Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
File: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft (raw, json)
Hash identifier: eMboLI0IU3Z97A2KD5wihwKHIwmxl8854X7r05bnTvM=
Subject key identifier: D3:8C:4C:CB:4F:0F:C7:A9:13:6C:83:72:BC:A9:45:C4:55:BF:F4:79
Authority key identifier: 25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
Certificate issuer: /CN=25a290559f72a701231c028e70a250690355a639
Certificate serial: 019D348919D5122D4F041B4AEE75D4B71092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
Manifest number: 15CC
Signing time: Sat 28 Mar 2026 13:01:33 +0000
Manifest this update: Sat 28 Mar 2026 13:01:33 +0000
Manifest next update: Sun 29 Mar 2026 13:01:33 +0000
Files and hashes: 1: JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl (hash: JRH/1a14ZcKFRF09z6XrxG9NtieBMVk5wxa7Sf8DyyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:19:d5:12:2d:4f:04:1b:4a:ee:75:d4:b7:10:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a290559f72a701231c028e70a250690355a639
Validity
Not Before: Mar 28 13:01:33 2026 GMT
Not After : Mar 29 13:01:33 2026 GMT
Subject: CN=d38c4ccb4f0fc7a9136c8372bca945c455bff479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:9e:f2:97:c9:01:26:ce:bd:27:72:09:9b:
72:f1:19:ef:a1:3a:1c:65:38:77:b9:0a:0a:66:70:
46:f9:cf:32:d3:49:a6:d4:65:5a:8d:e2:d4:22:79:
be:b3:70:26:81:8d:fd:15:0e:77:4d:9f:b7:d1:c9:
14:ab:48:7a:54:69:78:3c:51:ae:f3:a0:88:f7:6c:
e2:e3:d2:01:db:79:3c:8d:bb:1f:37:b5:4c:48:f1:
41:90:9d:77:10:65:93:43:7b:58:f9:04:7a:02:6c:
7c:6b:80:77:6f:a3:fd:0d:f9:54:e0:13:df:e9:7f:
42:ee:2c:d4:f5:1c:02:d5:35:76:79:44:d1:0f:4a:
1d:1f:93:de:f3:25:3a:ce:38:e1:d4:dd:9c:a6:b1:
06:bc:2e:80:2d:d2:1c:8a:5a:57:e7:f4:f2:3a:1d:
84:f6:6e:4a:42:de:93:27:a1:3b:3e:18:3c:ce:c4:
1e:b7:1c:34:02:a8:0d:fe:19:ce:c9:71:a5:a9:7f:
47:54:ba:75:a6:ff:d2:d4:b3:94:2f:3e:41:ae:8f:
d1:12:af:a2:d0:90:5f:9e:0b:fc:5d:0e:e2:40:1e:
eb:ba:65:b9:7d:eb:7f:36:54:d4:28:59:5c:fa:e6:
19:f2:0d:98:29:3d:c1:a2:b0:47:ac:9a:a4:6a:f8:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8C:4C:CB:4F:0F:C7:A9:13:6C:83:72:BC:A9:45:C4:55:BF:F4:79
X509v3 Authority Key Identifier:
keyid:25:A2:90:55:9F:72:A7:01:23:1C:02:8E:70:A2:50:69:03:55:A6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7fe06-4d44-430f-9ecb-295fcf87ea27/1/JaKQVZ9ypwEjHAKOcKJQaQNVpjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a6:d9:2c:a6:48:0a:d2:bd:c3:ac:35:cd:5c:9b:1f:02:53:
ad:41:80:c3:20:af:aa:13:a6:95:bd:c4:4b:96:67:3f:cc:84:
69:4b:49:70:eb:5a:f8:13:ce:14:e5:f8:3e:17:00:b4:d6:f4:
9b:c8:88:e4:07:74:16:3e:35:bb:42:e0:55:5f:44:76:01:71:
b6:7e:2e:d3:48:58:d8:e4:03:f9:60:9d:e2:6a:a8:a0:fa:e0:
ad:d3:ae:41:0e:fc:e0:c2:bb:c4:4b:9e:e4:34:04:0d:21:f0:
20:b4:f9:a6:15:3d:37:4c:b2:6d:42:54:20:9f:dc:e8:4d:3f:
a4:eb:58:73:0f:9d:53:4f:a2:d2:78:63:38:5c:0e:2c:6c:31:
7c:d2:94:f2:34:5c:8c:d6:b6:ba:a2:b5:8f:69:73:9e:76:c2:
e2:e6:91:2d:90:65:34:08:9c:1a:42:38:7a:ec:eb:56:a9:db:
0f:39:4c:65:62:67:c1:4e:90:6f:f7:90:7d:2f:30:b3:74:30:
95:ee:e1:ca:47:d8:11:e6:7a:9f:65:5a:69:07:ac:ae:52:85:
b6:ce:c7:e4:a7:3c:6d:b7:df:cf:96:ad:57:f5:d3:33:e3:1d:
de:43:a5:d0:0c:c9:48:80:c8:cd:6e:b6:4e:9b:2f:c5:b0:6d:
ef:3c:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:30 2026 by rpki-client