Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: jPYBmKd3u/ZTiS61gAZXT5YlRYbnJrwgvw5T9gHFOEc=
Subject key identifier: 5A:98:0D:BC:23:BB:95:61:08:E8:DA:C5:64:C1:3A:F6:20:97:64:A2
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 019D37C0BB7EAE7C44898DDFD7070B8FA950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: VUYQs05G6H94oS4e8ck6FlPftMwYYB/KfAaKfrMC9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:bb:7e:ae:7c:44:89:8d:df:d7:07:0b:8f:a9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=5a980dbc23bb956108e8dac564c13af6209764a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:1a:6d:89:e1:ab:02:f3:e5:90:eb:95:6d:
fb:5a:35:68:e3:17:79:b3:de:7f:23:c3:0c:38:53:
0b:3a:9d:8b:67:77:16:75:b1:25:b0:f7:73:60:7f:
e5:dd:af:9d:3f:5f:c1:89:3b:fa:84:29:24:3e:38:
15:49:26:9d:28:96:4c:e9:32:ac:f8:db:97:24:fb:
30:4b:a4:f6:03:c3:90:80:6d:37:a7:d2:3d:78:0f:
e7:33:f5:bf:96:8f:82:14:e7:6c:bf:59:ba:2b:3c:
0b:bb:1a:2c:06:00:b8:78:6f:eb:31:82:1f:c4:32:
3a:ac:2a:52:48:1e:21:85:c2:07:a9:06:91:00:cf:
e6:cf:22:c1:fc:70:60:e0:ca:af:07:06:70:fb:07:
5d:9e:24:17:54:a3:41:29:a1:7d:de:42:88:27:79:
96:97:ff:5d:07:b0:53:9a:63:79:96:18:09:f0:61:
4f:45:18:9c:f1:c2:ee:0e:8e:46:48:4c:77:3d:b0:
1c:61:c6:28:0b:27:16:10:bc:db:8c:bf:5d:cd:2e:
df:eb:a4:b0:f4:6c:f7:f4:86:4b:09:7a:ea:b1:3a:
83:47:51:2a:8c:ff:e7:37:46:e5:0e:43:e4:a6:5d:
7c:00:d9:d7:27:21:de:5e:86:c3:d7:d2:2e:77:4e:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:0D:BC:23:BB:95:61:08:E8:DA:C5:64:C1:3A:F6:20:97:64:A2
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:0f:08:d1:78:74:30:aa:fa:62:9c:e6:d3:e6:ae:f0:0a:
c4:a1:9d:45:7b:52:47:1f:60:a4:c6:55:84:3d:c6:77:c2:c6:
da:be:0a:03:85:ee:d4:4a:d8:13:4e:45:5a:cf:74:30:02:8d:
a4:13:e1:0f:f4:cd:9c:4b:b3:1e:7b:b3:af:24:bb:de:5f:ee:
22:4a:97:69:db:51:6e:3b:73:38:41:3d:c8:08:2d:2d:39:c3:
56:1f:b0:21:5c:f2:e3:c5:1f:0b:9e:f8:b7:e5:88:eb:82:61:
4c:4c:44:92:83:8c:b5:e7:21:b8:8f:49:55:e3:f8:ab:55:d5:
d5:7e:f7:1c:62:8d:26:80:93:73:a0:70:7b:16:59:72:57:a2:
84:2e:92:15:2c:1d:1a:b5:97:47:61:7a:0f:79:31:8c:88:17:
1a:12:94:b9:3c:89:3e:ed:ed:df:a3:b6:d0:1c:3d:f7:ec:58:
78:4d:2a:2d:79:a1:a0:0e:b4:05:8a:91:32:63:90:01:ed:d8:
db:e7:23:fa:bf:5d:80:19:d4:05:dd:3c:32:c1:3c:af:3c:61:
7b:28:41:fe:2a:16:84:55:21:59:b1:67:ac:ed:12:45:5c:69:
39:6f:78:3a:e5:68:0f:1f:45:ed:a9:35:bd:ca:09:83:36:b5:
db:33:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:19 2026 by rpki-client