Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: /Qdyx3r4BGI4QZc9KvyRBElvKLl+WVLVX6Iy0ivV/rQ=
Subject key identifier: 7E:29:55:87:7A:B8:D2:F0:F6:C7:15:75:7A:72:BF:D8:56:48:28:CD
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 019D25BA9291514878496A12434F1E2497FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 10D8
Signing time: Wed 25 Mar 2026 16:01:17 +0000
Manifest this update: Wed 25 Mar 2026 16:01:17 +0000
Manifest next update: Thu 26 Mar 2026 16:01:17 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: qsOQ7Q6/jJWbfQqwhPltPYZ9P3oNhRkNbwOTg2h+eRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:92:91:51:48:78:49:6a:12:43:4f:1e:24:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Mar 25 16:01:17 2026 GMT
Not After : Mar 26 16:01:17 2026 GMT
Subject: CN=7e2955877ab8d2f0f6c715757a72bfd8564828cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:93:34:c5:1b:0e:7c:7f:89:5c:4c:17:ca:12:
33:a0:d3:2c:df:df:b8:0a:37:cc:3b:ea:15:f6:ef:
32:0a:de:ef:26:a6:af:79:9c:2c:33:af:82:22:b9:
98:e5:cb:56:a5:86:62:5a:e0:f2:88:f9:a8:c5:b5:
80:28:e7:5d:31:39:34:41:45:9f:42:a5:07:8b:71:
bf:0a:77:94:d2:11:67:0c:aa:5b:0e:d6:5c:64:f0:
6b:68:88:fe:d3:ce:d3:cc:c9:17:7f:e5:09:11:64:
18:e6:98:08:f2:d7:91:87:1d:bd:3a:6f:3f:d6:1c:
cb:0c:7e:41:56:49:c8:22:62:f0:56:a6:ca:59:50:
bc:5c:a9:74:a8:b7:c2:aa:18:42:e7:3e:44:95:7a:
2e:b5:12:e6:dc:87:9a:84:22:08:c4:b2:61:4b:59:
67:69:a8:a7:43:2c:6a:84:0a:7c:66:fb:e4:ef:58:
28:3a:01:0d:58:0f:53:21:ae:05:31:11:c0:e2:fd:
0a:a2:16:9e:b8:71:0a:11:eb:4b:e2:ab:76:fb:14:
17:62:3d:b3:80:d7:5d:e1:aa:9b:0d:4a:1e:58:a1:
a3:f7:19:6b:63:ea:9e:af:0c:38:73:44:5b:8d:85:
7a:04:d6:9e:d4:a2:ee:02:ec:5b:56:8b:bb:90:73:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:55:87:7A:B8:D2:F0:F6:C7:15:75:7A:72:BF:D8:56:48:28:CD
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:56:1a:39:71:2e:11:0c:43:33:f7:5d:26:dd:0c:80:13:3e:
29:95:46:24:91:cb:28:cb:2d:91:f3:d0:b9:15:83:31:c1:b0:
21:80:cd:89:c1:2d:0d:89:6a:f0:4a:de:49:73:36:4d:6c:fc:
1b:57:bf:7d:5c:93:df:e2:3c:30:5b:97:c0:58:8f:6b:a2:8d:
ac:f0:40:17:e4:e5:ef:e1:89:0f:80:55:0d:34:b7:4f:b6:ab:
1a:f8:ba:a0:9d:e5:fe:5f:69:7e:92:d9:ae:f9:d3:f6:bc:45:
c6:1d:06:93:b1:55:ee:4e:33:df:ae:79:9f:38:79:6d:7e:9f:
34:3e:69:51:a1:1d:f1:a6:11:37:f6:0b:7c:46:af:75:c8:d4:
6f:b5:9f:f6:e0:59:47:10:8c:a2:e8:22:6a:06:c9:13:54:3f:
34:57:4e:83:06:a0:d8:c9:5c:f6:bb:c6:c3:7a:0a:1f:cc:05:
c9:f7:f1:84:8a:0a:4a:3e:2b:5d:15:af:18:4c:9b:d7:e8:d4:
3f:14:26:f0:7f:b2:1e:2d:db:16:81:fb:75:b7:88:8f:e2:1a:
0f:74:54:13:d7:13:37:8f:5c:30:59:59:8e:c3:2b:7a:6d:8c:
40:d7:8d:b6:d1:0c:29:0a:ea:fa:13:24:7d:b6:97:6a:01:d8:
0e:22:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:07 2026 by rpki-client