Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: bmbP1HP+6NAAG/MzPxFQotp34jp/dNIt9ifTIkirO6M=
Subject key identifier: C7:B5:69:87:49:B2:9F:D8:26:57:C4:72:05:49:BF:AC:6A:7E:D1:08
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019D386561D497F546A1CF41DB4F0C48878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: NC+TsSgyMxfcLW2akj4G7qARrw7aurjy6/f0rtXzLxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:61:d4:97:f5:46:a1:cf:41:db:4f:0c:48:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=c7b5698749b29fd82657c4720549bfac6a7ed108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:c2:2d:f9:47:b5:ab:f4:bb:ab:b2:b7:c3:
70:39:8c:c9:04:d8:99:0d:93:8b:44:41:ba:fd:ef:
01:dc:c7:f3:46:4b:50:36:f9:87:a9:4a:c0:13:b5:
66:b7:b7:29:60:5c:8a:8f:26:42:5c:68:7c:55:12:
d0:9e:3c:f8:cf:36:34:ca:d1:c3:9b:93:37:8e:d3:
30:4b:e6:a0:f0:dd:69:f0:e4:dc:61:83:61:5a:bf:
5c:2f:97:bf:49:02:7b:19:f4:bf:fe:f0:82:f2:7f:
87:8e:78:0b:ff:ed:f2:4f:a2:cf:f2:e8:b1:b6:66:
dc:ad:d7:27:f1:04:29:2c:3f:41:5f:19:4c:da:8e:
c0:d8:db:fe:43:83:66:6c:3d:53:7e:79:bb:04:a6:
5c:a1:72:4e:c3:0a:38:0a:3e:fe:1c:e6:f8:0a:49:
5c:46:57:01:15:93:b0:bb:e4:c1:6f:60:0f:9c:46:
61:20:32:6a:5f:c7:47:93:b0:b4:fe:5c:9c:a9:f1:
0f:0a:fd:1f:81:d0:6a:90:99:15:2a:27:f4:73:31:
f9:8d:8f:86:8b:82:fb:51:0e:23:cc:c8:e6:1f:9b:
73:7d:8f:1e:48:a4:bf:42:3f:fe:ed:a5:cb:a7:d7:
dd:b1:e7:5c:34:62:a9:03:da:e3:f2:35:09:f8:1b:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:69:87:49:B2:9F:D8:26:57:C4:72:05:49:BF:AC:6A:7E:D1:08
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a3:a7:5d:dd:aa:98:52:4b:a6:29:ce:13:6d:bc:14:91:69:
54:80:7e:11:21:4c:34:80:df:43:10:cf:6c:53:d6:9a:0d:97:
0c:51:1c:45:c4:14:42:a1:10:aa:a7:80:47:ea:99:86:4c:4f:
76:6b:74:ab:e6:7e:b2:a4:45:58:5e:2f:e3:79:04:a7:a1:51:
27:48:ec:b2:63:9a:0a:8f:fb:58:e8:0b:62:6a:b6:4d:1c:65:
ac:38:13:12:fd:bb:4e:85:60:92:0d:91:19:b8:d5:04:c7:81:
a0:ec:cf:9f:dc:9f:a1:08:72:e1:5a:da:fd:b3:e1:87:fd:30:
4a:51:a0:b1:47:38:62:98:ca:75:77:5f:e0:ee:c8:1a:a4:f8:
15:af:31:70:6a:ec:86:47:27:0c:3e:83:ad:d2:32:f3:45:cd:
28:06:27:96:57:4f:ca:86:18:1f:0b:8b:5d:46:7f:11:41:0c:
b5:91:95:74:53:95:48:bd:a7:bb:bc:cc:c0:41:bd:6c:4c:1c:
0b:b0:05:34:30:3c:12:1f:e1:5b:f7:a1:fc:e5:f7:b1:f2:0f:
5d:83:e5:4b:49:a1:04:f6:91:5e:3f:36:2c:e3:31:bf:00:90:
a2:f9:b9:10:89:0a:f4:4b:12:d9:b9:fc:01:46:44:d0:f2:20:
9c:2a:d4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWHUl/VGoc9B208MSIeKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjYwMzI5MDcwMTAxWhcNMjYwMzMwMDcwMTAxWjAzMTEwLwYDVQQD
EyhjN2I1Njk4NzQ5YjI5ZmQ4MjY1N2M0NzIwNTQ5YmZhYzZhN2VkMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZrCLflHtav0u6uyt8NwOYzJBNiZ
DZOLREG6/e8B3MfzRktQNvmHqUrAE7Vmt7cpYFyKjyZCXGh8VRLQnjz4zzY0ytHD
m5M3jtMwS+ag8N1p8OTcYYNhWr9cL5e/SQJ7GfS//vCC8n+HjngL/+3yT6LP8uix
tmbcrdcn8QQpLD9BXxlM2o7A2Nv+Q4NmbD1Tfnm7BKZcoXJOwwo4Cj7+HOb4Cklc
RlcBFZOwu+TBb2APnEZhIDJqX8dHk7C0/lycqfEPCv0fgdBqkJkVKif0czH5jY+G
i4L7UQ4jzMjmH5tzfY8eSKS/Qj/+7aXLp9fdsedcNGKpA9rj8jUJ+BtJKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe1aYdJsp/YJlfEcgVJv6xqftEIMB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqOnXd2q
mFJLpinOE228FJFpVIB+ESFMNIDfQxDPbFPWmg2XDFEcRcQUQqEQqqeAR+qZhkxP
dmt0q+Z+sqRFWF4v43kEp6FRJ0jssmOaCo/7WOgLYmq2TRxlrDgTEv27ToVgkg2R
GbjVBMeBoOzPn9yfoQhy4Vra/bPhh/0wSlGgsUc4YpjKdXdf4O7IGqT4Fa8xcGrs
hkcnDD6DrdIy80XNKAYnlldPyoYYHwuLXUZ/EUEMtZGVdFOVSL2nu7zMwEG9bEwc
C7AFNDA8Eh/hW/eh/OX3sfIPXYPlS0mhBPaRXj82LOMxvwCQovm5EIkK9EsS2bn8
AUZE0PIgnCrU0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:13 2026 by rpki-client