Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: YG7YGrATTsMxyEqNZJqMZSxFG22K50boEd1hZAJsUQs=
Subject key identifier: 5A:D6:65:1E:6F:AB:39:26:05:BD:59:7A:69:57:EA:F6:46:E8:9F:82
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019D37528F37CD6A6FB0BCA74AC18DA56689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 13D0
Signing time: Sun 29 Mar 2026 02:00:50 +0000
Manifest this update: Sun 29 Mar 2026 02:00:50 +0000
Manifest next update: Mon 30 Mar 2026 02:00:50 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: VUR7ZLiP9UrcWBIC0Ue4A0nEPo55s4soSMUejapHj4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:8f:37:cd:6a:6f:b0:bc:a7:4a:c1:8d:a5:66:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Mar 29 02:00:50 2026 GMT
Not After : Mar 30 02:00:50 2026 GMT
Subject: CN=5ad6651e6fab392605bd597a6957eaf646e89f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:0e:96:b6:a0:d9:e9:ba:8d:ce:09:2a:2a:
75:11:47:0a:2e:06:e6:0a:32:9f:7b:47:d8:7f:e8:
0c:fb:60:1a:4c:ef:1c:08:ab:d1:b0:88:4b:78:96:
48:dc:f9:e4:97:8a:98:98:65:7c:cd:a3:b8:1e:a8:
16:32:d4:d8:1f:d0:55:95:69:21:bb:34:4b:71:b6:
96:55:68:52:71:82:ae:52:52:4c:1a:d8:19:ed:ee:
a2:9f:d7:eb:96:c3:ba:6e:4e:34:de:15:ba:cb:1d:
00:a0:fd:ae:42:d6:eb:a1:bc:9d:fd:9d:0b:c7:7a:
c2:9a:f0:3e:d4:60:5e:60:4a:ca:ef:1b:4c:b0:4a:
11:c4:95:36:5f:5a:51:28:aa:af:71:46:3e:f9:20:
d7:6c:5e:bc:23:4f:84:eb:24:6c:88:eb:7a:a9:78:
6e:47:5f:a7:ff:b1:56:53:5e:6b:f0:a0:72:98:f9:
b7:69:3b:7e:a5:db:e1:fe:76:d2:ca:d7:5e:06:8d:
40:45:af:59:a5:01:8d:bf:6c:95:99:c1:76:bb:a7:
48:44:1c:80:f3:18:3d:30:2c:fd:ba:58:10:40:14:
b2:38:b4:0d:e7:6c:bd:7b:0e:c8:e0:12:e4:23:cf:
fb:08:c7:59:fa:17:03:09:b8:ad:4f:93:1c:41:6a:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:65:1E:6F:AB:39:26:05:BD:59:7A:69:57:EA:F6:46:E8:9F:82
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:38:ca:3f:dd:eb:58:59:eb:fb:a6:e1:7d:ef:f3:41:8a:
f3:f1:7e:60:fa:19:4d:11:d3:95:91:c4:3b:b9:46:34:3f:72:
af:40:26:34:aa:c4:21:64:85:27:c8:88:35:84:f6:98:95:7c:
e1:ed:4b:3d:0f:22:5b:b3:c0:1e:c4:88:48:a3:7f:b3:65:81:
33:37:c7:9a:22:47:2e:64:a5:9b:50:ac:74:e6:b2:13:b9:63:
13:3e:72:1b:2c:f9:eb:91:92:f9:26:d8:56:84:32:af:ca:0f:
59:ab:98:45:ef:55:c6:16:76:d2:9c:37:40:e1:7f:94:6d:74:
56:a2:1d:d7:8d:2f:1b:c4:ac:6d:7f:5f:0c:3c:6b:0a:39:45:
78:20:55:7d:dd:03:fe:2d:36:e0:03:99:30:7e:5e:70:0d:f3:
39:6b:be:fa:0c:e7:ae:d8:b0:a2:fb:71:94:43:f5:d3:cb:d9:
45:d4:d9:8b:64:1a:9c:26:61:7c:85:2e:61:7c:70:8a:64:9b:
3a:4a:a3:08:7e:5d:07:bb:fb:02:7f:6e:f7:50:fd:58:2e:ae:
fb:99:4c:53:83:42:f7:01:f1:fe:43:53:03:32:fc:33:aa:4a:
f9:e1:82:af:ca:98:dc:a6:96:0e:dd:ad:25:e6:e7:8f:29:5c:
a3:22:55:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:49 2026 by rpki-client