Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: hNDdwX0B4eNjujCplWNmkZCs+wHZVx/p6R1bivfebAw=
Subject key identifier: 50:3D:D3:34:54:FC:39:58:D6:39:D5:CD:BB:B3:E1:FA:72:4E:50:AA
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 019D38656128D9F5B882AEBC6753DE260824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 0BED
Signing time: Sun 29 Mar 2026 07:01:01 +0000
Manifest this update: Sun 29 Mar 2026 07:01:01 +0000
Manifest next update: Mon 30 Mar 2026 07:01:01 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: 3eHWUZbRyQAfZbwOKpGUWx8vI40fRdG+ScIkrYDSFLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:61:28:d9:f5:b8:82:ae:bc:67:53:de:26:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Mar 29 07:01:01 2026 GMT
Not After : Mar 30 07:01:01 2026 GMT
Subject: CN=503dd33454fc3958d639d5cdbbb3e1fa724e50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:9e:a3:80:96:78:97:90:5b:1c:05:69:ea:
66:cd:84:8c:ed:e3:b7:19:6d:7c:d8:c7:df:af:d9:
c8:1b:70:de:d3:93:80:d7:a1:f1:b9:ae:8c:1a:7d:
e8:54:d7:49:77:e9:81:43:05:13:61:e3:14:27:be:
c8:ac:aa:10:da:f5:55:1b:5f:79:81:65:d0:43:49:
ea:8c:17:56:78:0d:e2:de:4a:cc:89:c6:87:54:dd:
b0:f5:50:c0:f9:bd:b7:da:fb:29:76:9d:60:a9:85:
cb:bf:fe:10:32:55:d7:2e:c9:19:a7:45:2a:ea:0d:
37:8c:90:ff:4f:c2:91:a7:97:f2:e0:6c:ce:21:86:
20:ad:4b:5f:d3:e0:31:7a:5f:72:06:c0:90:8e:50:
3e:c9:a9:f8:d1:06:5a:01:38:57:2f:f3:ae:90:0e:
b5:98:8d:c0:ac:da:7c:44:d0:a8:56:ab:5b:08:d2:
3f:50:af:73:ba:e4:3e:19:74:22:91:19:cb:61:60:
85:94:02:ae:72:04:a1:95:62:0a:4d:91:bc:71:fc:
ed:4d:09:8c:3d:39:f8:52:b6:69:a7:57:4c:6d:24:
ea:9f:8f:6f:d3:0e:c3:9a:4e:2d:d7:90:61:02:58:
35:e4:55:de:ae:bd:dc:4e:4c:1b:f4:5a:c6:f9:b0:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3D:D3:34:54:FC:39:58:D6:39:D5:CD:BB:B3:E1:FA:72:4E:50:AA
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:4c:21:a4:d8:16:fd:d2:47:1d:6b:fc:f0:35:23:e6:35:
d0:f8:41:f8:14:fa:a9:ab:00:4e:29:54:c9:18:60:82:2f:da:
92:9e:26:9d:c2:d9:d7:ff:9d:8c:4f:2c:c6:be:e7:4f:11:8d:
27:28:5d:4e:68:3e:bc:47:14:c1:7b:f3:d8:96:27:95:b3:7a:
ec:ad:3d:db:ef:40:1b:5b:3a:48:1f:b8:28:fb:b4:4e:23:c8:
99:ea:85:0a:d7:55:50:69:b5:2c:3d:dc:1c:7f:22:8a:5f:53:
06:77:1f:87:29:2b:3f:30:1f:f5:dd:c0:6b:3d:20:b4:0b:a8:
93:0a:1e:a5:1b:f4:44:47:2b:b6:b1:d1:f3:5c:26:98:42:a2:
30:52:45:6f:b9:07:5f:5a:2f:81:9a:dc:1f:55:e5:1e:e1:60:
59:68:cc:42:a4:87:f7:fb:f8:67:d8:0f:70:89:17:06:dd:d2:
fe:a9:df:55:23:81:99:b6:2c:7b:f4:c5:96:6e:fd:8c:4b:74:
b0:ae:ad:2a:40:13:ab:94:fd:24:d7:b3:5e:74:80:26:6e:46:
8f:14:16:b5:01:e7:e3:ed:b4:0c:fd:4b:49:ee:97:23:80:00:
54:80:a1:ba:0b:4d:39:a3:b7:1c:7c:80:39:92:29:52:f8:ce:
fe:34:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:19:53 2026 by rpki-client