Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
File: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft (raw, json)
Hash identifier: IguuC6aQDNzTWApTZn9kE7bCzV7M+xIrahPAMg3REdU=
Subject key identifier: A5:6C:1B:F9:E6:72:FE:5E:D8:D3:F2:8F:8F:A2:39:5D:FB:50:C8:1D
Authority key identifier: 25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
Certificate issuer: /CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Certificate serial: 019D2AE09F66765B20CA14ADF8ACEE5FEF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 16:00:57 +0000
Manifest this update: Thu 26 Mar 2026 16:00:57 +0000
Manifest next update: Fri 27 Mar 2026 16:00:57 +0000
Files and hashes: 1: JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl (hash: FgCpy8wBUAnWyohnK2DTsL/g8YHChfPSol+6wNdfonU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:9f:66:76:5b:20:ca:14:ad:f8:ac:ee:5f:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ba8795f3e7e2d2c7c90f1c3666cf7f9283da9e
Validity
Not Before: Mar 26 16:00:57 2026 GMT
Not After : Mar 27 16:00:57 2026 GMT
Subject: CN=a56c1bf9e672fe5ed8d3f28f8fa2395dfb50c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:c1:b4:22:0f:8d:b0:9f:fa:91:fd:17:71:
69:b3:ed:4f:87:d6:e5:9b:4c:7c:76:67:71:8a:23:
13:be:2b:7c:64:23:33:4a:29:cd:1c:6d:23:25:75:
7c:07:01:19:53:22:9d:f6:20:99:57:b8:8e:e1:f8:
7b:e6:61:b7:e6:fc:8f:02:0e:8f:48:ef:69:c8:e4:
2b:87:84:97:72:79:47:07:62:d2:dc:67:b0:8d:82:
cc:93:83:ff:d8:61:47:0c:e8:c3:31:96:0d:38:47:
f1:13:f5:72:d1:82:6e:dc:0e:19:4e:35:65:ee:dd:
90:8f:4f:b8:71:42:3e:cc:aa:84:47:44:11:77:a3:
1b:2a:54:99:a0:4e:a3:e1:c6:3e:ab:48:4b:09:51:
fb:5d:17:a5:71:b6:d9:e3:b2:95:68:57:41:06:51:
c2:8e:56:8f:f2:fb:17:21:fe:5b:89:6e:5b:3d:73:
81:da:a6:f5:db:1e:c9:f9:12:92:30:07:05:18:5e:
45:4a:73:d4:69:b8:ab:2c:b4:f5:2a:d8:6c:f3:2b:
d4:c8:85:a8:60:f7:af:e2:7c:36:3f:99:8f:3b:38:
11:86:fe:77:b0:86:b2:2c:18:e6:e2:df:d8:2a:46:
50:46:4d:1b:74:9f:31:09:b7:fa:f1:2a:b7:ee:26:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6C:1B:F9:E6:72:FE:5E:D8:D3:F2:8F:8F:A2:39:5D:FB:50:C8:1D
X509v3 Authority Key Identifier:
keyid:25:BA:87:95:F3:E7:E2:D2:C7:C9:0F:1C:36:66:CF:7F:92:83:DA:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/548417-5b01-4f5e-b9b3-4eddbeb8387b/1/JbqHlfPn4tLHyQ8cNmbPf5KD2p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:47:49:52:f1:9e:2f:49:38:dc:96:aa:19:eb:59:56:a8:
21:56:14:2e:57:4b:bc:05:aa:ec:08:9f:c6:1d:7d:de:71:bf:
68:60:29:02:07:03:8f:82:c0:64:65:ec:21:35:98:31:81:be:
9b:b9:4d:1b:de:97:53:15:cc:91:df:2c:40:22:97:ce:be:11:
b3:1a:d5:5a:a1:ff:d5:c5:77:71:8b:40:18:d6:28:47:2c:6f:
07:56:09:df:69:6f:b9:91:0c:cb:4a:00:08:45:67:cb:09:8b:
07:4c:98:44:4e:61:ea:d9:f6:18:9a:07:8b:33:27:ec:57:e0:
c0:8e:48:56:87:28:13:ef:bf:1b:df:79:f3:d2:d8:e1:63:32:
76:fb:76:29:11:d4:f5:f2:74:ba:27:a7:73:4a:4d:ab:40:7f:
6e:5e:20:86:7a:62:36:86:cb:bc:11:06:43:10:f1:36:24:e4:
9d:e2:34:d3:a3:63:d3:8d:38:51:c0:11:c0:57:7b:16:ff:c0:
f1:e2:aa:96:2d:70:2b:d5:42:23:b6:1c:11:22:f8:6f:d5:8d:
06:1d:85:b6:f6:bf:d3:64:c2:c1:0b:54:dd:8c:05:77:39:74:
c7:67:e8:07:52:bf:e5:56:00:70:7b:d8:18:c5:08:40:2c:15:
70:3b:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:26 2026 by rpki-client