Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: pZBukwPdXp3F3ypUeg1J4L1Rdb5TQRvKGz0CP6f+2a4=
Subject key identifier: 47:5C:18:37:18:5C:8A:18:43:D4:44:7F:E9:6A:6D:1B:03:CE:E4:BD
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019D3909B1F89C7A025923B4F913586383AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 5bYfoPsI77LiarFD8pxAE1fD1ab9jETNxV3RXJovlQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b1:f8:9c:7a:02:59:23:b4:f9:13:58:63:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=475c1837185c8a1843d4447fe96a6d1b03cee4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a5:94:a2:7a:fc:68:66:b5:12:1b:23:ab:5c:
01:38:46:cc:89:1a:97:cc:dc:40:8f:d4:a8:a6:e3:
a2:8d:0f:b6:de:20:cf:34:77:1d:8f:57:63:fe:4b:
ce:fe:2b:c4:54:e8:40:56:bd:04:35:b8:eb:39:e3:
44:a4:81:11:5e:7e:61:87:58:7e:d6:84:5b:d2:1c:
bf:b2:8f:3d:e3:a3:71:a7:d7:7e:ad:a0:03:9c:53:
b9:d5:fc:90:45:03:b7:75:cc:a6:0d:2d:88:be:4e:
9f:6b:15:1b:f5:26:ad:7c:eb:58:aa:d2:2b:cf:24:
a6:55:4b:b3:62:9f:8c:a6:bc:f1:70:10:29:cd:19:
81:46:ce:3c:6f:fa:d3:75:98:5f:d5:67:03:78:d4:
e1:31:cf:b9:a3:fd:0c:ce:82:5c:51:44:e6:3e:15:
51:67:62:bf:99:a2:30:3d:9f:be:54:86:1f:74:2a:
f7:f1:50:51:86:85:13:3a:e8:62:95:62:3e:0d:00:
d3:4b:bb:04:3d:0c:ff:9d:7b:26:54:51:13:dd:c4:
01:b9:cf:3f:c5:28:80:f3:7c:25:49:4d:f9:73:16:
12:7f:2d:10:65:86:c8:0a:74:54:1e:c9:2a:9e:35:
7b:87:5f:75:32:6c:a9:27:fa:b9:b7:e9:3c:8e:e5:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5C:18:37:18:5C:8A:18:43:D4:44:7F:E9:6A:6D:1B:03:CE:E4:BD
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:35:b2:85:62:e0:f9:a3:d4:f6:dd:c1:32:62:c8:8c:8f:
dd:18:33:48:bc:48:b6:c8:d5:e8:e4:2a:9f:d6:86:ee:ea:83:
45:86:d0:e4:b0:51:14:a2:75:6a:0d:1c:e3:77:fd:33:e6:a6:
e6:3e:c5:e2:c5:88:d5:67:7b:dd:76:73:fd:04:c4:8c:9c:a2:
95:6e:3b:74:7e:c5:13:c5:d0:fe:b7:88:e7:ac:74:65:f7:05:
9b:c3:aa:3a:f4:13:98:a0:8c:40:59:f9:40:fd:f1:a7:d2:00:
d0:04:11:54:b6:5a:0f:18:8c:5b:d4:20:a1:62:59:f1:81:8d:
1b:f7:64:fb:8e:d0:1a:05:ec:07:80:28:4d:f9:c8:e9:e3:fb:
cb:88:34:87:53:6f:fe:cd:3e:91:df:31:ba:44:c7:86:fa:00:
1f:58:76:e6:8c:71:59:0b:a3:ed:7e:c4:f0:54:77:d0:62:cb:
b3:39:c6:4e:e6:38:a4:3b:70:85:8a:5a:eb:aa:37:18:a4:3a:
ee:97:6e:d9:97:27:4e:99:61:6d:77:81:6b:b7:f9:57:93:b6:
e7:be:01:45:6b:23:fe:8e:d5:c6:5c:6d:aa:29:b0:89:95:f0:
e1:a1:da:19:8c:0e:60:81:ee:d4:9b:d6:e5:fd:81:1b:a4:9d:
02:ab:4f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CbH4nHoCWSO0+RNYY4OsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk
Yzc1ZjkwHhcNMjYwMzI5MTAwMDI5WhcNMjYwMzMwMTAwMDI5WjAzMTEwLwYDVQQD
Eyg0NzVjMTgzNzE4NWM4YTE4NDNkNDQ0N2ZlOTZhNmQxYjAzY2VlNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKWUonr8aGa1Ehsjq1wBOEbMiRqX
zNxAj9SopuOijQ+23iDPNHcdj1dj/kvO/ivEVOhAVr0ENbjrOeNEpIERXn5hh1h+
1oRb0hy/so8946Nxp9d+raADnFO51fyQRQO3dcymDS2Ivk6faxUb9SatfOtYqtIr
zySmVUuzYp+MprzxcBApzRmBRs48b/rTdZhf1WcDeNThMc+5o/0MzoJcUUTmPhVR
Z2K/maIwPZ++VIYfdCr38VBRhoUTOuhilWI+DQDTS7sEPQz/nXsmVFET3cQBuc8/
xSiA83wlSU35cxYSfy0QZYbICnRUHskqnjV7h191MmypJ/q5t+k8juWFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdcGDcYXIoYQ9REf+lqbRsDzuS9MB8GA1UdIwQY
MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt
NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl
LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVg1soVi
4Pmj1PbdwTJiyIyP3RgzSLxItsjV6OQqn9aG7uqDRYbQ5LBRFKJ1ag0c43f9M+am
5j7F4sWI1Wd73XZz/QTEjJyilW47dH7FE8XQ/reI56x0ZfcFm8OqOvQTmKCMQFn5
QP3xp9IA0AQRVLZaDxiMW9QgoWJZ8YGNG/dk+47QGgXsB4AoTfnI6eP7y4g0h1Nv
/s0+kd8xukTHhvoAH1h25oxxWQuj7X7E8FR30GLLsznGTuY4pDtwhYpa66o3GKQ6
7pdu2ZcnTplhbXeBa7f5V5O2574BRWsj/o7VxlxtqimwiZXw4aHaGYwOYIHu1JvW
5f2BG6SdAqtPZg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:47 2026 by rpki-client