Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File: Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier: j/LcnD0MBlvhPtTlL/YVc24PAmLpLFHt6gMWziWEzdE=
Subject key identifier: CE:E4:6A:AC:1B:B8:A2:41:9B:E3:CC:A7:E8:CF:BC:89:34:1A:3A:C7
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer: /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial: 019D322C1E840D14A86722D0129D02CE3975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 02:00:45 +0000
Manifest this update: Sat 28 Mar 2026 02:00:45 +0000
Manifest next update: Sun 29 Mar 2026 02:00:45 +0000
Files and hashes: 1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: 044JToLjky1L/Uh4QOWInfpHXeblOAwPXbi9NHL7sog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:1e:84:0d:14:a8:67:22:d0:12:9d:02:ce:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Validity
Not Before: Mar 28 02:00:45 2026 GMT
Not After : Mar 29 02:00:45 2026 GMT
Subject: CN=cee46aac1bb8a2419be3cca7e8cfbc89341a3ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:1a:df:10:d2:87:67:6a:eb:48:8a:d6:5c:
b1:e7:5b:65:08:c8:9a:38:01:c0:77:3d:38:f2:64:
24:ff:e6:55:41:31:7e:ca:81:51:07:d4:8d:eb:b0:
15:e4:0f:43:03:c7:da:1d:2e:d7:6f:60:4d:a9:cd:
f0:6c:02:ca:49:11:cd:1d:e5:87:b7:3b:f9:10:b8:
11:78:06:72:89:af:cb:b2:54:98:79:3e:ee:d3:fa:
be:2c:32:93:4f:a2:92:1c:57:54:c1:de:ea:d3:5b:
2f:71:3a:fc:cd:e2:61:ec:21:84:c5:8a:74:a3:74:
14:3c:59:fd:e5:f0:6b:d3:97:d7:78:41:05:e8:71:
e6:04:2e:84:5b:c7:34:ab:82:3c:8d:23:af:d9:a5:
58:43:c3:a6:6c:c7:ff:a7:f9:04:99:ed:14:1f:5f:
a8:18:51:ca:fb:34:b1:c5:ad:90:a1:25:35:06:1c:
d3:69:ae:e5:69:62:54:39:d2:c6:d1:fe:11:12:fa:
83:d2:1f:8d:43:1c:9e:46:82:cf:50:d1:c7:5f:a1:
03:4c:7e:28:11:d1:8f:8c:40:07:c1:15:86:e2:12:
9f:fe:dd:85:a0:c3:e3:5a:eb:3b:07:86:1c:b0:a8:
92:45:8a:07:c5:e0:df:fd:b2:19:cd:86:7b:fc:07:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:6A:AC:1B:B8:A2:41:9B:E3:CC:A7:E8:CF:BC:89:34:1A:3A:C7
X509v3 Authority Key Identifier:
keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:34:31:05:1a:14:57:9b:ec:ce:25:54:0b:dd:7d:7b:11:bd:
9e:94:ab:39:27:e0:d8:13:da:41:97:29:38:02:16:76:fe:33:
2b:0d:24:29:01:9d:65:0d:88:20:52:ad:c6:54:5e:2f:49:9a:
c4:a5:e8:6b:87:d4:4a:3f:29:c8:9e:a9:e3:7e:75:f7:50:74:
4d:b3:97:26:39:7e:e0:46:07:85:2b:44:59:5c:8e:81:59:08:
c7:bb:6e:b1:16:ad:b8:b3:0e:fa:4d:54:bc:1e:b7:70:c0:c4:
18:a1:42:78:d4:1f:38:81:ba:1f:ab:de:fa:80:fe:6c:05:00:
24:e4:8a:21:bf:62:dd:d0:32:fa:c4:52:74:37:40:d8:d1:a9:
b7:c6:3c:c9:34:59:cd:2d:9b:eb:8b:a5:77:6d:a6:cf:a0:a7:
8f:00:08:0c:86:1e:03:ea:38:63:67:03:9b:16:f0:22:8a:ff:
18:42:fb:4a:45:f8:a9:37:bd:e1:f0:47:ad:56:ed:50:d9:4b:
d9:0e:8b:a2:73:9a:ff:61:e5:c3:0e:32:6c:c1:45:34:5b:a6:
7b:49:56:38:10:02:29:41:a1:f0:ab:77:54:d9:7a:2b:7d:78:
4c:28:18:7a:96:44:07:2d:9c:55:de:60:fc:c1:b3:e2:06:0d:
4a:5a:4c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yLB6EDRSoZyLQEp0Czjl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2NmMWYzNGUyZjAxMGI5MDJkYzE0MjQ1NWI2YmI3MzI2
Y2YwOGQwHhcNMjYwMzI4MDIwMDQ1WhcNMjYwMzI5MDIwMDQ1WjAzMTEwLwYDVQQD
EyhjZWU0NmFhYzFiYjhhMjQxOWJlM2NjYTdlOGNmYmM4OTM0MWEzYWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPka3xDSh2dq60iK1lyx51tlCMia
OAHAdz048mQk/+ZVQTF+yoFRB9SN67AV5A9DA8faHS7Xb2BNqc3wbALKSRHNHeWH
tzv5ELgReAZyia/LslSYeT7u0/q+LDKTT6KSHFdUwd7q01svcTr8zeJh7CGExYp0
o3QUPFn95fBr05fXeEEF6HHmBC6EW8c0q4I8jSOv2aVYQ8OmbMf/p/kEme0UH1+o
GFHK+zSxxa2QoSU1BhzTaa7laWJUOdLG0f4REvqD0h+NQxyeRoLPUNHHX6EDTH4o
EdGPjEAHwRWG4hKf/t2FoMPjWus7B4YcsKiSRYoHxeDf/bIZzYZ7/Af9UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7kaqwbuKJBm+PMp+jPvIk0GjrHMB8GA1UdIwQY
MBaAFCZ88fNOLwELkC3BQkVba7cybPCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85MWJjZDgtYTFmNy00ZmIxLWIyODgt
MDExYjQ1MWI0NWI0LzEvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85MWJjZDgtYTFmNy00ZmIxLWIyODgtMDExYjQ1MWI0NWI0
LzEvSm56eDgwNHZBUXVRTGNGQ1JWdHJ0ekpzOEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTQxBRoU
V5vsziVUC919exG9npSrOSfg2BPaQZcpOAIWdv4zKw0kKQGdZQ2IIFKtxlReL0ma
xKXoa4fUSj8pyJ6p435191B0TbOXJjl+4EYHhStEWVyOgVkIx7tusRatuLMO+k1U
vB63cMDEGKFCeNQfOIG6H6ve+oD+bAUAJOSKIb9i3dAy+sRSdDdA2NGpt8Y8yTRZ
zS2b64uld22mz6CnjwAIDIYeA+o4Y2cDmxbwIor/GEL7SkX4qTe94fBHrVbtUNlL
2Q6LonOa/2Hlww4ybMFFNFume0lWOBACKUGh8Kt3VNl6K314TCgYepZEBy2cVd5g
/MGz4gYNSlpMow==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:54 2026 by rpki-client