Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
File: jw6u_3Y07o3-gFSthfihXoR1kRQ.mft (raw, json)
Hash identifier: 7EIP+5DZqP6Lsa7qXQZ9wHqQN6mGqWdlz1PJ7MrFUto=
Subject key identifier: 82:2D:B8:2B:42:DF:93:A1:50:87:CC:55:44:04:95:0A:6E:69:CD:2B
Authority key identifier: 8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
Certificate issuer: /CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Certificate serial: 019D389BD445C17DBC10AE7BB85A337A90AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
Manifest number: 07C7
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: jw6u_3Y07o3-gFSthfihXoR1kRQ.crl (hash: WpULste03neWYLR5D6xymr5gQIgAWOb9K2Jy6bDdV8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d4:45:c1:7d:bc:10:ae:7b:b8:5a:33:7a:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0eaeff7634ee8dfe8054ad85f8a15e84759114
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=822db82b42df93a15087cc554404950a6e69cd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:b2:2b:1b:46:9b:bf:5f:2a:7c:e8:96:92:
0c:7f:61:3c:a6:c8:64:5c:ab:5b:0c:1b:35:f8:a2:
b1:e2:37:bc:da:ae:fe:9f:2f:60:03:43:ba:58:10:
cb:01:ac:29:90:98:c8:74:98:6c:76:63:5e:7a:81:
3c:ed:fb:e0:55:cc:0e:b0:1f:ca:55:90:85:36:f8:
cf:ec:db:b6:73:a6:eb:30:c3:ad:27:d8:16:aa:bd:
b3:df:90:e3:a5:56:05:ba:67:82:25:83:84:14:d1:
44:27:67:4a:4e:f2:b6:70:98:55:b2:15:1d:70:27:
fc:75:7c:a5:b9:a3:d9:73:02:2f:95:cf:32:4c:a9:
e0:99:23:3b:37:45:98:ec:df:79:38:cb:5e:9e:f3:
4a:e4:bc:7e:ba:c9:57:60:b0:c3:d1:d7:df:18:5c:
cb:3e:32:3e:07:a5:61:57:39:98:39:8f:79:05:1c:
8e:d4:1a:60:ed:0e:37:a9:d2:ce:c4:b2:e7:3b:7f:
52:03:66:3c:cb:af:cf:45:f4:35:f5:6d:5f:cb:aa:
d6:3d:fb:e2:94:2f:cb:d4:10:da:38:6d:75:43:f1:
7e:8f:d8:24:35:d7:5b:7d:62:6b:da:25:59:9a:ff:
79:2a:be:93:16:46:79:e6:b2:69:b6:65:d2:5d:f0:
ba:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:B8:2B:42:DF:93:A1:50:87:CC:55:44:04:95:0A:6E:69:CD:2B
X509v3 Authority Key Identifier:
keyid:8F:0E:AE:FF:76:34:EE:8D:FE:80:54:AD:85:F8:A1:5E:84:75:91:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw6u_3Y07o3-gFSthfihXoR1kRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cfa855-f0c7-4458-a3de-b3b4eefe70a5/1/jw6u_3Y07o3-gFSthfihXoR1kRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:fb:74:7e:32:2c:0a:88:30:ca:cf:ba:3a:d9:4f:5a:ca:
b4:4e:7f:2a:bf:22:a6:d6:64:0c:9f:df:70:65:91:bc:ff:1d:
4d:00:01:72:d9:f9:ae:88:c0:c9:73:10:09:19:a1:fa:25:6c:
23:86:e6:38:61:71:2c:cd:0b:29:0a:20:9f:48:f4:6f:df:01:
0a:77:08:ba:98:a5:d3:1e:f5:7d:91:20:eb:fc:1c:df:b4:0c:
c5:02:7f:a4:da:fd:9e:6b:34:5d:aa:6b:e0:f3:90:d8:49:90:
3e:3e:1f:a8:00:b1:32:0c:ce:bb:27:a7:36:3e:50:1d:98:be:
77:3e:42:cc:0b:bc:5c:1e:50:46:e7:27:f6:79:0d:42:71:b3:
4a:ce:51:ef:8a:b1:de:56:d2:41:2b:57:fa:fb:f0:52:ee:27:
65:14:05:f3:75:bf:96:e0:29:27:38:84:ee:71:33:84:20:cd:
9a:ad:9b:b4:5e:75:d4:e0:bc:4f:b1:44:9b:0d:c6:c3:5d:50:
f7:db:d8:92:5a:db:95:54:1b:43:e0:cf:a4:75:94:c8:30:29:
8e:dd:2e:ca:15:78:6f:56:3a:16:79:c9:0a:fd:3f:1e:cd:73:
a8:8e:71:ed:fa:c7:97:2b:a3:75:10:d6:98:81:34:8f:b5:bc:
15:b7:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:36 2026 by rpki-client