Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: ula3NHtxuUq+F7ATN8EWhIe0tDvzzwpH71himDZWCR0=
Subject key identifier: 03:94:0A:9F:97:AA:4B:88:0A:63:EB:05:BF:DC:F8:FD:D7:E9:2B:13
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 019D39780B4D5F3F98B6AA8CF86781405051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 0316
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: v3odJf9D3pEFTG/R+l+gorT2N9bM9MdGYX3lPy7t9Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0b:4d:5f:3f:98:b6:aa:8c:f8:67:81:40:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=03940a9f97aa4b880a63eb05bfdcf8fdd7e92b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:d8:7d:8d:6e:96:69:da:bc:cd:fd:56:67:
fb:3d:7a:b5:85:1d:9c:8c:37:c9:f3:7c:d3:c0:a1:
0e:bd:02:cb:c4:9d:09:a4:b0:f4:59:57:3d:34:38:
ff:4e:9b:73:2f:5d:a8:ba:4d:43:19:cf:24:c4:3b:
0a:fb:c9:e1:07:b1:05:24:c9:cf:0d:23:af:aa:ba:
57:b7:c7:7c:1d:20:63:18:de:3b:67:e9:3f:3a:09:
3e:10:9e:fa:49:74:52:4b:fc:66:34:1c:ac:7b:3f:
87:ef:61:ce:ce:c0:70:81:33:a9:55:2b:14:20:53:
b0:a9:1f:52:4d:63:54:24:0e:48:62:a4:04:61:10:
8d:92:48:43:00:19:58:7f:d0:b6:93:11:5b:2c:01:
16:68:2f:3b:9b:c3:1a:06:2f:c3:15:00:37:31:26:
5a:f7:5d:5f:b6:79:c0:20:b7:23:41:ec:ae:08:95:
2d:19:87:14:38:81:e7:df:82:65:a6:07:81:8b:a7:
a8:67:92:d4:41:e1:60:30:e8:04:bc:c4:ff:26:a5:
33:2a:50:72:6f:d7:22:c3:76:9e:56:a0:0b:d0:61:
b7:5b:19:62:4e:9e:9b:fe:73:d7:14:0f:3a:aa:d6:
92:5e:96:c0:bf:46:1a:e2:2c:18:fb:09:28:5c:04:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:0A:9F:97:AA:4B:88:0A:63:EB:05:BF:DC:F8:FD:D7:E9:2B:13
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:98:a9:db:d2:d4:f3:3e:a5:f0:51:02:e6:ea:39:03:8c:80:
bd:c5:5c:40:0e:7e:1e:a7:38:f5:97:d6:56:cd:9d:8f:3e:7d:
c5:de:09:c4:92:33:fc:79:cf:61:c2:1b:a2:cc:cd:2c:00:52:
8b:91:cf:4f:f0:4c:42:c3:7a:79:2e:e8:16:65:f3:03:2e:d3:
9a:e7:49:af:84:ba:ab:ef:be:53:f5:60:b2:de:89:54:93:8e:
f8:ce:91:6b:a3:1a:48:0a:6a:e0:02:58:dd:32:4c:60:ba:2d:
ad:65:2e:f4:2a:49:42:a1:c2:49:27:53:ef:42:99:6a:1d:14:
cb:44:78:5d:00:ed:c2:ad:79:54:94:6c:a2:a1:04:0e:f9:90:
62:8e:c1:21:4d:17:c6:5a:6f:81:1b:18:be:74:c2:be:51:17:
84:84:0c:b3:19:5b:af:59:ea:11:19:02:62:8f:1a:cf:b1:e9:
73:df:bb:3a:e5:b7:6e:46:44:82:11:d4:a5:ea:c1:52:65:b5:
b7:ea:e0:79:52:4b:88:c5:2a:b7:d1:89:41:4f:7a:9c:c1:9d:
ed:a9:09:76:dc:e9:db:03:e5:6b:78:d1:59:85:04:be:83:0f:
72:be:cd:54:53:e1:f5:d1:6b:89:97:cc:17:d9:34:77:7f:bf:
ca:90:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:43 2026 by rpki-client