Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File: J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier: z1rt9ssYnGlp0pQH6VxQRKQSjKf/yilqCfVQx7tDRcw=
Subject key identifier: 8E:42:18:43:5A:B1:7B:5A:56:21:69:D1:A2:2C:D3:CD:72:9B:E3:28
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer: /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial: 019D39778181D36AB4DF4DD5FF3A04450C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number: 08EC
Signing time: Sun 29 Mar 2026 12:00:26 +0000
Manifest this update: Sun 29 Mar 2026 12:00:26 +0000
Manifest next update: Mon 30 Mar 2026 12:00:26 +0000
Files and hashes: 1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: Q2jASater40dSEMuJIEvXeDJaqH6D5K/EJbeqdtDn5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:81:81:d3:6a:b4:df:4d:d5:ff:3a:04:45:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Validity
Not Before: Mar 29 12:00:26 2026 GMT
Not After : Mar 30 12:00:26 2026 GMT
Subject: CN=8e4218435ab17b5a562169d1a22cd3cd729be328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:d0:b5:0b:f6:da:c6:fa:cb:5c:70:f1:25:
b0:68:d5:bb:e7:f9:e7:cc:d6:76:ad:e3:e9:ca:06:
4c:45:7f:b3:f3:89:a7:8e:8a:a3:77:9b:eb:59:d2:
fe:43:de:de:ea:41:75:0b:6c:3f:0a:90:04:b9:88:
5e:f3:6c:04:ae:c7:71:c3:46:88:f5:b5:b2:d1:9d:
be:a5:15:8d:fc:bf:e6:76:ab:3d:0e:45:6c:d7:23:
16:70:18:f4:c6:dd:d2:75:e1:df:5c:10:cc:c6:2c:
b2:01:42:db:98:6c:40:8b:40:6a:27:a3:cf:22:41:
25:92:c7:4f:78:5f:4f:67:dc:e7:bf:8c:1e:29:0b:
f3:81:b6:15:60:90:c8:b9:a2:63:7f:d9:6c:e3:59:
47:ef:cf:d5:68:0a:52:1b:13:fb:64:e2:f7:fe:78:
20:7e:c6:b0:d3:c2:48:e3:f5:37:b7:11:9b:19:0e:
04:dc:f6:af:ea:21:40:2d:a1:d1:98:2a:46:5f:92:
03:81:90:b3:2d:cb:d6:95:c5:da:cc:6d:e5:10:ad:
fe:22:a0:6a:14:03:8a:67:78:86:d9:52:4e:06:d0:
00:a1:a9:49:0d:38:82:a5:5b:3d:72:33:88:2a:cc:
1f:50:53:53:b7:6a:8d:15:ab:d4:2b:2b:83:e9:6f:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:18:43:5A:B1:7B:5A:56:21:69:D1:A2:2C:D3:CD:72:9B:E3:28
X509v3 Authority Key Identifier:
keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:86:25:64:86:d3:55:45:9e:6f:58:23:d0:7e:41:79:25:cc:
2c:d6:bc:b3:31:a9:6b:84:7b:e5:4f:ec:a1:97:ac:ff:6e:c5:
64:3b:82:24:a0:b7:6b:ea:9f:86:1c:86:7f:3a:43:8f:d9:7c:
48:e7:48:3b:06:2f:d3:e3:3b:f4:54:de:dd:36:49:d2:68:cd:
f2:52:8d:98:15:6b:67:3f:fb:4c:f2:99:0e:46:08:ed:15:1c:
23:2b:cb:c8:75:5f:ef:4b:e6:3d:26:56:57:ec:a9:1f:c7:dc:
4c:16:58:1f:8e:93:0c:bc:82:07:9a:4b:f0:cd:e1:bd:11:4a:
d6:7b:2b:19:04:cf:33:3d:83:a8:31:99:be:83:20:f3:7a:de:
53:c3:79:1a:24:13:b0:0c:bf:16:a6:84:34:8e:47:b1:3c:e5:
22:f0:dd:04:f3:bf:80:3d:8f:85:5f:5f:af:69:8d:ac:be:6d:
ae:b3:85:98:14:ba:af:09:df:45:2f:0d:21:c1:aa:af:ea:c6:
01:b3:d0:45:42:50:52:45:00:70:c3:fe:33:b2:53:4d:72:66:
7c:89:78:22:21:03:fe:bf:82:6c:5d:b3:af:29:d2:98:b9:b1:
01:5a:14:b6:37:0b:c5:7d:d3:ab:e7:30:a5:fe:47:da:4a:b0:
b0:3e:93:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4GB02q0303V/zoERQydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODM3OTAzNTA4NzBmZGI1YjI2NzRiYzYxYzhkOGZkNjJk
NzcxOWIwHhcNMjYwMzI5MTIwMDI2WhcNMjYwMzMwMTIwMDI2WjAzMTEwLwYDVQQD
Eyg4ZTQyMTg0MzVhYjE3YjVhNTYyMTY5ZDFhMjJjZDNjZDcyOWJlMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDbQtQv22sb6y1xw8SWwaNW75/nn
zNZ2rePpygZMRX+z84mnjoqjd5vrWdL+Q97e6kF1C2w/CpAEuYhe82wErsdxw0aI
9bWy0Z2+pRWN/L/mdqs9DkVs1yMWcBj0xt3SdeHfXBDMxiyyAULbmGxAi0BqJ6PP
IkElksdPeF9PZ9znv4weKQvzgbYVYJDIuaJjf9ls41lH78/VaApSGxP7ZOL3/ngg
fsaw08JI4/U3txGbGQ4E3Pav6iFALaHRmCpGX5IDgZCzLcvWlcXazG3lEK3+IqBq
FAOKZ3iG2VJOBtAAoalJDTiCpVs9cjOIKswfUFNTt2qNFavUKyuD6W+GsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5CGENasXtaViFp0aIs081ym+MoMB8GA1UdIwQY
MBaAFCeDeQNQhw/bWyZ0vGHI2P1i13GbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQt
ZWNjNWZiYTA4MzQwLzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQtZWNjNWZiYTA4MzQw
LzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoYlZIbT
VUWeb1gj0H5BeSXMLNa8szGpa4R75U/soZes/27FZDuCJKC3a+qfhhyGfzpDj9l8
SOdIOwYv0+M79FTe3TZJ0mjN8lKNmBVrZz/7TPKZDkYI7RUcIyvLyHVf70vmPSZW
V+ypH8fcTBZYH46TDLyCB5pL8M3hvRFK1nsrGQTPMz2DqDGZvoMg83reU8N5GiQT
sAy/FqaENI5HsTzlIvDdBPO/gD2PhV9fr2mNrL5trrOFmBS6rwnfRS8NIcGqr+rG
AbPQRUJQUkUAcMP+M7JTTXJmfIl4IiED/r+CbF2zrynSmLmxAVoUtjcLxX3Tq+cw
pf5H2kqwsD6TPw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:39 2026 by rpki-client