Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
File: jQD6bCqG93lmcv_pyE8i2c_KVNo.mft (raw, json)
Hash identifier: CF1fMFfOnSX0+JN/YOPYEtyPc3ZrW3AlYA+6i0hrkKc=
Subject key identifier: 1E:E0:5D:FC:D6:22:F6:7D:5F:89:F3:C4:AA:C4:EE:A6:C3:96:25:F1
Authority key identifier: 8D:00:FA:6C:2A:86:F7:79:66:72:FF:E9:C8:4F:22:D9:CF:CA:54:DA
Certificate issuer: /CN=8d00fa6c2a86f7796672ffe9c84f22d9cfca54da
Certificate serial: 019D333EBF418A4020C2E4390CC6E09EDFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
Manifest number: 30
Signing time: Sat 28 Mar 2026 07:00:43 +0000
Manifest this update: Sat 28 Mar 2026 07:00:43 +0000
Manifest next update: Sun 29 Mar 2026 07:00:43 +0000
Files and hashes: 1: jQD6bCqG93lmcv_pyE8i2c_KVNo.crl (hash: zxfIIlQs5nvCvBvhtJlo1O/pRMvSeAF7hCzcwmavF6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:bf:41:8a:40:20:c2:e4:39:0c:c6:e0:9e:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d00fa6c2a86f7796672ffe9c84f22d9cfca54da
Validity
Not Before: Mar 28 07:00:43 2026 GMT
Not After : Mar 29 07:00:43 2026 GMT
Subject: CN=1ee05dfcd622f67d5f89f3c4aac4eea6c39625f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:6d:d2:ea:07:ee:e5:9b:d2:4b:c3:16:5c:
ae:0a:f7:19:42:44:03:23:e6:93:2a:a4:89:22:8e:
7d:1c:8f:ea:ee:df:0e:b2:8c:70:af:ca:bf:43:51:
04:eb:cc:03:06:a4:04:9c:8f:06:01:ba:32:d5:e6:
2d:ac:52:c5:a8:1b:7b:41:c3:5c:84:ca:a7:df:81:
2c:f6:63:f4:99:bb:e0:84:15:d3:27:ad:e5:16:e8:
bb:09:86:ba:1b:57:8a:5e:2c:05:73:8f:66:d9:9e:
55:d2:07:90:03:93:7f:60:e9:1f:9a:d1:a8:65:9b:
64:36:29:8e:a3:e6:0c:5f:53:9c:70:17:66:8c:e4:
64:d2:93:6f:4e:56:57:93:2b:7e:0c:cf:28:80:66:
21:bb:59:23:75:c7:6b:3a:65:a0:bb:f8:ba:ce:7a:
6a:c3:11:5c:3b:09:4c:35:ae:bb:20:14:da:13:bf:
5f:7d:f4:62:7a:44:97:3d:ea:b2:20:76:20:f3:6b:
2c:27:77:27:67:b7:76:bb:22:31:d1:53:76:40:0d:
55:45:d1:97:4b:e9:60:6f:52:25:66:47:fb:0a:a4:
0d:76:f5:2e:ed:39:09:62:1b:28:b2:bb:da:14:31:
04:59:26:9b:54:15:66:a6:cf:3b:c9:be:51:33:e7:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:5D:FC:D6:22:F6:7D:5F:89:F3:C4:AA:C4:EE:A6:C3:96:25:F1
X509v3 Authority Key Identifier:
keyid:8D:00:FA:6C:2A:86:F7:79:66:72:FF:E9:C8:4F:22:D9:CF:CA:54:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQD6bCqG93lmcv_pyE8i2c_KVNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3ed1d0-1c0c-449b-95ce-da9020bd7c75/1/jQD6bCqG93lmcv_pyE8i2c_KVNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7d:7b:df:04:8c:bf:a1:56:8b:18:61:9f:33:e8:29:8e:80:
1d:2a:b0:63:fa:ae:bc:fb:bd:76:3f:19:a1:25:0b:71:46:c2:
3a:4c:c3:53:04:4f:41:ca:1e:39:e1:a1:be:bd:79:42:08:3d:
29:f6:db:23:6c:2f:6b:73:1d:f4:8e:72:39:d6:5e:45:fe:3c:
66:7f:b3:23:fd:2f:24:07:9c:15:6c:24:6c:88:da:41:93:a7:
a4:91:85:2b:4c:75:9f:b7:de:9f:af:4e:6a:89:b2:8a:a7:b0:
55:31:24:a7:6e:eb:74:59:66:3c:36:26:fd:2e:0c:a2:44:a3:
86:9c:67:9f:7f:7c:20:23:1b:ef:1e:23:65:83:ce:18:76:56:
d3:d3:69:df:74:52:ef:a1:35:01:a8:1b:52:5d:71:be:a2:77:
95:20:38:b6:f6:2b:07:6e:30:3d:73:3e:03:5c:c8:2f:47:16:
91:5c:d0:23:86:b3:9d:40:a6:1e:42:ab:d6:fc:08:29:0d:39:
6b:53:21:0e:26:76:07:78:22:99:fe:50:6b:e5:4b:4b:90:bf:
fd:20:08:a7:74:58:63:e1:75:86:e3:79:e4:cf:b1:9f:2d:69:
5e:fd:37:7c:be:7a:7c:6c:33:da:58:d5:a8:5e:91:cf:7c:a1:
f5:33:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:51:56 2026 by rpki-client