Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: 2EBmdBnLn2AuqSAcAmszycpkZylv6u0612gTE20AEvs=
Subject key identifier: D2:DF:77:95:6C:17:1B:35:FD:CC:54:10:91:87:45:53:8F:F2:D0:B5
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 019D38D3C8AE589A60CC6EFC541A730169DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 120B
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: 00w7QTX0pDQY32R+2hG1g8dYmCfoPnEF5OZs2XfibkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c8:ae:58:9a:60:cc:6e:fc:54:1a:73:01:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=d2df77956c171b35fdcc5410918745538ff2d0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:26:06:ca:5e:03:d4:57:05:59:6c:e9:d7:
84:7b:b7:37:2c:68:9f:21:3d:c0:94:06:c4:ad:2a:
66:1e:eb:9c:77:80:74:c3:23:11:d1:ab:ac:2e:7d:
76:b0:09:0c:38:77:a5:cf:fc:66:98:be:bd:a9:94:
51:1d:92:bb:8c:5b:0c:bb:65:8e:2b:3c:b4:f7:55:
e5:1d:cc:43:09:23:7c:b6:54:c3:3c:ab:5c:d0:7f:
d5:9a:39:6b:6f:31:e8:fc:c0:10:96:aa:a0:ad:ea:
ec:9f:64:c2:31:54:40:ea:1c:6f:b6:63:d4:40:d0:
e0:3e:72:d0:52:2b:b1:23:0d:6f:63:6b:b5:5f:89:
f8:78:2b:ac:cd:b3:e2:67:d3:14:16:b7:88:a6:ef:
40:a2:88:06:4d:2a:48:6b:01:64:37:ef:2f:5f:db:
fb:df:0b:4f:7d:61:b8:fa:44:03:7d:c8:a1:65:73:
14:3a:f0:96:3d:e0:46:f7:a4:a8:59:1b:e9:8d:a0:
15:49:e1:a1:2a:cf:3d:cf:49:0d:89:8a:b9:bf:70:
25:89:ea:1a:16:b2:30:d9:b7:de:34:48:ca:23:9b:
70:c2:9c:d4:fe:ba:8c:4c:69:7a:54:6e:67:17:4c:
eb:a9:6d:60:a3:df:de:ec:cb:da:d3:a2:8e:53:12:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:77:95:6C:17:1B:35:FD:CC:54:10:91:87:45:53:8F:F2:D0:B5
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7a:16:b7:e9:6e:a4:ae:44:29:81:65:ed:91:b1:f3:f7:a5:
4e:e9:39:2d:0d:88:54:f4:85:ba:fd:06:03:d7:9c:26:38:b8:
07:d3:e7:2f:36:eb:e8:e9:42:12:b5:f6:4a:10:ad:b6:2f:65:
7b:cc:57:d3:07:85:fc:3b:27:d0:7d:8e:f4:32:4d:2a:2e:eb:
22:9c:51:25:fd:9f:92:fa:cf:17:ae:1a:12:88:9a:9b:f7:94:
de:fb:87:a1:c4:73:0a:96:7e:1f:37:bc:fb:35:27:80:21:3b:
70:99:c4:21:08:f0:2c:37:0a:12:47:0d:12:17:e6:07:82:6c:
2d:c3:39:6f:83:9b:fb:73:d0:fb:f0:d9:fd:59:c6:d5:02:7a:
aa:9f:a8:5c:28:05:08:80:14:39:fc:e9:f8:04:a4:00:ed:80:
7a:fc:ac:1c:12:ab:c2:f1:52:07:66:72:64:99:14:3a:3d:09:
b2:d4:de:37:ef:13:56:9e:00:91:93:95:61:a5:28:ef:55:9d:
a5:82:17:b6:a4:4a:2b:db:bc:77:d8:3b:85:6a:2f:e9:23:95:
e3:0d:eb:01:bf:94:75:90:f3:aa:52:02:27:b5:ea:06:12:dd:
40:74:aa:67:e9:b1:cf:85:26:dd:3c:73:c9:7a:fc:64:8f:31:
4e:7b:fa:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408iuWJpgzG78VBpzAWndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYzI0NWZhMDI1YjUxNTdjODc5ZGIxN2FmYjZhOGZkZGUz
ZjhmNGYwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
EyhkMmRmNzc5NTZjMTcxYjM1ZmRjYzU0MTA5MTg3NDU1MzhmZjJkMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CgmBspeA9RXBVls6deEe7c3LGif
IT3AlAbErSpmHuucd4B0wyMR0ausLn12sAkMOHelz/xmmL69qZRRHZK7jFsMu2WO
Kzy091XlHcxDCSN8tlTDPKtc0H/VmjlrbzHo/MAQlqqgrersn2TCMVRA6hxvtmPU
QNDgPnLQUiuxIw1vY2u1X4n4eCuszbPiZ9MUFreIpu9AoogGTSpIawFkN+8vX9v7
3wtPfWG4+kQDfcihZXMUOvCWPeBG96SoWRvpjaAVSeGhKs89z0kNiYq5v3Alieoa
FrIw2bfeNEjKI5twwpzU/rqMTGl6VG5nF0zrqW1go9/e7Mva06KOUxL1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLfd5VsFxs1/cxUEJGHRVOP8tC1MB8GA1UdIwQY
MBaAFK7CRfoCW1FXyHnbF6+2qP3eP49PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQt
NzRlN2M5NTY3MTQ3LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQtNzRlN2M5NTY3MTQ3
LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnoWt+lu
pK5EKYFl7ZGx8/elTuk5LQ2IVPSFuv0GA9ecJji4B9PnLzbr6OlCErX2ShCtti9l
e8xX0weF/Dsn0H2O9DJNKi7rIpxRJf2fkvrPF64aEoiam/eU3vuHocRzCpZ+Hze8
+zUngCE7cJnEIQjwLDcKEkcNEhfmB4JsLcM5b4Ob+3PQ+/DZ/VnG1QJ6qp+oXCgF
CIAUOfzp+ASkAO2AevysHBKrwvFSB2ZyZJkUOj0JstTeN+8TVp4AkZOVYaUo71Wd
pYIXtqRKK9u8d9g7hWov6SOV4w3rAb+UdZDzqlICJ7XqBhLdQHSqZ+mxz4Um3Txz
yXr8ZI8xTnv6ZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:48 2026 by rpki-client