Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: nX0GsAy7rHhFSdVa4OLi5vrc6Aq7lAC4ho2KR/g+OdI=
Subject key identifier: 72:BA:88:2E:46:41:C4:FB:D4:AA:B7:1C:61:6B:4E:30:7D:66:3E:86
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 019D292958AB781B494654C4A95AD3833A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 13BB
Signing time: Thu 26 Mar 2026 08:01:08 +0000
Manifest this update: Thu 26 Mar 2026 08:01:08 +0000
Manifest next update: Fri 27 Mar 2026 08:01:08 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: TQ7GRmLnsv91YVna1DQoay8OduFgFbU7bNnf3erzKjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:58:ab:78:1b:49:46:54:c4:a9:5a:d3:83:3a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Mar 26 08:01:08 2026 GMT
Not After : Mar 27 08:01:08 2026 GMT
Subject: CN=72ba882e4641c4fbd4aab71c616b4e307d663e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:26:e7:fd:c9:d6:b8:84:60:9d:d8:ec:a9:
e2:ba:91:6d:1e:75:80:c7:f4:63:eb:a6:d6:d0:5c:
55:cd:08:9e:bd:44:38:a5:86:d3:8d:2c:fc:ac:fc:
f3:0f:3f:73:58:20:e8:c5:4d:9f:cd:db:e0:ed:f7:
c7:78:88:ff:e5:32:36:06:27:22:b1:03:b3:41:04:
d8:57:06:32:c9:f7:c2:9e:b0:33:9b:8c:f4:6a:4b:
8f:4e:5c:1a:bd:4f:ff:7e:fc:8f:30:d4:06:0c:75:
62:b7:d4:43:8f:80:dc:3f:d0:08:68:df:a8:0a:5e:
eb:a6:1b:74:c0:ad:66:54:6c:c9:d6:9b:15:4d:df:
1f:38:dc:e1:e4:28:c7:81:66:3e:5b:88:f7:28:f8:
5c:06:84:3a:a9:a4:ac:6a:54:98:0c:2e:1a:00:99:
d6:89:9f:96:d6:58:d4:6d:d0:bd:d1:7e:4a:44:ba:
e0:b4:a0:03:f6:c8:c2:77:41:02:54:53:9a:84:40:
f1:c1:45:fe:f4:89:95:37:07:2d:21:61:1f:23:2a:
95:3e:3e:70:fb:7e:03:27:88:97:a8:cb:3a:c8:ee:
c9:7f:96:6d:47:be:cb:ba:88:b6:49:a3:ac:d3:45:
46:60:79:4d:55:db:0f:3e:b8:c9:eb:01:45:d2:e6:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:88:2E:46:41:C4:FB:D4:AA:B7:1C:61:6B:4E:30:7D:66:3E:86
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:d4:6d:4f:4a:6b:5f:eb:ed:66:42:a3:5c:8f:4f:f2:51:
e2:d2:e3:03:06:10:89:6b:c5:9b:cf:35:51:93:7f:a0:db:6e:
28:93:1c:62:f2:ea:5f:28:20:de:2f:34:2e:41:84:6a:2a:f6:
6c:af:d3:6b:98:74:78:7c:4a:a3:a2:c1:aa:dd:7b:38:c8:93:
af:13:6a:e4:d7:c3:9f:d3:1f:00:4e:59:b2:c1:24:3d:e6:60:
db:83:4e:8f:c2:88:11:8c:e1:69:20:90:ba:0e:b3:82:7f:a8:
57:65:b8:6f:95:d5:df:18:35:31:28:90:d6:32:be:37:c4:67:
16:a9:12:8c:d0:45:0f:11:1a:9a:2a:d0:de:8b:19:d7:95:33:
31:61:57:8f:74:6a:94:cd:55:68:d0:41:fe:1a:93:53:1e:26:
cf:55:eb:85:50:21:e7:e0:29:3b:3c:4e:02:da:29:9b:96:81:
03:04:52:8f:35:bd:27:2b:d3:82:62:76:79:2d:f3:a1:5a:15:
70:76:13:1e:c0:08:b5:d4:f8:ad:4b:c7:7b:71:a8:d3:2b:ed:
e3:62:7c:f0:77:19:91:79:00:41:57:cd:33:4e:65:e3:68:37:
c9:c0:9a:87:1a:8f:a1:16:19:14:ba:c3:98:a1:9a:2e:9d:17:
13:27:dc:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKVireBtJRlTEqVrTgzqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNzdjNmFlNDg4YzNhNjk3ODAzN2I3NzBhYTUyM2NiMjUx
YzlmZmEwHhcNMjYwMzI2MDgwMTA4WhcNMjYwMzI3MDgwMTA4WjAzMTEwLwYDVQQD
Eyg3MmJhODgyZTQ2NDFjNGZiZDRhYWI3MWM2MTZiNGUzMDdkNjYzZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCEm5/3J1riEYJ3Y7KniupFtHnWA
x/Rj66bW0FxVzQievUQ4pYbTjSz8rPzzDz9zWCDoxU2fzdvg7ffHeIj/5TI2Bici
sQOzQQTYVwYyyffCnrAzm4z0akuPTlwavU//fvyPMNQGDHVit9RDj4DcP9AIaN+o
Cl7rpht0wK1mVGzJ1psVTd8fONzh5CjHgWY+W4j3KPhcBoQ6qaSsalSYDC4aAJnW
iZ+W1ljUbdC90X5KRLrgtKAD9sjCd0ECVFOahEDxwUX+9ImVNwctIWEfIyqVPj5w
+34DJ4iXqMs6yO7Jf5ZtR77Luoi2SaOs00VGYHlNVdsPPrjJ6wFF0ubTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK6iC5GQcT71Kq3HGFrTjB9Zj6GMB8GA1UdIwQY
MBaAFI53xq5IjDppeAN7dwqlI8slHJ/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEt
NGE0NzFlNmMwZWYyLzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MzE3NjgtM2Q1OS00OWM0LThlNWEtNGE0NzFlNmMwZWYy
LzEvam5mR3JraU1PbWw0QTN0M0NxVWp5eVVjbl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARunUbU9K
a1/r7WZCo1yPT/JR4tLjAwYQiWvFm881UZN/oNtuKJMcYvLqXygg3i80LkGEair2
bK/Ta5h0eHxKo6LBqt17OMiTrxNq5NfDn9MfAE5ZssEkPeZg24NOj8KIEYzhaSCQ
ug6zgn+oV2W4b5XV3xg1MSiQ1jK+N8RnFqkSjNBFDxEamirQ3osZ15UzMWFXj3Rq
lM1VaNBB/hqTUx4mz1XrhVAh5+ApOzxOAtopm5aBAwRSjzW9JyvTgmJ2eS3zoVoV
cHYTHsAItdT4rUvHe3Go0yvt42J88HcZkXkAQVfNM05l42g3ycCahxqPoRYZFLrD
mKGaLp0XEyfcaQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:58 2026 by rpki-client