Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
File: jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft (raw, json)
Hash identifier: 5nPF3gdEqXaCkcWj8NOIt+D33xPYv5nyUCwTE2/S2KU=
Subject key identifier: F9:10:DC:03:99:10:7B:B7:72:29:13:89:56:27:65:12:09:4D:37:49
Authority key identifier: 8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
Certificate issuer: /CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Certificate serial: 019D28F257EAD8A2FFC8E4E3E793464D992E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl (hash: JDnAibTe6bKXM7VQ7kyDTK61EU2F8a6MFS+5cuKYv6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:57:ea:d8:a2:ff:c8:e4:e3:e7:93:46:4d:99:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd99f3bfe992736a3885c796324db33977fa7e9
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=f910dc0399107bb77229138956276512094d3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:c8:af:e6:84:2c:de:d9:ae:73:59:fb:c1:
8b:64:87:ab:b5:59:2e:75:63:e8:b1:3c:df:d9:c8:
2c:64:8c:66:70:0f:23:82:b9:ea:7a:91:53:ec:2a:
47:19:eb:92:aa:5d:e5:7e:77:71:bf:ae:06:06:68:
9a:5b:a3:24:93:55:41:4a:75:23:24:fc:a3:02:ed:
5f:e3:e5:48:6b:20:81:3b:61:a8:2c:03:8a:fb:a0:
90:7d:34:8d:ed:59:00:68:21:31:b4:a0:bd:d8:f3:
c9:d5:d2:c1:8d:7a:66:1b:ad:0c:e1:c4:ef:63:b1:
13:5e:4d:f2:d6:6f:6d:5e:36:73:a8:a7:95:d6:df:
62:a4:e1:00:c0:55:38:1c:24:91:dd:37:23:5d:9c:
73:53:81:45:92:19:4f:ef:40:e8:c8:bb:41:d3:10:
4f:60:cb:5e:86:1d:d0:ba:c0:10:5e:57:48:6a:83:
b6:2c:54:84:a8:0b:12:9a:41:18:e0:ed:6e:41:3c:
c6:55:26:bf:bd:3a:1c:7e:f1:56:4d:2d:42:61:57:
7a:7c:74:19:b6:57:5e:97:c7:58:c7:57:15:b1:ec:
5c:3c:04:db:ea:5a:00:bb:ad:88:1e:72:c0:12:ba:
65:f6:d7:b3:5e:86:47:ec:1b:27:4b:d0:7b:ab:1c:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:10:DC:03:99:10:7B:B7:72:29:13:89:56:27:65:12:09:4D:37:49
X509v3 Authority Key Identifier:
keyid:8C:D9:9F:3B:FE:99:27:36:A3:88:5C:79:63:24:DB:33:97:7F:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNmfO_6ZJzajiFx5YyTbM5d_p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/194bad-de14-475f-a0fb-a60464409d32/1/jNmfO_6ZJzajiFx5YyTbM5d_p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:45:da:2d:4a:79:cf:09:1a:1e:cc:c8:5b:e9:a3:20:84:
ab:e5:25:a2:30:57:b1:f7:de:93:13:af:11:fa:5f:df:d8:6d:
10:29:48:cb:77:7a:30:48:4f:5a:16:af:86:be:d6:59:4d:90:
00:d7:b2:16:fc:9c:c3:3d:98:a8:3a:ce:71:c4:b8:4a:3a:0b:
1b:16:b4:07:c6:07:3f:ce:af:23:8f:e4:3e:94:59:fa:56:db:
04:2c:e5:b0:fd:f6:ad:80:f4:44:81:84:57:2f:65:e0:4c:e0:
42:f6:b4:42:66:ab:91:be:6d:7f:e3:7b:2b:3b:8e:36:de:9c:
d6:86:97:50:23:20:65:02:62:31:6a:1e:e2:ce:1b:c1:75:36:
2c:16:44:c3:d4:e2:df:0b:bd:c1:25:d9:12:74:1a:07:d7:d7:
15:db:3f:2a:94:41:60:89:3f:6b:64:90:26:57:08:0a:66:e2:
ca:74:c0:21:11:31:b3:e3:5b:44:5e:68:20:fa:46:3e:26:2e:
77:14:10:97:c2:1e:e5:dc:e9:b1:df:5e:61:94:ca:28:81:f9:
ff:bf:f6:da:aa:15:77:0a:e4:a8:07:df:92:b7:9f:ae:1e:91:
c1:00:68:38:95:ae:f9:1d:00:ff:13:c9:07:c7:a6:74:f2:6d:
ef:03:fb:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lfq2KL/yOTj55NGTZkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDk5ZjNiZmU5OTI3MzZhMzg4NWM3OTYzMjRkYjMzOTc3
ZmE3ZTkwHhcNMjYwMzI2MDcwMTAzWhcNMjYwMzI3MDcwMTAzWjAzMTEwLwYDVQQD
EyhmOTEwZGMwMzk5MTA3YmI3NzIyOTEzODk1NjI3NjUxMjA5NGQzNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjnIr+aELN7ZrnNZ+8GLZIertVku
dWPosTzf2cgsZIxmcA8jgrnqepFT7CpHGeuSql3lfndxv64GBmiaW6Mkk1VBSnUj
JPyjAu1f4+VIayCBO2GoLAOK+6CQfTSN7VkAaCExtKC92PPJ1dLBjXpmG60M4cTv
Y7ETXk3y1m9tXjZzqKeV1t9ipOEAwFU4HCSR3TcjXZxzU4FFkhlP70DoyLtB0xBP
YMtehh3QusAQXldIaoO2LFSEqAsSmkEY4O1uQTzGVSa/vTocfvFWTS1CYVd6fHQZ
tldel8dYx1cVsexcPATb6loAu62IHnLAErpl9tezXoZH7BsnS9B7qxy+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkQ3AOZEHu3cikTiVYnZRIJTTdJMB8GA1UdIwQY
MBaAFIzZnzv+mSc2o4hceWMk2zOXf6fpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmIt
YTYwNDY0NDA5ZDMyLzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xOTRiYWQtZGUxNC00NzVmLWEwZmItYTYwNDY0NDA5ZDMy
LzEvak5tZk9fNlpKemFqaUZ4NVl5VGJNNWRfcC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFpF2i1K
ec8JGh7MyFvpoyCEq+UlojBXsffekxOvEfpf39htEClIy3d6MEhPWhavhr7WWU2Q
ANeyFvycwz2YqDrOccS4SjoLGxa0B8YHP86vI4/kPpRZ+lbbBCzlsP32rYD0RIGE
Vy9l4EzgQva0Qmarkb5tf+N7KzuONt6c1oaXUCMgZQJiMWoe4s4bwXU2LBZEw9Ti
3wu9wSXZEnQaB9fXFds/KpRBYIk/a2SQJlcICmbiynTAIRExs+NbRF5oIPpGPiYu
dxQQl8Ie5dzpsd9eYZTKKIH5/7/22qoVdwrkqAffkrefrh6RwQBoOJWu+R0A/xPJ
B8emdPJt7wP7jg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:02:03 2026 by rpki-client