Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: 6+k8+r9SOtcHI6R+mQj+vr3rttyMQjlgB6KtjWYcDlE=
Subject key identifier: 43:A2:9D:39:FE:73:3E:80:70:BD:9B:CE:D3:BD:45:62:43:37:43:95
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 019D28168C7021AF8826387745D3150589B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 04A1
Signing time: Thu 26 Mar 2026 03:00:59 +0000
Manifest this update: Thu 26 Mar 2026 03:00:59 +0000
Manifest next update: Fri 27 Mar 2026 03:00:59 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: vs/RRsTltX9f89Jyf6YP6INsVFEUTb7LLOTUBabSkXY=)
2: q9nb03LLGhEQgbaQ_RRS2Oti8mA.roa (hash: +gb3UnVeZl4+1DAMyjUb0CGvwvwAAF1A19rfF/kmb3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8c:70:21:af:88:26:38:77:45:d3:15:05:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Mar 26 03:00:59 2026 GMT
Not After : Mar 27 03:00:59 2026 GMT
Subject: CN=43a29d39fe733e8070bd9bced3bd456243374395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:cd:c7:90:07:c5:dd:ee:9f:6e:47:b2:8f:
cb:f9:7c:82:60:5f:ed:45:c3:fb:85:c5:c1:2a:e5:
8e:ba:e3:7d:00:fd:86:64:7b:cc:6a:68:80:6d:ed:
db:39:1e:9f:3d:38:ea:2c:ae:51:4f:e5:8d:c8:11:
44:d8:f2:55:cb:55:90:f4:34:20:09:3f:20:17:aa:
a2:d4:e3:d5:b5:97:96:31:2e:8a:d6:4f:12:eb:39:
7a:a5:7f:b5:66:88:e2:6b:c0:5e:ba:3a:01:09:8e:
56:43:b8:3f:23:ff:c4:77:c4:38:73:00:bb:46:d3:
bb:b0:bc:20:d9:b9:77:5b:a5:ed:a6:b7:f5:20:60:
02:52:a6:5d:95:11:69:44:f4:bf:c4:3a:5b:17:12:
47:34:81:ed:a1:a9:13:aa:86:94:77:a9:c8:89:ac:
fb:f9:a0:b6:6a:dc:38:bb:ed:9b:ca:d9:5e:0e:69:
cf:51:1d:4f:18:1a:55:c3:f6:35:cc:76:ce:da:a0:
2b:6e:7f:9f:60:80:a5:01:ee:a4:f9:f0:fb:19:aa:
a9:3b:e0:d9:c8:e8:c0:65:a8:b7:41:b4:32:d8:9c:
35:de:06:9b:5e:00:10:3c:61:d2:c2:cb:91:df:15:
b5:29:e0:1f:d8:4f:8b:84:72:54:e6:ee:23:3b:e5:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:9D:39:FE:73:3E:80:70:BD:9B:CE:D3:BD:45:62:43:37:43:95
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:82:21:c5:26:52:79:12:6a:9e:0f:71:a2:fd:43:93:a2:
25:58:aa:4f:a0:b1:7c:7c:fd:76:22:a6:7c:39:26:78:e0:fc:
fb:8d:86:2e:22:4a:c5:97:83:8c:a2:66:11:65:32:e1:71:95:
74:1b:70:06:8d:cb:f1:d8:b9:c0:c5:1f:1c:4b:0b:a4:e5:b0:
e4:33:d6:c8:7b:4c:da:fb:2a:c0:94:2d:0d:7e:bc:1f:57:fa:
07:40:c2:5d:21:8d:c9:c8:4b:9e:cd:b6:d6:3a:fc:0a:83:12:
77:53:9c:a8:49:25:31:a1:19:74:d6:fd:01:43:cb:26:27:8e:
f1:b6:d6:0e:cd:70:6d:bb:b2:93:6e:4a:49:af:c9:a5:d3:ad:
75:5a:2b:9e:19:3a:ef:62:29:00:a0:9c:2b:ea:b8:af:13:b9:
28:2c:eb:0a:6a:d9:80:5a:de:ef:23:e5:60:e2:fb:a7:42:f3:
87:af:06:16:c5:60:d2:b8:ca:d3:6a:c6:d1:9b:2d:4f:d0:5e:
77:fa:0e:0d:a0:11:2c:46:d6:83:04:b4:92:53:22:59:be:df:
39:7a:15:f6:75:f7:c3:31:c7:b6:7b:c3:47:e4:02:17:16:44:
4a:f2:79:1b:c4:54:7c:94:93:a2:80:04:71:8f:73:6a:11:cd:
f0:f5:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:11 2026 by rpki-client