Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
File: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft (raw, json)
Hash identifier: C34Y0LSdTtGoAoRW8zzCrdIEbIbnC4bw18/V/pDiazo=
Subject key identifier: 79:68:F5:9A:F3:DC:6B:3C:8C:24:CA:54:F7:F0:30:61:B8:21:4A:4A
Authority key identifier: 8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89
Certificate issuer: /CN=8c23849b89238d95a6f4c175a34637fe3ff80489
Certificate serial: 019D37C032C54D5C9E201257E31BF0F33334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
Manifest number: 015E
Signing time: Sun 29 Mar 2026 04:00:35 +0000
Manifest this update: Sun 29 Mar 2026 04:00:35 +0000
Manifest next update: Mon 30 Mar 2026 04:00:35 +0000
Files and hashes: 1: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl (hash: SHCFO1L/aw9p8wfmVS63ar0hl3pDmePUxTDo0M1KVy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:32:c5:4d:5c:9e:20:12:57:e3:1b:f0:f3:33:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c23849b89238d95a6f4c175a34637fe3ff80489
Validity
Not Before: Mar 29 04:00:35 2026 GMT
Not After : Mar 30 04:00:35 2026 GMT
Subject: CN=7968f59af3dc6b3c8c24ca54f7f03061b8214a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:f1:85:e5:91:0a:0a:11:fb:aa:43:57:98:
1a:84:48:ad:8c:13:78:fa:fa:c0:98:df:d7:a9:34:
79:20:67:eb:89:d9:13:5e:1a:28:1d:74:af:ee:8d:
02:36:62:22:f6:f1:46:d8:f0:a7:5c:85:29:95:cd:
d7:2c:9f:aa:35:ad:c5:e6:b4:30:80:a2:b2:85:d0:
87:45:8d:02:9e:c1:27:d8:6d:63:29:cf:ef:4b:6e:
2c:4b:f6:22:16:98:3c:80:c5:41:94:09:aa:9f:3d:
bf:5a:1d:5d:68:10:27:47:d4:7b:fc:39:3e:32:0b:
33:8c:93:2e:00:15:75:71:61:01:f8:4d:be:94:0b:
9b:f0:0a:f7:0c:b8:4b:24:7a:74:2d:cb:3c:29:8d:
aa:11:f5:43:37:cc:92:8c:ca:66:3f:44:19:39:a4:
ab:0f:ef:da:ae:3c:31:2b:66:06:a4:98:9e:56:76:
6f:97:8d:30:bb:19:38:bc:90:28:2f:59:53:7e:51:
bb:5f:86:21:3f:93:6a:89:af:49:e8:26:85:57:e5:
bb:12:5f:5b:ff:e7:e8:00:8f:9b:52:78:fc:59:a5:
f1:70:f3:ac:c6:e0:85:97:4d:30:a5:7d:70:e0:38:
89:bb:f5:e9:b8:91:fc:b4:60:f7:6e:76:ab:ba:09:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:68:F5:9A:F3:DC:6B:3C:8C:24:CA:54:F7:F0:30:61:B8:21:4A:4A
X509v3 Authority Key Identifier:
keyid:8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bc:63:39:48:62:1b:12:f2:bd:7f:39:b2:55:a4:f2:f4:a0:
e4:58:f8:75:8f:5b:47:a0:16:df:78:fc:a1:96:c3:01:59:8c:
97:d7:c6:32:10:16:14:d3:90:76:3a:95:50:ea:90:11:fd:e8:
d1:36:c0:3a:39:15:df:10:12:b5:9f:80:30:f0:ba:04:7a:a7:
58:bb:55:e6:fe:1d:bc:18:9e:67:2b:b6:15:ff:67:b7:4a:85:
a3:2c:2a:67:02:83:4e:92:58:9a:8b:6e:8b:30:cf:8c:13:c2:
be:fb:6b:49:f4:46:e6:e9:0a:f4:c2:c9:73:76:7b:8c:93:52:
23:25:29:ca:4a:bb:aa:25:95:3b:51:e5:d1:a9:86:b1:a4:9b:
0b:07:43:a7:45:9f:4f:25:78:3f:64:87:2a:6b:28:68:2b:51:
92:03:e2:b6:3f:24:c9:4c:e0:b4:de:c2:04:b6:e6:0b:62:6e:
54:cb:cc:23:47:86:06:fd:1a:dd:21:f2:84:56:b2:e4:3c:fd:
4d:94:50:a2:cf:c5:5b:6e:7e:d7:69:d0:0b:8a:b1:2a:14:80:
e3:af:90:6b:98:ce:ea:80:00:5e:b2:57:37:4b:94:24:d2:04:
d4:4d:ad:f3:e4:26:80:66:b3:dc:a9:bf:43:80:eb:5d:1f:78:
05:b1:44:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:12 2026 by rpki-client