Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: eGmNEj/3fJ6qBvRQfOfmoBXgJSanLQeJ7dHk7V3UBLE=
Subject key identifier: 17:2C:4A:C9:5E:BE:BD:FB:A6:18:97:9E:BF:BE:6E:21:8C:61:0F:BD
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 019D28BBAA32451FE782183B289A1C11B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 1213
Signing time: Thu 26 Mar 2026 06:01:20 +0000
Manifest this update: Thu 26 Mar 2026 06:01:20 +0000
Manifest next update: Fri 27 Mar 2026 06:01:20 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: O/CIMO1dXEMYPtxJnRdJRkXUgofg/tWS4ehI6SWDGdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:aa:32:45:1f:e7:82:18:3b:28:9a:1c:11:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Mar 26 06:01:20 2026 GMT
Not After : Mar 27 06:01:20 2026 GMT
Subject: CN=172c4ac95ebebdfba618979ebfbe6e218c610fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:2d:89:67:ca:29:3f:bb:3b:20:42:18:d0:
54:14:20:43:e9:4e:e5:a9:7d:98:12:e2:83:a1:15:
d5:31:ef:67:19:00:c8:9d:df:cd:7d:cc:51:f4:4e:
86:4e:ab:58:7f:df:b8:94:04:74:7b:df:09:84:2b:
1a:d2:c6:dd:d9:3a:3b:99:4d:7f:41:18:f7:20:fd:
7e:7d:18:a3:fe:91:6d:ff:13:0a:0c:03:05:80:93:
16:bd:d7:19:66:01:99:63:30:20:8b:1c:60:c0:be:
ea:79:8b:12:2f:f5:9d:31:5f:5c:7d:e6:3f:ed:44:
e1:5e:66:1c:15:7f:5b:46:4a:a8:04:7e:db:3b:05:
5d:ba:0a:49:78:2e:ca:19:2d:64:4a:f7:13:f1:19:
f8:d6:d2:cb:a4:8c:63:34:5c:28:05:3b:a0:77:02:
86:0c:55:e1:03:10:11:64:0b:08:63:6d:d1:ea:b1:
39:65:c1:cf:9c:b2:af:70:db:4e:7f:78:5d:07:91:
2a:76:bf:88:e1:dd:da:49:c3:b6:6a:26:eb:a9:a9:
b4:a5:27:0c:76:1e:16:e8:3d:35:27:ad:88:85:d5:
b5:31:f6:e9:17:04:e6:ee:c2:4a:9e:f0:20:60:eb:
11:5c:56:3b:4f:24:3b:1e:a8:d5:0d:1e:12:b9:1a:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:4A:C9:5E:BE:BD:FB:A6:18:97:9E:BF:BE:6E:21:8C:61:0F:BD
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dc:43:07:78:b8:9f:36:fc:cf:53:01:03:b9:a8:f7:22:eb:
ed:02:ca:dd:72:ee:b9:99:ce:f9:9a:ca:69:72:26:19:b2:df:
bb:dd:17:9b:63:3a:4a:c9:00:10:af:0e:13:53:b4:25:85:00:
f8:26:08:68:e1:6e:7d:9e:94:db:7b:eb:1e:3c:13:3e:41:62:
78:fd:20:9f:29:db:93:cf:ce:d7:6d:c5:a3:af:cf:ea:82:57:
e7:a7:6b:5a:b7:e7:e5:69:54:2c:a1:30:72:17:e6:38:16:b5:
c7:cf:97:8a:27:43:ff:bb:4e:b9:a6:17:09:52:74:da:45:1c:
ca:51:8e:94:5a:0b:0f:c6:c4:27:5a:47:72:db:7c:53:cd:c7:
7e:bb:6b:55:86:b6:d2:9e:f0:12:9f:de:d0:eb:47:f5:16:17:
73:8b:17:9c:20:01:78:91:e5:f5:66:55:4f:9e:79:7a:22:d1:
8b:fe:e3:0f:d2:a2:6a:2b:d1:02:00:b6:d1:e9:4c:77:17:19:
0a:ba:26:c1:f6:fb:68:32:5b:ea:c4:de:86:39:de:16:bf:55:
b9:07:2e:6a:7d:54:f7:d3:85:84:a2:b4:fd:28:69:ab:42:29:
18:05:77:e9:59:e5:83:e4:d7:bc:51:e0:b0:13:30:79:92:00:
e1:af:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:23:59 2026 by rpki-client