Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
File: k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft (raw, json)
Hash identifier: /lPbEmQ2xaonu5kTw6+lYaPhzJHBJ/pNhGf4xAOR8NM=
Subject key identifier: 56:E4:33:A4:FF:15:7E:11:A7:56:8C:61:DB:3E:BA:DB:AC:B7:B5:A1
Authority key identifier: 93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
Certificate issuer: /CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Certificate serial: 019D378915D3AEFFA64173563888C7F59EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
Manifest number: 16DE
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl (hash: wMewVnWaVgxs5emTK5JFRuo4pmmRTson2tPq+0iRIPg=)
2: xrChCZKPpUH_V3yyUorXAC7-wuI.roa (hash: mu02wWY4fhbPfdL9W27X+rqqcQR4ghwCDLbVsERFcxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:15:d3:ae:ff:a6:41:73:56:38:88:c7:f5:9e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f25b72758da58f0f3ec0f0727353ebd2b44774
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=56e433a4ff157e11a7568c61db3ebadbacb7b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:0f:86:b8:68:aa:c3:d0:f8:23:03:f2:08:
c6:41:78:76:30:a5:91:e3:ed:b9:c0:21:81:19:10:
7a:28:d1:df:4e:29:ed:cb:45:58:3e:2f:dd:1e:34:
ba:34:de:67:ca:11:ba:be:ae:5f:ba:61:ea:d8:91:
0e:c1:2e:c8:0a:47:3f:ac:a1:13:63:81:c0:68:8c:
96:25:7e:2a:91:6f:e8:91:44:0f:9b:97:5a:f0:13:
91:b8:9c:60:29:f7:16:66:7c:d2:be:71:09:7c:21:
ab:e8:93:09:9a:bd:36:a0:04:65:01:2f:b5:ef:bc:
b8:1a:40:b2:de:cb:f6:31:0a:84:88:d3:60:63:68:
8a:80:19:53:a7:b7:77:d5:bc:98:83:c4:32:60:46:
b6:02:48:51:44:8e:6c:93:61:a3:51:c7:ca:84:cb:
65:a3:9e:48:ae:73:75:9d:d1:99:b5:6b:3c:c1:fb:
81:28:33:e7:70:9e:56:34:1a:d1:12:f8:44:a4:5f:
04:0b:53:c3:b6:3d:dc:31:9b:56:73:5e:40:5c:4a:
19:76:e0:4f:ff:f9:ae:32:c4:58:50:9b:10:bd:c1:
2b:a8:14:d9:3b:14:29:ee:e9:a3:fe:8e:bc:87:c2:
83:2b:3e:41:8c:fa:aa:17:87:1d:6b:9f:10:3d:aa:
5f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:33:A4:FF:15:7E:11:A7:56:8C:61:DB:3E:BA:DB:AC:B7:B5:A1
X509v3 Authority Key Identifier:
keyid:93:F2:5B:72:75:8D:A5:8F:0F:3E:C0:F0:72:73:53:EB:D2:B4:47:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_JbcnWNpY8PPsDwcnNT69K0R3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4e66a2-a372-48b4-90b4-82a3112f49c7/1/k_JbcnWNpY8PPsDwcnNT69K0R3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:48:8b:00:68:6f:df:c2:e0:b7:5e:9f:d7:0c:72:23:5b:17:
a9:37:d7:b4:63:72:0f:1c:3f:c3:5a:38:16:d2:b8:f5:b1:b3:
5b:9f:1d:66:9f:f1:d1:0e:79:66:d4:f1:05:25:d4:73:11:82:
d8:8f:09:c2:ba:ff:0c:16:91:50:56:05:0c:cb:ca:8b:4c:6a:
93:74:7c:41:47:60:bd:6a:b4:88:d4:bd:de:0f:89:fa:eb:90:
6a:c9:70:8f:47:e7:7e:62:c9:5c:e1:6e:b1:b7:66:fa:47:e2:
e9:dd:f6:11:f8:22:a7:b8:51:e4:7e:94:aa:9a:54:21:d0:34:
6b:30:27:c4:b1:ef:41:83:ee:cd:03:b2:ec:ec:b0:3f:73:fd:
af:81:d0:0f:fb:0e:2c:49:d5:87:45:78:81:03:71:af:d2:20:
b1:37:77:75:2a:89:bb:26:6c:bb:9a:40:ac:19:db:ee:05:4f:
25:ca:07:2d:e2:21:fb:54:d9:1d:84:d5:98:86:d5:d3:12:23:
dc:7a:06:d7:00:ca:4b:0f:41:9d:27:ba:1c:03:fc:52:e0:9a:
e5:c8:d7:66:5f:81:35:b4:66:a4:5b:88:2d:e7:0b:79:f7:00:
82:55:52:63:26:88:5b:6c:d7:a2:aa:b1:cb:7a:52:0a:40:8d:
46:39:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:05 2026 by rpki-client