76:79:83:32:f5:f7:82:c5:af:5f:25:d6:7e:69:7f:9b:
56:a2:11:f7:28:db:c8:dc:44:2b:da:06:cb:d1:18:e5:3b:ce:
7b:44:92:05:cf:e4:b8:e2:2d:f0:ce:93:f5:26:7e:de:08:85:
dd:f7:e8:0a:37:45:84:32:8f:92:0c:3a:74:22:e3:d9:f9:6b:
98:46:a2:9b:0b:b1:1a:eb:10:0f:3c:81:5a:1f:5d:1f:af:9e:
a4:59:d0:81:93:55:cf:8d:58:2c:30:8f:da:a4:bc:43:fe:5e:
ae:24:4e:90:2e:30:6a:59:45:cb:65:cd:e4:59:9a:08:09:bd:
54:4d:e9:84:d3:d5:c5:55:d8:dc:5f:ce:15:a9:74:da:e2:35:
e5:90:a9:f8:fb:59:2b:6d:3f:37:e6:af:b2:b8:69:ae:c9:c0:
f3:5e:04:5a:6b:fb:11:6e:3b:d7:ba:ef:b5:b7:35:e5:8f:d1:
5a:45:ce:b6:91:0d:c5:24:38:3b:3d:8f:62:28:52:8a:f3:9a:
9a:fd:21:1c:ab:8e:cf:4e:10:73:9f:fd:9d:40:22:71:df:1a:
dc:5f:ee:e0:65:bc:4e:1e:71:1a:e8:53:1a:69:55:dc:f1:83:
7d:a9:70:8b:ab:f1:35:f0:d1:09:77:a5:e2:67:f3:35:14:fb:
70:aa:c4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:54:38 2026 by rpki-client