Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: h4ISxev7QbW1MFYQr9wH6slhZGOLIjtBt5zC+RLjlVc=
Subject key identifier: 1D:4C:3E:C3:97:A2:EA:17:71:3C:E2:1B:AE:24:E5:5E:3B:FC:9C:28
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 019D37525AB6447CD5831ABC62DC815677E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 185C
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: a/Uk1dL5vPaTctOZccxK8GvO0WmT6s1yK38w+axnZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5a:b6:44:7c:d5:83:1a:bc:62:dc:81:56:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=1d4c3ec397a2ea17713ce21bae24e55e3bfc9c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:b8:b3:99:15:e9:76:ac:4c:87:30:2b:c4:
78:de:8c:96:44:39:54:a2:06:3c:e7:30:1d:d7:64:
00:58:72:df:68:e4:e7:0b:65:da:7c:1e:f3:a2:c2:
d5:47:2e:8a:16:80:39:7a:e3:be:27:d5:f5:2f:89:
5e:6f:d2:4f:07:af:a5:36:59:b5:78:70:fd:73:c8:
d3:1d:f5:c0:e1:85:2a:b8:20:14:b1:28:c1:2d:28:
bf:80:b6:f0:d9:d9:b4:60:13:01:ec:ea:d7:a1:25:
2a:5e:53:1a:c1:49:69:ce:a4:25:90:90:e9:7d:29:
0f:ab:e2:62:cb:6f:c7:6e:30:b4:af:cb:81:6d:ff:
f9:90:9b:28:c8:61:6e:90:a5:55:75:d5:3d:1f:ad:
20:6e:68:d3:68:45:3f:f2:77:ba:b6:c0:fa:a4:fb:
90:b9:74:34:7c:96:c4:fa:73:81:7e:c6:ac:c8:18:
67:42:2c:77:2e:0c:67:b2:37:78:b0:ed:a5:10:a5:
7b:26:a4:92:e3:b9:bc:75:76:e6:a2:9e:f3:cc:5b:
b7:d6:9c:61:67:d3:6e:21:56:0e:89:07:58:af:cd:
be:e5:67:3c:9f:8d:d3:41:aa:fc:18:fe:7b:60:95:
ef:f3:60:4b:f3:3b:c9:8b:2b:47:12:e1:77:4e:8b:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:3E:C3:97:A2:EA:17:71:3C:E2:1B:AE:24:E5:5E:3B:FC:9C:28
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3b:cd:ae:6b:bb:89:e5:42:43:2f:0b:f0:d8:54:b9:4f:be:
3e:cd:03:12:01:8a:78:59:31:d3:7a:a7:00:a5:31:e0:70:cf:
56:43:e5:3c:90:56:d5:90:3e:0a:3e:18:d5:b9:03:b4:77:e6:
58:de:0f:c8:60:d4:44:96:15:ee:fd:95:87:70:32:ee:cd:91:
04:a4:af:d0:0e:60:ff:30:71:0a:59:a7:7d:ee:48:01:9e:c2:
3d:f8:fc:f2:5c:74:3c:bf:fb:a6:91:7a:e5:86:e8:f4:bd:78:
da:5a:f6:df:e6:d0:ab:bb:ff:17:d2:d3:7e:39:5c:a6:0d:5b:
fd:6b:c9:04:2c:ff:57:ce:fa:3f:74:09:a1:32:61:f3:99:c2:
3c:88:76:b1:3d:be:32:a4:a1:d2:15:56:75:a0:77:3a:b5:e4:
76:71:5d:22:4b:fb:02:c2:8f:ba:96:9d:51:7a:d7:b3:ee:f9:
c9:04:e0:dd:0f:22:8b:33:78:45:62:e5:c6:07:27:6e:e6:b2:
5d:64:89:1d:3f:b2:eb:05:17:e6:2f:6a:e4:0c:be:3e:ea:b4:
35:7b:81:24:f4:47:37:78:e0:a3:c5:e3:bc:ca:3d:d0:82:c6:
2e:e3:13:fb:9a:98:32:6f:2e:2e:08:93:f4:a5:ea:8d:4f:b6:
61:ed:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:55 2026 by rpki-client