Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: lO1uW4tJqJtNxd/Vk/t4JaczyXSblIVof1UuaCYxwac=
Subject key identifier: A9:4A:E9:9B:77:22:0C:B2:8F:83:36:F5:D3:C3:A3:58:9F:F3:EE:C4
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019D39AF1E95C111C5C043F2C55AD5C707AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 11C1
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: Fzk5vC5uRSHcU3KFIu4qP89TQocfoK54c4FEtP4Eryg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1e:95:c1:11:c5:c0:43:f2:c5:5a:d5:c7:07:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=a94ae99b77220cb28f8336f5d3c3a3589ff3eec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:cf:35:13:6f:ad:2d:3c:3a:b0:60:bb:0a:
2d:cd:06:db:b4:ef:a3:4f:b6:c1:54:06:75:16:c0:
d9:1f:cb:1a:de:2c:0b:20:a1:7b:2a:aa:59:d8:47:
ed:2c:4f:fa:5b:19:35:61:d5:d6:6c:ef:ae:09:cf:
aa:95:6f:ac:85:2e:98:a4:14:8f:84:d9:5d:3e:b2:
ee:be:9a:51:ee:0d:15:79:f3:f0:0f:1b:a3:4f:de:
af:22:14:a2:47:44:d6:fb:88:2a:dd:f5:0d:7e:ab:
1d:14:30:75:b3:94:72:e0:0a:02:10:2c:7b:2e:8b:
91:08:94:7b:eb:57:c2:05:04:be:14:0e:5f:95:49:
39:83:4b:69:48:d0:4f:59:c5:e9:27:64:9a:3f:94:
cc:64:b5:49:7b:c6:e9:a6:a0:4f:40:dc:2c:46:5c:
31:1d:55:e7:8b:7f:70:7e:b5:81:bb:19:b1:06:ab:
c5:20:59:89:16:8f:88:9f:ba:be:34:ed:04:98:0e:
11:4c:8b:cc:e2:cb:24:ea:c3:d0:9c:66:b5:94:ab:
dc:2e:56:88:cc:fc:89:5a:ec:ba:92:cf:e6:e9:1c:
0c:de:fc:54:06:7b:7e:96:06:73:2c:2c:62:b9:d0:
f4:00:3b:3c:7c:e1:12:fb:9f:83:59:61:cf:08:cf:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4A:E9:9B:77:22:0C:B2:8F:83:36:F5:D3:C3:A3:58:9F:F3:EE:C4
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e4:5a:ca:45:ae:27:2a:fa:3c:11:52:3f:62:13:2f:fe:5d:
60:f7:76:99:69:80:e4:3c:f7:46:aa:ed:dd:a0:ba:db:11:1b:
3b:80:1a:e2:42:4b:97:a7:75:33:56:f2:62:24:e1:d9:6f:70:
0f:e0:b5:26:7a:26:bb:b9:19:fe:67:81:01:7d:ea:ab:c5:52:
9e:a1:76:fb:7e:db:81:b9:c3:9b:83:8a:87:b4:de:26:e9:c8:
a8:fc:cc:ec:11:f8:12:55:dc:36:02:67:91:9b:f4:43:5c:d0:
29:57:64:0a:d3:1b:a4:05:16:76:5e:9c:d1:00:56:2f:29:44:
a1:0e:53:06:f4:2a:2c:08:0b:4d:df:5b:7f:20:46:b1:c3:79:
dc:44:ad:e6:2f:6f:8e:cc:d3:1a:8d:3d:a9:a5:78:03:f2:1a:
f6:37:d3:14:f0:3d:08:b8:c1:fa:cd:a9:1a:45:6d:6a:e4:97:
60:18:79:0e:ea:a6:28:a8:37:79:b3:70:e1:04:ff:5f:bf:58:
0e:0d:2f:ac:47:b9:60:66:c7:bd:59:ce:46:46:72:0b:4f:d1:
db:01:59:70:c3:86:ba:a3:de:fb:d2:5e:62:cf:3e:a5:a3:c6:
f5:48:43:67:38:a4:84:13:a2:d1:22:80:67:78:19:d8:22:95:
37:0f:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:20:59 2026 by rpki-client