Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
File: jDJOtM17M3hJro0yb8iZAvUDpMY.mft (raw, json)
Hash identifier: RMvqhukdu4HOXiH66K/CJrjmppNRIMzP92s0peZY2iA=
Subject key identifier: 8D:5F:5C:72:C7:9C:C1:8B:DD:77:A2:D8:40:30:EF:B0:49:47:92:B6
Authority key identifier: 8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
Certificate issuer: /CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Certificate serial: 019D37F6F229ADECC73886E5E5EF8A0D22C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: jDJOtM17M3hJro0yb8iZAvUDpMY.crl (hash: IVTvQyVCCqJOmbLF+lWbhi5J/MDPNL2Rm7g7f8/79aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f2:29:ad:ec:c7:38:86:e5:e5:ef:8a:0d:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c324eb4cd7b337849ae8d326fc89902f503a4c6
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=8d5f5c72c79cc18bdd77a2d84030efb0494792b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:03:9a:91:95:21:2d:5f:fe:37:56:93:48:be:
7d:4a:2f:a1:63:0e:a3:c2:25:1e:8c:83:03:b5:8a:
30:23:78:53:30:23:9f:fc:77:fa:17:16:bb:a3:50:
45:a2:f2:d9:46:36:a3:dd:c8:3c:f4:3a:95:7b:a6:
6b:e6:d6:fd:f5:65:c6:6a:42:9e:ff:cb:14:e5:d1:
6c:12:a1:ad:a2:a4:8a:df:4b:a4:67:ab:79:b6:0c:
bb:09:4d:e4:2a:e4:51:8e:0a:e9:8f:19:5a:ab:46:
61:e4:61:a0:da:40:f1:c9:23:96:21:2f:f6:01:fa:
f2:ee:7a:27:a1:7b:42:a0:cf:15:c1:83:14:d6:df:
0c:05:52:09:03:7c:16:fe:e0:0f:1e:49:0f:6c:a1:
11:c0:48:c5:65:9c:ee:a9:58:be:a7:0e:1f:4a:f0:
54:3c:6f:07:d4:dc:6d:f2:a3:b2:bd:e4:e4:fc:de:
4c:80:40:85:c2:03:9c:69:f8:81:35:84:48:8e:2f:
71:a5:3b:47:f6:87:b9:6b:90:2d:77:21:e2:59:cb:
6c:34:71:32:e7:1b:84:05:b7:4e:49:07:06:fd:71:
f9:3d:56:02:7c:e4:fd:63:3b:0e:e2:67:23:b7:07:
4b:c0:e8:d9:e8:ac:1b:d5:20:25:b1:5e:f3:62:cc:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:5C:72:C7:9C:C1:8B:DD:77:A2:D8:40:30:EF:B0:49:47:92:B6
X509v3 Authority Key Identifier:
keyid:8C:32:4E:B4:CD:7B:33:78:49:AE:8D:32:6F:C8:99:02:F5:03:A4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDJOtM17M3hJro0yb8iZAvUDpMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bf293-5f0a-47e7-9874-139636b1e263/1/jDJOtM17M3hJro0yb8iZAvUDpMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d0:3c:10:0b:1c:dd:d6:4c:11:24:3c:a8:5d:34:98:cf:bf:
79:1c:46:3e:b3:97:42:b4:7d:89:cc:97:49:46:28:35:a8:3e:
d6:62:31:89:30:e9:41:38:a2:57:a9:a8:27:d7:7b:a6:d3:b0:
78:00:20:55:a0:c1:e6:b6:e0:29:96:a2:08:04:a4:9e:e4:55:
36:56:f6:de:b8:9d:c5:5f:c7:30:7e:01:b1:69:3c:ce:a0:fa:
e0:01:30:24:b2:49:35:5b:ec:63:13:d5:ad:24:27:83:55:f4:
a3:52:1e:b0:bf:43:8b:11:0c:b3:d3:59:1f:29:10:2b:dc:e0:
f4:b1:6c:8a:19:57:f8:13:85:d1:61:73:0b:14:0c:d2:29:9c:
fb:e4:df:1f:d5:58:74:27:a6:a1:57:be:4b:a9:a4:2f:d2:e3:
57:ed:11:24:6f:6f:92:f2:9b:9e:1c:db:8c:0c:3d:c7:1a:70:
10:47:05:3e:de:1c:dd:20:ed:94:08:9a:15:5d:f0:81:ff:5e:
3c:17:b6:61:c9:8d:00:e2:53:a2:a1:c6:f8:16:bd:b9:ee:32:
c1:d5:cf:b0:a6:03:d1:9e:67:b9:8f:4a:08:2e:6d:83:82:bd:
cf:0b:b2:a0:26:bf:e5:3f:69:fa:29:03:33:ee:3b:29:12:c3:
62:08:7d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:36 2026 by rpki-client