Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: 8U+FOlmaSkmiioxOhcJbk4h0vqmKYvLHGIbsqiFhwMU=
Subject key identifier: 5C:BD:FB:AD:5D:74:CA:3C:E9:8C:1A:F7:91:D3:00:63:7F:9A:6D:1E
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019D38D39ACE8BB2C6C94BA47081BF280974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: xCHYvOrNpGlaLf+IPltkIbsDQsTrPWQfNQ8qDOUZSgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9a:ce:8b:b2:c6:c9:4b:a4:70:81:bf:28:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=5cbdfbad5d74ca3ce98c1af791d300637f9a6d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:8c:9b:82:54:ea:38:ae:f7:65:83:aa:41:
74:46:88:2e:1b:b1:dd:a6:ab:55:7d:75:84:05:e5:
70:7b:5d:12:2b:5c:7b:ae:a4:61:39:49:55:f4:9f:
a3:9a:05:e7:54:36:b9:14:f7:eb:57:30:78:07:8f:
19:91:97:4c:5d:4e:5a:31:cb:b5:1e:90:f0:21:ef:
4c:7e:fc:72:71:aa:67:00:6b:55:0c:de:61:ee:d6:
a7:29:94:14:a5:87:fb:bd:32:d9:4e:21:71:fe:9d:
41:dd:75:84:6a:9c:ed:ad:34:ef:f6:bf:70:09:af:
e7:b6:41:f5:ae:ef:d8:50:4a:5c:47:c6:85:0d:74:
6a:68:05:a0:72:cf:52:82:94:7b:b9:34:72:dc:ba:
21:09:3f:ce:c9:eb:c6:76:c0:fc:ae:6e:92:41:81:
48:0a:89:8b:c5:1d:32:4d:46:bd:ce:0f:5d:ac:73:
be:c4:7e:19:22:c5:d9:58:7a:f1:53:95:33:ea:56:
ba:c0:f3:b7:59:e2:f4:dd:21:b4:1f:a1:b2:69:2d:
65:a4:e1:e3:1f:b2:b2:4d:4c:05:c6:60:06:fa:b7:
0a:a0:0f:65:5b:56:3d:75:c6:4f:01:a5:4c:b8:d7:
a6:3b:74:af:da:6f:a9:b5:1d:fe:0c:b0:d9:69:a6:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:FB:AD:5D:74:CA:3C:E9:8C:1A:F7:91:D3:00:63:7F:9A:6D:1E
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d7:ac:48:11:a0:9d:f3:e9:d9:46:0d:55:0b:02:48:76:5e:
f3:9a:88:3a:9d:2b:0b:4d:27:58:10:69:97:23:4f:91:9d:92:
2c:47:b9:45:10:99:8a:2d:d4:0f:e5:a4:8c:43:22:e5:4c:dd:
92:9a:67:2f:86:fc:8f:6b:9a:b6:d6:4b:84:bb:b2:63:c3:47:
0d:6f:b6:37:59:a4:29:c9:24:3c:90:35:fc:ce:41:26:cd:82:
38:24:88:84:2c:af:78:2a:5e:52:b1:e6:11:6e:ba:30:81:11:
30:4a:6b:fc:65:b7:ea:1b:3b:6a:fc:67:be:5f:0c:30:84:c7:
ef:0c:3f:44:1a:92:42:83:90:6a:2f:f4:35:b8:a9:a4:1d:4b:
1a:3d:c0:d3:e5:02:69:37:f5:b4:cc:19:97:34:1c:ca:11:cb:
7f:64:1b:f6:41:23:26:fa:2c:aa:02:3b:37:b9:cd:84:1c:06:
e3:6c:19:bd:4c:3f:61:39:76:a2:8f:97:16:86:b1:58:72:e2:
37:b0:11:66:a3:97:7d:16:b1:d0:0d:0b:ad:f1:1d:e4:de:64:
08:cf:8d:2c:24:4c:59:ab:0c:ca:c6:1d:d7:b8:ea:aa:81:e9:
78:7b:09:2a:48:36:cd:99:f1:50:39:d8:8a:b8:eb:1a:d9:0f:
0e:f2:19:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:50 2026 by rpki-client