Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: Td0LWsrvKA4bf3OFDtmpnOaVY4qgwHLsp+0oiDhnCLE=
Subject key identifier: 84:BA:FE:81:2E:03:B3:C8:04:9F:3C:70:A5:0F:E6:84:75:B6:D7:26
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 019D2772E4829E2ABCF858A2EBD685256F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 1031
Signing time: Thu 26 Mar 2026 00:02:14 +0000
Manifest this update: Thu 26 Mar 2026 00:02:14 +0000
Manifest next update: Fri 27 Mar 2026 00:02:14 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: kP7lQQ4Y1Bfo/6QtM6GIi74yURapgTTTy0tnvrVt7f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e4:82:9e:2a:bc:f8:58:a2:eb:d6:85:25:6f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Mar 26 00:02:14 2026 GMT
Not After : Mar 27 00:02:14 2026 GMT
Subject: CN=84bafe812e03b3c8049f3c70a50fe68475b6d726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:71:d3:ce:bb:15:ae:67:d8:11:ff:7f:b2:3e:
23:45:05:13:d1:84:b3:6a:db:07:ec:81:9a:67:a1:
a1:10:68:c9:b3:63:4c:b8:89:05:b8:2d:38:b3:ae:
ed:b5:4e:11:ee:2c:6d:5d:3d:8a:34:6f:09:41:17:
58:c7:c0:ff:05:b5:c7:55:71:32:bb:68:6e:48:de:
d9:01:5d:d2:01:2d:f8:8c:42:fa:0f:b8:e0:77:4c:
d4:fd:86:b1:7e:8c:61:97:4c:c7:0a:d9:d5:fd:fb:
56:a8:91:8b:09:7d:67:29:34:2d:a8:71:33:9f:e0:
5e:7a:3c:5d:07:54:73:0a:ae:3c:ff:9c:74:c8:4e:
7f:d2:26:de:fa:1b:17:e7:9f:ed:a2:f4:0e:61:94:
e5:d5:52:42:ca:6c:40:2d:18:32:7f:14:69:1e:f5:
ea:4e:ea:22:9b:a3:7e:12:05:00:39:08:65:c5:43:
cf:12:fe:16:6f:86:1d:42:b4:33:a1:ae:dd:ef:14:
01:bb:2c:75:8c:0b:f8:2b:66:2f:7e:e1:87:fa:ab:
2f:cf:dc:83:25:af:a6:d6:c5:36:fa:03:08:83:9d:
2c:8f:82:aa:b6:c1:0f:19:50:4e:13:8d:95:22:8e:
fc:cd:5f:04:13:1b:08:d9:fe:da:2f:32:76:60:fe:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:FE:81:2E:03:B3:C8:04:9F:3C:70:A5:0F:E6:84:75:B6:D7:26
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3c:46:68:97:2f:de:6f:38:fb:50:0d:21:b3:79:0e:67:80:
71:6e:9e:92:f3:4f:08:c6:48:40:a0:9b:f8:c3:46:a8:5f:3c:
1d:f3:11:6e:3e:1c:31:fd:a7:ff:62:80:53:74:62:a5:04:e1:
db:91:10:76:3b:6c:b3:17:98:1c:1c:d6:7b:72:12:a6:f9:8e:
74:54:a2:12:5d:7b:7b:12:e4:30:5e:00:ff:78:64:f3:94:c9:
1b:14:8c:92:44:b2:20:57:93:62:32:9f:fe:29:26:bd:60:58:
1a:4a:2d:0f:4f:0a:80:c1:a4:43:bf:37:0c:c9:3c:50:8d:cc:
a9:7a:1e:1c:0d:20:d4:39:ea:0d:fb:b2:de:63:19:01:7c:61:
57:a5:c3:a7:dc:46:91:86:9c:ab:37:a0:93:d0:6d:c3:3d:d0:
dc:51:6b:35:aa:74:31:ca:4b:31:11:0c:64:3a:4e:05:4b:a0:
73:29:5a:25:60:d8:d9:e5:6b:15:cc:ed:2a:53:6a:c8:3f:19:
e5:f5:67:90:56:79:d4:06:6e:bf:60:e6:a2:5b:3c:4e:97:67:
5d:e5:6b:38:03:a6:af:bf:89:a9:32:45:e2:b5:56:fc:a3:a9:
fe:e5:b2:ad:f6:dd:ef:cb:a9:ed:1e:ef:95:35:e4:ac:04:74:
e9:05:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:36 2026 by rpki-client