
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier: QzRGM1RCjIyRzLdk5dN/BkhdChY22Po6r/Lqf/YqnII=
Subject key identifier: B0:FB:BB:40:D8:5A:F0:2E:5F:83:AD:C1:07:C7:0A:E5:7F:ED:4F:D8
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial: 019D389C0581B6FD54385429B72A92D3B961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number: 05DF
Signing time: Sun 29 Mar 2026 08:00:42 +0000
Manifest this update: Sun 29 Mar 2026 08:00:42 +0000
Manifest next update: Mon 30 Mar 2026 08:00:42 +0000
Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: gB8E3pp/MmtLoM/Bu4uHAFAdKIlhfcA06mTCsyGf9K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:05:81:b6:fd:54:38:54:29:b7:2a:92:d3:b9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Validity
Not Before: Mar 29 08:00:42 2026 GMT
Not After : Mar 30 08:00:42 2026 GMT
Subject: CN=b0fbbb40d85af02e5f83adc107c70ae57fed4fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:bd:75:f4:1b:fc:a8:6d:d7:04:1e:0a:e9:
f2:f7:ad:45:0f:3f:b1:09:69:6d:29:84:a2:63:0b:
11:af:69:ba:88:47:12:f4:f6:04:22:ca:d5:cc:52:
32:c8:db:e6:78:b0:5b:64:04:d8:89:f3:9c:b1:76:
b2:b3:55:24:a8:22:71:21:ef:83:c0:2f:fb:da:cd:
bb:06:82:ef:98:81:f7:e2:88:4e:d6:f9:b8:0a:19:
78:1e:34:2b:39:f4:3c:9c:da:8d:60:63:e1:6a:ec:
d7:b4:0b:82:61:e8:a6:ad:35:17:62:9a:7e:5a:8f:
a8:70:b6:ab:12:70:e9:22:0a:87:51:9a:38:a3:d6:
2d:fa:ec:54:24:e4:4e:c3:1f:75:21:f7:77:9a:dd:
be:aa:b7:49:2c:af:01:6d:f8:08:a9:59:a5:5c:1d:
0e:7f:16:c5:fb:89:2c:a4:a2:d3:9a:67:a3:88:26:
fb:78:88:ee:29:24:95:b0:04:e3:1e:8f:f9:cb:6f:
6a:d0:96:38:3e:85:d3:1a:b0:86:45:76:cc:1b:35:
5b:ea:e9:99:09:02:2f:61:0d:56:a4:bb:c3:b6:ac:
c9:04:73:86:a7:e7:39:35:75:47:c7:07:f5:7e:ea:
e5:01:34:e5:4c:9f:90:b3:97:a7:5d:eb:fc:9a:7c:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FB:BB:40:D8:5A:F0:2E:5F:83:AD:C1:07:C7:0A:E5:7F:ED:4F:D8
X509v3 Authority Key Identifier:
keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:10:05:82:56:b3:43:df:ab:34:9f:93:e3:d8:8a:d1:30:
de:11:b0:32:6b:7b:f0:7a:ac:82:82:9a:d8:5b:9d:d6:75:33:
39:c4:31:86:5c:8f:ee:22:64:2e:fd:59:af:94:68:12:eb:be:
42:e6:70:7d:12:a9:42:78:01:92:62:1a:90:e2:20:76:54:ef:
b0:b6:b6:a3:24:97:13:ab:65:5b:8d:86:07:f2:7d:71:67:dc:
2a:ea:90:9c:34:9a:f1:38:0b:21:f1:e2:75:fa:43:c9:ee:e0:
29:e9:dd:c6:6f:f2:a7:fb:0b:0c:89:6b:8f:ca:6b:f4:b6:73:
7f:2b:2b:9e:f7:ba:4a:df:a8:bf:d2:59:3c:7b:b1:3b:d0:53:
cd:d7:de:d5:35:ac:71:31:55:5a:cd:85:d5:68:76:9e:fb:e9:
bd:ce:c3:cd:db:f9:18:1b:1d:00:2a:18:01:96:51:05:54:73:
84:27:eb:fb:a9:ef:95:8d:d8:29:32:f0:f4:3c:ba:98:24:52:
fe:dd:94:bc:5a:57:9a:7b:e7:63:16:50:b7:82:29:a5:75:13:
5f:cb:68:d1:fa:54:0c:33:71:b1:85:4b:a4:ff:b8:b9:fa:40:
59:b6:7a:90:8f:e3:3f:4a:0f:cd:0c:46:ce:68:e7:3c:07:50:
41:86:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:54 2026 by rpki-client