Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
File: j31CCyNDzZHsI_UImoNC6J1tkWU.mft (raw, json)
Hash identifier: GWHL+EkTe/TdXko06cd+NePPUZiVOyPdpuzedgeAdTI=
Subject key identifier: DE:12:F1:24:FB:76:21:DF:7C:E4:D6:8F:1E:89:FA:82:9C:2D:D1:6B
Authority key identifier: 8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
Certificate issuer: /CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Certificate serial: 019D2703FD518B359A21CFA15A14D338FCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
Manifest number: 11EC
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: j31CCyNDzZHsI_UImoNC6J1tkWU.crl (hash: Aa23T9/noZoWdWAwTesQs5GdkV/VsWvtJI30svP3R1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fd:51:8b:35:9a:21:cf:a1:5a:14:d3:38:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d420b2343cd91ec23f5089a8342e89d6d9165
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=de12f124fb7621df7ce4d68f1e89fa829c2dd16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:de:6b:3e:f9:4d:f9:c6:cb:84:0b:ea:7f:
3e:94:67:81:09:13:c9:7d:e4:33:53:1d:3c:f1:09:
dc:ac:f5:39:12:22:b6:8f:e8:89:25:3f:62:8f:c2:
bf:be:18:b7:10:9f:4f:09:fe:e5:f6:8f:a5:ac:c7:
30:fc:bb:d6:a5:d8:e1:85:47:0b:10:37:4b:22:0c:
cf:4f:85:3d:3a:e0:43:fb:34:5f:52:a0:ba:96:6f:
2b:18:32:de:c7:7b:40:95:2a:e6:12:17:8e:58:ed:
cc:17:35:8b:6b:10:f6:9d:a4:30:b6:5e:d9:b3:c7:
4d:5a:82:fb:bc:44:a0:4c:79:00:d4:39:70:e7:ca:
d8:2e:01:2c:22:22:95:e3:e8:74:aa:ec:8c:51:f4:
94:2f:bf:0a:2e:cd:97:be:cf:05:12:8e:ba:11:29:
0b:2c:98:fc:69:99:c9:83:78:5c:f4:ba:ad:28:c5:
2b:4e:31:e5:23:71:99:15:dd:61:67:7b:a7:7b:e9:
90:01:a5:38:18:91:9f:a4:31:d3:94:c9:ca:54:57:
50:59:73:c3:07:5d:f0:b7:fc:38:52:a3:93:8f:06:
fd:80:6c:72:51:85:9a:df:30:25:70:45:9c:bb:dd:
93:a6:d8:f2:93:6c:13:10:c5:13:7a:51:b5:06:6c:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:F1:24:FB:76:21:DF:7C:E4:D6:8F:1E:89:FA:82:9C:2D:D1:6B
X509v3 Authority Key Identifier:
keyid:8F:7D:42:0B:23:43:CD:91:EC:23:F5:08:9A:83:42:E8:9D:6D:91:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j31CCyNDzZHsI_UImoNC6J1tkWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d17665-68b4-496b-9d9a-c5e1722a0c68/1/j31CCyNDzZHsI_UImoNC6J1tkWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9c:21:9a:e5:d7:e4:35:2c:ad:a2:7b:2b:3b:d0:1d:89:9a:
51:6b:3e:42:45:63:4c:9f:22:83:6b:86:c0:4d:b9:28:d1:cf:
8f:7a:be:33:37:92:54:2d:1d:92:98:a8:21:43:7f:f6:dd:94:
cc:6a:6c:8f:20:2d:23:18:27:1b:cf:ca:01:23:c3:30:25:97:
37:10:68:a8:05:cc:9d:fa:18:07:3b:cd:ab:a1:5b:76:b0:77:
e0:f9:8b:ed:68:dd:1f:4a:39:3e:ec:ff:a1:4a:0e:fd:71:0f:
e3:72:8d:35:5f:80:3c:56:61:56:b7:94:03:a3:33:82:95:e2:
93:8d:49:7f:d8:8f:1a:7a:c8:6a:e8:fc:87:54:41:88:8d:50:
5d:4e:ac:d5:ba:90:f4:81:79:8a:0f:95:e0:22:c0:38:44:5d:
fb:93:1c:02:79:38:b6:79:20:e9:48:8f:eb:4f:b5:5f:4a:8c:
1c:4a:fd:75:4d:13:3b:83:22:15:73:b4:6e:92:ee:be:b0:63:
38:1d:a8:e9:7f:e7:37:0f:d6:85:9f:06:5b:da:bd:45:7c:2c:
63:e7:42:26:22:9f:5b:ea:86:34:a3:d1:86:08:25:3f:2c:bc:
56:0c:60:e8:63:fe:d1:af:69:c9:4d:b8:7b:c4:ea:36:e7:73:
92:87:29:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:04 2026 by rpki-client