Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: EJ2oJest9eohe01vaGf2IyCamVbZnyVjkUeegea3Hmg=
Subject key identifier: 54:3F:B0:DD:E6:87:E8:3C:D7:6E:B1:03:FB:AD:28:71:B5:AE:43:DF
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 019D375333DE4D109A7BE0744BA09A242ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 09F8
Signing time: Sun 29 Mar 2026 02:01:32 +0000
Manifest this update: Sun 29 Mar 2026 02:01:32 +0000
Manifest next update: Mon 30 Mar 2026 02:01:32 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: HZUGquwGzJiy9wHG0ktpCpgkFHIlqmv9V/uLqbhzcpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:33:de:4d:10:9a:7b:e0:74:4b:a0:9a:24:2e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Mar 29 02:01:32 2026 GMT
Not After : Mar 30 02:01:32 2026 GMT
Subject: CN=543fb0dde687e83cd76eb103fbad2871b5ae43df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:c8:ca:e6:b8:a0:83:cb:c4:fa:00:17:8c:
63:48:12:da:ec:60:af:85:91:1b:8b:71:e7:df:86:
f8:42:75:e1:f1:fc:87:9e:c0:70:ab:9f:0f:25:bd:
6c:d7:82:e0:2c:d2:51:30:92:84:d1:fd:94:e5:01:
23:35:d0:b4:a3:84:08:54:24:72:e7:aa:f7:7d:bd:
83:31:0d:34:c1:a5:9b:a0:37:40:b0:b4:81:a0:21:
1b:f7:29:7d:5e:56:5b:56:2e:51:65:48:81:99:dc:
33:b9:29:7f:df:33:58:38:76:a6:b9:7b:47:8c:bd:
bf:4c:4d:2d:87:e8:86:3f:88:ea:ff:7a:a6:a6:91:
cb:ec:47:87:31:6e:97:3c:87:01:68:70:de:42:56:
20:e9:5b:fd:d6:b3:4e:5f:4b:27:2e:86:de:99:00:
82:66:16:65:a3:0f:2d:70:5b:11:85:c4:be:2a:80:
f3:20:dd:2d:02:95:08:ea:11:40:2e:6d:22:7a:6a:
1f:03:03:27:6c:74:1c:18:3e:0d:02:ef:7b:7d:10:
08:87:c0:8c:43:9b:3a:cc:92:56:3f:14:6d:03:25:
8c:9f:ec:14:06:27:38:1f:63:e4:29:36:ea:ab:e9:
f0:bb:97:29:e8:7b:e1:51:33:48:28:09:ed:dc:b6:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3F:B0:DD:E6:87:E8:3C:D7:6E:B1:03:FB:AD:28:71:B5:AE:43:DF
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:47:2b:79:56:65:8b:ad:df:f8:6a:d3:99:6d:84:26:d4:
7f:4d:c1:c3:6c:39:77:d7:85:3f:9d:1f:dd:12:5d:70:22:e3:
3b:4e:86:08:f1:d1:32:65:b1:ba:ec:55:2e:b3:24:0a:0a:bb:
6c:5f:92:9a:15:46:9a:36:ec:40:83:26:39:eb:23:53:84:50:
ea:c1:6b:21:6b:1e:40:1d:a4:8c:f2:f8:1f:4b:63:9b:c4:41:
28:59:81:20:b0:c0:5c:a8:2c:52:64:92:12:fb:c1:fd:94:ea:
77:c6:e7:70:d4:d8:59:2e:08:b8:16:25:a5:0f:1c:a9:09:a7:
48:1d:7d:23:c1:48:15:9b:64:d4:e0:02:c2:60:a4:76:f8:30:
25:71:1d:7b:bd:5a:0c:2e:c4:f0:aa:0e:1b:73:04:1d:f8:6c:
96:a6:77:b7:fb:11:9b:c3:b2:d5:9a:61:1b:48:d0:fd:bc:4a:
ba:0b:f1:77:77:a0:d8:ee:0b:e7:30:76:ed:89:2c:2e:8e:2b:
a3:ae:44:ba:3c:6c:eb:36:0a:d7:3f:bf:2d:2b:b4:b3:33:ee:
94:db:50:05:68:79:4b:52:c8:03:5d:8a:cc:d6:ce:6e:88:23:
67:98:9b:9e:cd:9d:50:d4:0d:3d:47:b7:fc:8c:bd:31:23:2c:
72:b2:fa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:23 2026 by rpki-client