Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: 7q4xn3/O8CZ17F6WYnz/EmsCkCIr8uETZ/PqOSpuOao=
Subject key identifier: 38:2E:51:BD:84:94:75:64:36:A8:DD:5C:8D:00:24:67:50:66:5E:B2
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019D3865CDB11926C1D046974424CC3DFBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0839
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: 5WodoJRB5fZj+mMVoERXNoVATxt7BlEag4jU4781nkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cd:b1:19:26:c1:d0:46:97:44:24:cc:3d:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=382e51bd8494756436a8dd5c8d00246750665eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e4:5e:29:32:6a:76:53:6b:07:f8:ab:4c:34:
e7:a1:5d:af:fa:ec:07:c6:d2:f4:3e:47:f1:64:64:
b2:a2:50:2f:3b:3b:40:57:c5:7a:b5:b3:2a:1a:1f:
d1:f2:9a:89:5f:7a:ed:2d:47:69:4e:51:2a:a2:7b:
a4:2c:b9:7b:44:02:6b:23:8e:f3:84:8b:2c:4f:65:
eb:8c:37:bb:d3:02:97:69:47:ad:7d:bf:43:d6:df:
62:b3:29:87:4b:e7:41:ab:dd:2e:3f:d3:ad:9c:99:
e0:f4:8f:31:fc:1d:87:16:39:af:3e:cb:2e:0a:b9:
23:1d:fa:ce:ce:04:36:1f:98:d9:08:1c:e2:9b:6f:
da:2b:74:02:74:62:11:7d:5c:52:d7:9c:ba:fa:f7:
af:fe:35:5a:5b:a3:db:da:e3:83:39:4b:fe:3b:77:
12:d1:cd:7a:ab:ca:fa:b6:3e:a6:12:e6:9a:c5:60:
50:05:cd:d7:b7:d9:43:d9:a6:52:97:7e:ec:50:4b:
d0:0f:57:e6:a9:67:23:62:3e:53:35:99:d5:52:28:
2d:d8:ce:55:a2:08:46:a4:ec:69:3b:70:88:c3:60:
c9:27:02:11:88:ae:e6:d9:e0:f5:77:2e:5c:3d:1e:
71:99:21:14:17:49:5b:ec:19:ba:60:ad:10:8c:0e:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:51:BD:84:94:75:64:36:A8:DD:5C:8D:00:24:67:50:66:5E:B2
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:73:cf:60:4e:2a:c4:dd:d5:8d:8a:6a:7f:ad:de:19:57:0d:
63:20:92:bf:d9:3b:8f:e9:99:42:c9:9e:49:0a:7d:7c:da:7a:
90:ae:60:70:df:96:9c:01:ad:c7:d3:09:63:5b:fd:5c:2e:0c:
2b:76:53:70:83:5a:c1:43:43:a3:37:e3:55:6f:87:02:bb:d4:
4a:ec:cd:18:90:d4:a4:a2:2b:ce:93:c7:14:68:af:f4:92:17:
c1:7a:1a:67:c9:3a:8e:72:70:2e:3f:42:b9:7c:4f:75:ca:cc:
5c:ff:91:ab:44:3b:63:87:dc:3f:49:00:15:0c:9b:b2:4f:21:
35:df:6b:4f:ce:a3:57:4c:64:af:f3:98:8e:a0:a9:b0:41:ed:
88:5f:44:1f:dd:ec:b8:82:be:2b:03:68:e6:06:c4:3b:50:e2:
4f:8b:ea:58:f2:45:10:6a:31:86:19:07:9e:83:1a:03:a0:4b:
49:32:88:0d:9b:94:1b:94:bc:04:10:58:a9:93:62:ce:63:c9:
51:64:68:98:57:6a:a5:62:59:8f:bf:c4:ee:57:6f:42:b2:bf:
83:df:3a:0a:e8:f9:17:ec:75:47:d9:6d:2e:f0:2a:75:67:26:
ee:33:e8:78:15:b5:93:85:8c:63:ee:5e:93:f4:38:21:05:59:
65:fe:c0:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zc2xGSbB0EaXRCTMPfusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzIwYzVmZjBjZGJlMmQ1MWIwOGI4ZjYwMWU0ZjBhNDQ1
NTBmMzIwHhcNMjYwMzI5MDcwMTI5WhcNMjYwMzMwMDcwMTI5WjAzMTEwLwYDVQQD
EygzODJlNTFiZDg0OTQ3NTY0MzZhOGRkNWM4ZDAwMjQ2NzUwNjY1ZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+ReKTJqdlNrB/irTDTnoV2v+uwH
xtL0PkfxZGSyolAvOztAV8V6tbMqGh/R8pqJX3rtLUdpTlEqonukLLl7RAJrI47z
hIssT2XrjDe70wKXaUetfb9D1t9isymHS+dBq90uP9OtnJng9I8x/B2HFjmvPssu
CrkjHfrOzgQ2H5jZCBzim2/aK3QCdGIRfVxS15y6+vev/jVaW6Pb2uODOUv+O3cS
0c16q8r6tj6mEuaaxWBQBc3Xt9lD2aZSl37sUEvQD1fmqWcjYj5TNZnVUigt2M5V
oghGpOxpO3CIw2DJJwIRiK7m2eD1dy5cPR5xmSEUF0lb7Bm6YK0QjA6JIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDguUb2ElHVkNqjdXI0AJGdQZl6yMB8GA1UdIwQY
MBaAFI0yDF/wzb4tUbCLj2AeTwpEVQ8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQt
MWI1MTNlYmQ0MzMwLzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQtMWI1MTNlYmQ0MzMw
LzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHPPYE4q
xN3VjYpqf63eGVcNYyCSv9k7j+mZQsmeSQp9fNp6kK5gcN+WnAGtx9MJY1v9XC4M
K3ZTcINawUNDozfjVW+HArvUSuzNGJDUpKIrzpPHFGiv9JIXwXoaZ8k6jnJwLj9C
uXxPdcrMXP+Rq0Q7Y4fcP0kAFQybsk8hNd9rT86jV0xkr/OYjqCpsEHtiF9EH93s
uIK+KwNo5gbEO1DiT4vqWPJFEGoxhhkHnoMaA6BLSTKIDZuUG5S8BBBYqZNizmPJ
UWRomFdqpWJZj7/E7ldvQrK/g986Cuj5F+x1R9ltLvAqdWcm7jPoeBW1k4WMY+5e
k/Q4IQVZZf7AFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:32 2026 by rpki-client