Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
File: JGv0aYcy2l-8fCAC9jlnxo9W22w.mft (raw, json)
Hash identifier: 8I2FxaismcGXD7Ah1Af1QziIGAGV+1WYtRwzQKxbYss=
Subject key identifier: 41:CF:83:C7:07:4F:FE:30:F0:9B:3F:0C:06:9B:48:1B:71:D1:4E:6E
Authority key identifier: 24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
Certificate issuer: /CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Certificate serial: 019D2A72D6086A5E09C7C203B48D1F548D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
Manifest number: 03E6
Signing time: Thu 26 Mar 2026 14:01:02 +0000
Manifest this update: Thu 26 Mar 2026 14:01:02 +0000
Manifest next update: Fri 27 Mar 2026 14:01:02 +0000
Files and hashes: 1: JGv0aYcy2l-8fCAC9jlnxo9W22w.crl (hash: oTZxok0RLRhow96TC9VbB5gxhsrPR5tWg6Ydj8wyl+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d6:08:6a:5e:09:c7:c2:03:b4:8d:1f:54:8d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246bf4698732da5fbc7c2002f63967c68f56db6c
Validity
Not Before: Mar 26 14:01:02 2026 GMT
Not After : Mar 27 14:01:02 2026 GMT
Subject: CN=41cf83c7074ffe30f09b3f0c069b481b71d14e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:c5:f2:43:c2:2b:5f:d8:1c:dc:fb:a6:f0:
b9:41:26:05:a4:a2:b7:e6:96:f8:6e:cb:f9:2a:d7:
10:35:9d:06:15:6b:be:c5:94:87:c7:40:90:af:94:
2e:d6:d7:7a:97:e5:8e:de:c7:f7:ec:50:2b:3a:bf:
b0:20:43:b2:b7:29:69:a5:52:0f:b8:c4:5b:80:5f:
c0:d5:82:01:70:cb:7c:25:d5:62:80:0a:60:e7:77:
da:53:e3:1b:d6:d0:b1:66:12:9e:0e:9d:c1:26:a7:
9e:6e:11:df:ee:ce:4a:4c:21:0a:79:95:3d:7f:fa:
ca:83:0c:16:92:04:43:2b:48:25:43:b1:40:6a:2a:
46:1c:89:3b:32:ca:04:93:70:f1:d5:df:55:27:7f:
36:31:47:55:25:71:52:cc:68:91:e2:ef:d9:8a:5d:
37:e0:09:af:42:98:68:63:5d:80:fa:4d:73:0f:28:
42:47:fc:df:99:3a:09:af:65:cb:d4:da:88:ff:77:
bd:dc:b4:c2:3f:80:b7:80:aa:3a:bb:96:12:86:e0:
fa:a5:4c:5b:76:68:b4:41:80:db:7c:74:1a:e8:19:
b6:e5:7c:06:b1:85:4a:21:49:e1:08:f3:f1:89:eb:
37:9c:7b:16:2d:2b:42:73:98:72:13:12:8e:0c:57:
fa:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:83:C7:07:4F:FE:30:F0:9B:3F:0C:06:9B:48:1B:71:D1:4E:6E
X509v3 Authority Key Identifier:
keyid:24:6B:F4:69:87:32:DA:5F:BC:7C:20:02:F6:39:67:C6:8F:56:DB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGv0aYcy2l-8fCAC9jlnxo9W22w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f9666-904a-4622-9066-f5122bac14aa/1/JGv0aYcy2l-8fCAC9jlnxo9W22w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7c:3a:19:00:af:65:31:29:60:ce:bf:c9:90:d2:c4:d7:13:
56:22:ce:e1:3c:c1:29:cd:9a:98:14:a6:5c:70:9a:03:86:50:
b2:8e:f3:3d:3d:24:6e:09:e4:5f:ab:f3:52:27:9a:0d:c3:b0:
3e:ec:eb:3b:85:62:5e:d3:ba:51:a0:93:f3:dc:a3:12:a1:4b:
6b:12:11:56:ee:01:f6:73:1b:b4:0a:46:a4:eb:e8:36:06:08:
61:6a:c1:7b:06:c1:29:5d:9f:67:54:5c:d7:19:a6:12:9c:a6:
61:e7:74:0e:d4:6d:2a:ad:3b:c9:99:7d:44:1e:6b:0e:39:17:
64:50:d4:e9:c9:f2:04:74:80:e4:67:0d:0d:0e:ed:64:c8:8c:
c7:38:32:a9:0d:95:30:9b:cd:26:c4:a9:76:6b:ff:c6:04:32:
0f:a4:96:2a:37:97:2a:12:f0:53:bd:3f:15:a7:98:b0:bf:97:
6c:17:91:7b:e7:7c:0f:f8:25:bf:8a:6d:a3:64:bd:0d:12:32:
45:ce:c7:16:8f:1d:12:ae:c3:ae:69:ae:40:b4:a8:3c:ec:53:
5e:85:16:7d:68:7b:48:f0:6d:db:c3:85:ce:1a:a3:67:cb:6a:
c6:e7:86:2a:01:05:32:bc:07:04:d8:78:11:d1:da:9a:a2:e7:
31:dc:94:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:19 2026 by rpki-client