Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: aYNpqdH+p/sK0dg0/c5raxjr9fQsqnqQw4wayK0rNos=
Subject key identifier: 17:DE:5C:12:28:26:11:2A:5D:70:A0:08:D6:BB:03:A3:FA:48:A7:27
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 019D2A04A70B1AA2862E233A7EB0E2276B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 11B8
Signing time: Thu 26 Mar 2026 12:00:41 +0000
Manifest this update: Thu 26 Mar 2026 12:00:41 +0000
Manifest next update: Fri 27 Mar 2026 12:00:41 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: Cy09GeY2dhczTXCLLgQct8dExNOl3EffTWY3wY2x8nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:a7:0b:1a:a2:86:2e:23:3a:7e:b0:e2:27:6b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Mar 26 12:00:41 2026 GMT
Not After : Mar 27 12:00:41 2026 GMT
Subject: CN=17de5c122826112a5d70a008d6bb03a3fa48a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:4e:2f:e8:44:50:09:4c:fb:00:4e:cb:29:
ef:56:a4:30:fe:18:e9:bf:8e:01:28:a8:82:07:1e:
b9:2f:9c:76:79:d3:9e:c7:0a:88:d9:b5:d6:b3:df:
1b:fb:03:5a:02:82:34:ef:b5:fc:e2:a2:13:ec:0b:
37:87:0e:fa:d7:ff:39:30:35:cf:ec:2f:1c:21:d7:
5d:34:cc:c6:04:62:26:b0:7d:e6:eb:50:41:2c:f7:
49:28:f1:69:ad:64:94:9c:21:f4:22:35:6e:3c:2f:
8b:7c:6c:e6:0e:b7:b3:f1:b2:f8:cd:d3:91:fc:f1:
47:39:41:c6:b3:f8:e8:cd:68:17:bf:45:0a:b7:16:
bd:a7:2c:1f:be:23:d2:bd:41:af:0c:ab:07:89:e0:
6f:5a:99:ec:fb:59:f8:db:57:2a:29:8e:79:7d:10:
ae:0a:a7:a9:22:7a:47:01:ad:39:e1:47:6b:9b:8c:
9b:f8:cf:70:9d:2f:e3:89:ee:c9:c6:35:f3:3b:85:
35:ce:0a:5e:ba:27:36:4c:8c:d1:ff:fb:44:3b:a5:
e9:19:89:72:16:7a:6c:5f:07:c3:36:46:c1:9b:39:
46:34:1b:17:08:52:8f:7b:3a:56:be:ce:77:3c:c8:
a5:16:9a:0c:c0:db:68:97:f9:82:ac:e8:8d:f2:fd:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:5C:12:28:26:11:2A:5D:70:A0:08:D6:BB:03:A3:FA:48:A7:27
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8e:12:01:cf:fd:6e:d4:ee:a0:9e:c5:ed:9e:ca:56:05:44:
79:4e:00:04:36:27:2b:0d:85:13:df:9b:be:37:9d:24:ad:bb:
16:52:b5:56:74:6f:f4:4b:a0:ae:8d:7d:f0:54:00:60:0a:0e:
95:68:6b:2e:c9:2a:17:b2:b4:66:ab:26:58:5c:fd:63:d0:d8:
de:73:cb:e0:b4:fa:1d:16:ba:68:22:c2:91:3f:97:da:e5:4a:
59:a5:2a:a5:e5:6e:54:af:0d:aa:19:f1:eb:c0:67:c9:ba:58:
59:eb:e9:0c:dc:a8:8d:c3:51:b3:0b:cb:94:a8:3d:65:a7:8e:
ee:ff:9a:82:ee:52:fa:20:93:b6:12:68:a5:3a:0f:bb:f8:34:
f4:11:42:e5:f6:af:de:f2:d4:73:4d:0d:0e:4b:f5:76:c4:af:
81:eb:bc:0d:72:78:30:99:f8:95:82:14:ab:07:6f:e2:0c:70:
a1:5d:d7:ef:8f:63:23:be:c8:fc:b6:ae:57:31:38:5c:ce:22:
9c:11:7e:b3:30:85:00:56:56:12:0b:32:eb:00:54:f7:3f:68:
04:48:aa:38:d4:26:94:82:ab:e1:33:52:83:a6:be:69:e4:37:
95:0e:af:f0:b9:5f:7d:9a:3e:22:84:17:18:ac:91:1a:c2:4f:
1f:16:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:44 2026 by rpki-client