Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: c5w+3lBwaOZCFsQI8Ijlz70ymoxk2LH0a1Hs4Y9I/OA=
Subject key identifier: 00:F4:7C:E3:2F:F2:13:74:0A:9D:77:86:62:99:DC:08:C2:79:AD:58
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 019D34891E9A79285739B648345FC6A08EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 0A23
Signing time: Sat 28 Mar 2026 13:01:34 +0000
Manifest this update: Sat 28 Mar 2026 13:01:34 +0000
Manifest next update: Sun 29 Mar 2026 13:01:34 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: Wf5JysCYs/s+OduymiA8ICXFrgqK4Gf4IQFY5EmA1bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:1e:9a:79:28:57:39:b6:48:34:5f:c6:a0:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Mar 28 13:01:34 2026 GMT
Not After : Mar 29 13:01:34 2026 GMT
Subject: CN=00f47ce32ff213740a9d77866299dc08c279ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:3c:06:a6:d7:f3:12:42:f6:bc:32:a7:0a:
2a:67:4f:ec:16:66:e3:17:78:ee:0f:43:5d:82:6d:
ba:6b:28:36:2a:f4:05:1a:61:3d:fe:a8:a0:6a:84:
c7:4b:bf:40:6d:7b:1e:ec:3f:a7:38:d6:66:3b:47:
15:3d:92:38:10:c7:a1:0a:16:ed:ee:58:c5:43:cc:
c0:84:0a:18:ae:81:c3:ab:e9:d5:02:8b:a1:37:66:
b4:e4:1f:19:d8:88:8b:0a:ea:40:3d:4f:59:1c:31:
73:77:b8:f6:ff:e5:35:d7:9f:71:48:ba:5a:d7:ff:
60:02:52:d8:5a:49:5f:32:63:69:fb:19:06:8f:bb:
72:90:a6:a8:3f:3b:9a:16:b5:64:85:88:8a:5c:ec:
c5:c8:ee:bd:e1:0c:81:f5:26:03:de:9e:f8:09:ae:
b1:24:66:32:d5:da:d7:f9:0e:73:1f:f7:e4:96:b2:
de:f2:40:57:43:27:04:4c:3e:88:dc:08:d2:d2:c7:
c0:aa:e4:a8:6c:01:eb:eb:89:f4:5c:9f:2f:52:ee:
bc:8c:37:b3:9d:e8:fe:84:34:d0:82:5a:c8:3f:4e:
84:8b:ca:89:44:6e:6c:ca:9f:0c:77:fe:02:79:df:
dd:4e:ec:54:a0:8d:c8:60:2e:85:53:f4:13:2e:82:
e2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:7C:E3:2F:F2:13:74:0A:9D:77:86:62:99:DC:08:C2:79:AD:58
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:05:0b:0d:6e:f4:ce:56:d0:c9:d9:3c:0c:b1:41:68:33:38:
54:19:6d:c7:1d:49:73:da:72:c5:71:14:84:b6:f1:7b:d0:42:
fb:86:ec:28:f7:6d:2e:92:71:16:aa:14:2c:f1:d8:e6:cf:0b:
4d:cb:ec:fa:c3:e7:61:a7:f2:74:22:98:49:fc:40:2a:2c:10:
f0:b0:66:bc:3e:82:f2:a8:5b:6d:53:fb:99:9c:12:e1:93:dc:
53:fa:93:5e:f2:e0:72:62:8d:70:49:62:5f:1a:85:13:a7:2c:
bc:4f:64:26:51:7f:3d:f4:54:89:2a:b5:ac:69:9a:8e:df:85:
d1:1f:7a:4f:3c:32:bf:46:8f:b9:95:0b:9b:a3:93:30:87:45:
c8:6d:de:e0:d8:21:ab:a8:bc:2a:0f:0d:a4:2b:6c:2b:dc:8f:
38:98:80:74:b6:a8:f7:fb:ad:d7:84:b2:39:91:4b:a9:74:f1:
d0:d9:5e:fb:12:81:77:9b:ee:6d:f9:cb:ee:1e:59:e7:5e:0d:
82:9c:6f:cd:2f:22:2b:d4:26:f9:86:78:22:5c:c5:77:c1:55:
18:84:24:2e:ec:8e:36:07:f9:8d:97:54:f7:bc:3f:7b:7f:50:
c2:91:ae:ff:37:c4:a9:be:df:12:92:22:cd:72:c2:d8:d0:fb:
d4:39:ab:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:30 2026 by rpki-client