Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: wxlcta7ijVbDXRu4u1neYz6KWOI930lQ3GKukpod6hs=
Subject key identifier: A5:D6:D5:D2:9E:C5:65:48:8B:0A:B6:47:9C:18:40:05:A9:19:FE:C3
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019D38D30A79DA492CC9EF81C708E2D12EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: iB5rh8+hQomOAoQFQnB2ZKYovapahMHegQew0pY5mPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0a:79:da:49:2c:c9:ef:81:c7:08:e2:d1:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=a5d6d5d29ec565488b0ab6479c184005a919fec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:01:07:e8:07:1e:c2:84:98:fa:1c:27:94:
27:85:71:69:29:31:b4:24:6b:5d:b3:3c:85:56:a1:
e0:01:45:53:14:f4:77:15:d2:3b:ce:ac:eb:e9:eb:
65:f0:56:d3:46:60:e1:4c:f3:1c:f4:30:40:0f:4e:
55:01:9d:16:b1:ab:0b:79:d3:5c:7a:10:7e:f5:3f:
31:6a:44:a8:e2:88:99:b6:f3:59:87:ae:52:22:65:
f4:6e:ca:b6:a3:a5:25:c0:7a:3b:49:e4:81:55:eb:
64:03:f3:4d:03:6f:cf:a6:1b:92:8b:85:f1:9a:e5:
4a:57:69:a6:ef:13:fc:af:06:d9:94:cb:5f:56:0c:
95:45:86:70:26:ef:d2:8c:be:c0:00:7e:d5:20:b0:
6a:8c:cd:fe:d0:24:ef:2c:52:4e:6a:d0:88:59:93:
d8:70:25:a8:30:4c:4b:1c:76:8b:5e:ba:d2:bb:a0:
00:1b:0b:22:f3:81:f3:17:32:de:0a:91:46:ec:ea:
dc:66:46:61:23:1d:1a:0d:24:c5:c1:87:c4:22:6b:
29:c2:fd:b1:54:25:07:2a:0b:48:4f:74:83:6d:24:
3a:12:37:39:80:c5:75:8d:71:a5:b1:73:9e:0a:56:
d3:a6:4d:a0:4b:d9:68:92:be:0d:00:ef:24:a7:4d:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D6:D5:D2:9E:C5:65:48:8B:0A:B6:47:9C:18:40:05:A9:19:FE:C3
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:0d:22:4c:d9:1e:68:37:cd:08:c7:3e:24:fa:b3:5d:be:
87:7a:02:a7:bf:2c:5d:f1:c7:11:a9:a1:ee:e4:a4:b4:a2:71:
0d:4b:18:17:cd:88:c5:42:b6:b9:64:64:cb:6d:ec:65:79:fc:
e5:f5:e1:2b:c7:d5:ad:85:ec:59:01:26:b1:b1:68:e7:e1:fd:
ce:47:ee:e7:1e:cf:ac:9a:0b:73:64:79:cd:f4:dd:c4:17:62:
07:f7:c4:69:93:4b:5d:09:b3:ec:02:d2:1e:2c:4b:27:c9:43:
19:e4:d6:bd:e7:2f:76:22:c4:eb:5d:87:1b:9d:92:f3:e0:b1:
22:02:fc:03:9e:40:a4:1f:cf:59:5a:8e:54:2d:63:da:51:54:
05:aa:01:d8:0a:8a:08:8f:e8:aa:07:5b:36:a0:c8:38:3d:23:
1d:94:ae:66:5f:7e:6a:a5:19:82:41:0d:ab:a9:44:81:2a:30:
09:a2:b6:f4:d5:f7:0f:e0:73:f7:be:56:fe:49:b8:74:40:07:
f0:bc:e5:af:38:d6:cf:d0:08:32:5a:cc:46:cb:17:4e:c1:f3:
f0:d5:07:10:87:39:52:64:74:bb:5e:40:37:5c:29:7a:75:3a:
8e:45:9b:a3:22:b3:7c:68:c3:fc:9e:da:25:e0:a6:36:05:9c:
c6:34:cc:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040wp52kksye+Bxwji0S6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJiMjY5ZWI3MDNhYmMxMjJkNDc4NTEzYjA4MTcxZDRj
OTZkYWQwHhcNMjYwMzI5MDkwMDQ4WhcNMjYwMzMwMDkwMDQ4WjAzMTEwLwYDVQQD
EyhhNWQ2ZDVkMjllYzU2NTQ4OGIwYWI2NDc5YzE4NDAwNWE5MTlmZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstUBB+gHHsKEmPocJ5QnhXFpKTG0
JGtdszyFVqHgAUVTFPR3FdI7zqzr6etl8FbTRmDhTPMc9DBAD05VAZ0WsasLedNc
ehB+9T8xakSo4oiZtvNZh65SImX0bsq2o6UlwHo7SeSBVetkA/NNA2/PphuSi4Xx
muVKV2mm7xP8rwbZlMtfVgyVRYZwJu/SjL7AAH7VILBqjM3+0CTvLFJOatCIWZPY
cCWoMExLHHaLXrrSu6AAGwsi84HzFzLeCpFG7OrcZkZhIx0aDSTFwYfEImspwv2x
VCUHKgtIT3SDbSQ6Ejc5gMV1jXGlsXOeClbTpk2gS9lokr4NAO8kp030aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXW1dKexWVIiwq2R5wYQAWpGf7DMB8GA1UdIwQY
MBaAFI8SsmnrcDq8Ei1HhROwgXHUyW2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMt
NmVmZjE4YTJlYTQ0LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMtNmVmZjE4YTJlYTQ0
LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/oNIkzZ
Hmg3zQjHPiT6s12+h3oCp78sXfHHEamh7uSktKJxDUsYF82IxUK2uWRky23sZXn8
5fXhK8fVrYXsWQEmsbFo5+H9zkfu5x7PrJoLc2R5zfTdxBdiB/fEaZNLXQmz7ALS
HixLJ8lDGeTWvecvdiLE612HG52S8+CxIgL8A55ApB/PWVqOVC1j2lFUBaoB2AqK
CI/oqgdbNqDIOD0jHZSuZl9+aqUZgkENq6lEgSowCaK29NX3D+Bz975W/km4dEAH
8LzlrzjWz9AIMlrMRssXTsHz8NUHEIc5UmR0u15AN1wpenU6jkWboyKzfGjD/J7a
JeCmNgWcxjTMaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:31 2026 by rpki-client