Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: DKJLtFX3ENn6zAPUPKW31mbC7tyP0xZAMV+RDaUyLe8=
Subject key identifier: DD:4C:54:44:05:B6:73:0C:D0:74:AB:0A:50:9B:77:66:FD:E8:4F:02
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 019D371B9AEE72E54580FB3A68C96E06DC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 0976
Signing time: Sun 29 Mar 2026 01:00:49 +0000
Manifest this update: Sun 29 Mar 2026 01:00:49 +0000
Manifest next update: Mon 30 Mar 2026 01:00:49 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: tvknd2lyYgy0i7ZXupD0zOTXtXT045HXIP80gH2X0DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9a:ee:72:e5:45:80:fb:3a:68:c9:6e:06:dc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Mar 29 01:00:49 2026 GMT
Not After : Mar 30 01:00:49 2026 GMT
Subject: CN=dd4c544405b6730cd074ab0a509b7766fde84f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:0e:bf:00:88:95:f1:9e:a1:87:e4:a1:8f:
ea:d4:20:ca:dc:db:ce:b8:3d:0b:1d:23:08:5f:03:
b1:be:e9:0f:01:56:05:82:57:c4:6d:09:31:ad:e3:
fc:f3:30:34:ae:2c:5f:33:c3:39:87:2b:bb:c7:70:
63:07:23:a8:5c:e9:b9:d2:80:2a:30:11:c8:0f:dd:
cb:dd:d6:e4:15:dc:0e:c7:94:0f:55:3a:2d:3e:ef:
d5:49:6c:ea:07:ce:e4:94:cb:bd:07:7b:08:fc:8b:
b7:60:ba:ff:af:3e:0e:cd:a9:f3:64:3a:71:b0:48:
3d:a8:0a:1a:e6:b0:77:72:6f:d3:6e:ed:11:ac:a5:
52:e2:5b:1a:5b:00:43:0b:51:a9:1d:46:91:eb:05:
7b:4f:7b:07:68:23:1d:e7:94:e0:78:68:06:bc:49:
be:e2:30:a2:78:a1:d5:6a:26:96:da:68:4f:c9:95:
d0:73:f9:f7:4c:7f:38:4c:2e:0a:8a:89:cb:5d:e0:
09:a2:9e:b4:c9:59:24:d3:8e:96:e1:33:4b:a5:55:
50:d2:43:8c:7a:86:e0:40:1a:21:9e:59:c0:26:0d:
02:e4:2e:61:61:89:38:32:4d:6a:41:e7:a8:d2:8f:
a2:c4:16:a9:77:0e:1e:05:4f:f4:5f:e9:e6:1b:9e:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4C:54:44:05:B6:73:0C:D0:74:AB:0A:50:9B:77:66:FD:E8:4F:02
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ad:e8:6f:6e:d3:6c:4e:22:b6:2e:3d:b2:15:ec:68:de:9a:
be:7c:35:59:1e:cf:23:8e:ca:7f:f1:b8:65:15:8d:f6:79:f1:
ec:2f:ff:1b:f4:95:17:e5:b1:d6:4c:99:af:40:3c:c3:a1:02:
94:0b:11:fb:b9:a1:15:f6:57:82:31:8a:81:2f:20:58:c3:2f:
b4:e5:fb:73:22:f2:c2:5a:ed:21:da:aa:88:1b:3d:d5:d3:79:
53:5c:5c:b8:5f:19:e5:8f:ea:57:67:37:e5:5b:68:fe:87:83:
09:5f:fb:65:32:83:ef:9a:40:8e:15:2a:5b:5f:b8:35:d5:0d:
64:ec:bb:1e:b5:0b:a6:b6:69:43:c3:81:e2:a3:1b:56:39:d4:
db:06:bd:40:1b:a0:a1:f0:8b:2f:5c:64:12:31:3e:14:7c:3d:
be:ce:f3:c1:49:5a:22:78:97:29:cb:28:76:bd:5a:57:ca:88:
e4:93:67:e0:f5:4c:7a:2b:b9:86:ea:b6:ad:7b:6b:f0:ac:f0:
7d:8e:1f:9f:67:c0:b1:f8:97:30:77:2b:0b:52:56:f4:ed:e5:
93:a7:5d:18:2d:12:2c:c5:67:f4:9e:f8:64:32:f8:de:fc:34:
ac:6c:67:99:18:5b:18:87:53:17:c2:9b:b1:98:a9:0f:0b:cc:
d8:fe:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:21 2026 by rpki-client