Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: NxQT28TyciPIGA/7a5FwbQvtbcp8/z6qZm+5t3cewpI=
Subject key identifier: 1A:45:B7:3B:8F:0B:16:00:C4:94:A6:34:0C:41:C8:32:EA:3B:C8:C6
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 019D37524D541C8514047C896C6F65697F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 02:00:33 +0000
Manifest this update: Sun 29 Mar 2026 02:00:33 +0000
Manifest next update: Mon 30 Mar 2026 02:00:33 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: WRXi9/Nbgrtr6CjfiWafbapYTL3Jl4JVHaHibInxgJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4d:54:1c:85:14:04:7c:89:6c:6f:65:69:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Mar 29 02:00:33 2026 GMT
Not After : Mar 30 02:00:33 2026 GMT
Subject: CN=1a45b73b8f0b1600c494a6340c41c832ea3bc8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:07:bd:70:f1:11:4a:95:74:59:fe:0a:fa:
d4:e9:0f:09:0c:73:3b:ad:0e:86:9e:ba:3f:c5:a8:
29:12:16:a2:b1:3b:1d:d9:36:10:a8:2c:a8:fc:5b:
10:9e:ea:3e:ad:74:59:f7:7d:95:b6:25:b0:ba:b9:
07:42:81:13:5c:05:2d:74:47:35:f5:48:62:cb:35:
ab:83:e8:fb:fc:d8:6b:ab:5b:ca:19:6f:27:f7:68:
63:a3:5d:9b:70:cf:03:56:da:93:b4:09:63:3b:9a:
01:23:7f:6b:c4:81:08:68:bc:c8:70:c2:10:6c:82:
21:9c:4d:24:25:c3:de:b1:cc:06:e0:38:15:f4:58:
1e:e9:3a:76:ab:84:44:fe:55:8b:cd:0e:5d:a0:fc:
c3:e6:6a:e3:7b:33:00:29:4f:3f:ac:22:a4:cc:1d:
98:73:ee:55:5f:19:9e:d2:de:19:da:61:bc:8f:cb:
d6:e1:dc:2d:7e:db:2b:8a:c8:3d:fe:41:4f:76:0d:
72:33:6a:63:ee:cf:52:01:a2:e4:76:6a:fc:01:f4:
5e:a1:aa:f7:7a:b3:92:c2:cf:cc:6e:62:fc:87:cb:
90:a4:6c:af:77:bf:51:e3:c4:eb:e4:b5:c6:cf:15:
d8:fc:aa:21:57:ed:d8:bc:63:52:38:9f:6d:89:69:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:B7:3B:8F:0B:16:00:C4:94:A6:34:0C:41:C8:32:EA:3B:C8:C6
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:30:a4:af:73:56:2a:29:ed:4c:80:21:83:22:98:77:18:
7b:3b:07:49:08:94:25:6c:9a:be:09:3f:71:cc:6a:51:7d:77:
fc:57:3c:7f:93:5a:6f:b2:03:5e:1f:7c:00:7c:71:80:1f:67:
31:62:51:d4:1b:2c:af:08:bd:0d:81:1a:0f:65:bc:58:3a:41:
9d:c8:6a:a7:db:47:7b:a3:a2:54:8b:f6:cc:7d:bf:33:6c:fa:
c7:14:5e:59:62:af:dc:d6:11:3b:f3:bf:f5:56:01:d6:43:3c:
92:02:77:d2:b0:b8:a9:4f:e6:63:ce:65:91:6b:82:9b:f5:ce:
7b:7b:1a:ce:ff:18:a4:da:ea:d3:f4:18:f3:0b:bb:18:ad:71:
47:12:8e:b9:f9:8e:e6:04:80:79:77:ed:46:eb:6b:67:c8:8f:
25:15:1c:2c:75:98:5e:3e:3a:3d:11:c1:9c:f4:09:1f:e3:3f:
25:25:69:de:f9:8d:ca:96:1f:6d:fd:79:b4:1e:cf:e9:f9:a6:
ae:87:72:72:3d:6f:02:62:d3:71:d9:bf:74:26:a1:18:f5:19:
cc:dc:f7:9a:4e:3e:6a:8a:5b:2a:49:3c:f6:81:32:7b:82:b9:
99:f7:92:91:c2:08:5e:02:bb:e1:2e:47:57:37:00:6b:16:aa:
71:95:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:04 2026 by rpki-client