Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: mdLfndqnXqbWELwt3A7fvTnRmwc+67Oa0OWa6wlEr54=
Subject key identifier: 0E:89:43:C2:45:23:A8:C1:4B:41:3C:A3:5D:4B:BE:EE:6A:BC:3D:D2
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 019D284E18E36507DB63CBF62BF2C79800C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0CD9
Signing time: Thu 26 Mar 2026 04:01:39 +0000
Manifest this update: Thu 26 Mar 2026 04:01:39 +0000
Manifest next update: Fri 27 Mar 2026 04:01:39 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: Mh8H2JfiNzZpQLyoKqciVbz5wfkD1VRL6vs/cONKVNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:18:e3:65:07:db:63:cb:f6:2b:f2:c7:98:00:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Mar 26 04:01:39 2026 GMT
Not After : Mar 27 04:01:39 2026 GMT
Subject: CN=0e8943c24523a8c14b413ca35d4bbeee6abc3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:d2:3d:94:64:11:be:bd:04:2c:fa:15:48:
b7:c2:ed:ce:81:63:79:99:ed:49:b6:92:d8:7b:db:
64:95:04:58:9e:1d:a5:ee:0f:06:7a:91:8a:05:27:
fe:a8:d9:34:5b:57:e3:71:49:6e:8c:6d:75:63:d0:
2f:93:2d:cd:ef:a6:56:a5:3f:ce:43:1f:f2:11:1d:
b8:f5:03:6d:5e:91:23:b2:d7:3a:85:54:35:a8:bc:
9f:6c:0e:ac:af:a1:3c:4b:c9:00:e4:9d:e1:cc:62:
a9:b5:99:47:b3:d8:54:f6:6c:db:e8:90:4d:f0:45:
a8:01:84:ee:69:4f:f8:9f:43:00:2a:10:ea:3a:88:
83:15:39:04:fd:50:c5:b2:a0:f6:c0:62:66:ad:78:
67:6b:47:8d:eb:cf:74:5d:32:2a:bf:b1:79:ac:cb:
8f:33:de:70:80:ef:33:73:81:ea:cc:4a:57:52:62:
d8:08:c9:d0:b1:1f:a9:6c:d7:c9:f5:19:39:5d:65:
89:ef:6d:67:33:44:95:8d:da:43:e7:30:f2:7e:d1:
0e:21:0c:43:af:20:b2:8f:63:bd:a8:78:56:ab:50:
2c:97:1f:1a:cf:6c:d6:68:83:49:cd:2d:a4:fc:52:
5f:6e:2f:6a:07:75:1d:53:4e:32:b9:7b:ad:e5:80:
f5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:43:C2:45:23:A8:C1:4B:41:3C:A3:5D:4B:BE:EE:6A:BC:3D:D2
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0e:f3:f8:09:bb:52:44:fd:c1:d2:65:a3:7a:02:38:8f:87:
fd:2e:0a:1c:d2:21:19:dd:38:8f:3b:06:f3:71:43:b4:96:60:
a3:d5:64:60:6a:ef:b3:ac:42:29:1c:12:57:72:c0:5f:b2:65:
cb:4c:98:13:34:39:1d:17:a5:ba:73:74:e1:5d:ce:3d:88:59:
7e:ca:ff:b0:5e:af:23:ca:c9:25:df:e0:94:aa:af:43:2d:4e:
a6:37:c5:e0:a9:ed:76:a8:bd:e2:cf:28:f7:52:6a:23:05:8e:
ff:d7:a6:41:98:21:f1:d4:0e:67:cb:7e:e7:fa:20:bd:7d:14:
e4:48:12:17:a4:72:82:4b:18:e6:c8:13:1a:fb:01:1e:7a:a7:
63:47:d6:df:62:cf:f0:77:d8:fc:8c:e1:75:17:63:35:dd:82:
ec:ba:01:11:9f:f7:b2:1b:e7:dc:82:f9:f6:aa:56:a4:02:49:
f4:6b:b4:60:06:32:79:c4:ce:24:36:ba:19:8c:c9:64:63:f6:
56:b9:18:72:ab:e9:0a:20:06:a8:48:f2:61:ec:e3:93:2b:a4:
5e:00:e0:1c:fd:6a:56:d2:c7:62:56:f3:a1:3f:ef:5c:fe:6e:
7f:ad:c1:f7:94:26:b4:c9:bc:92:1e:50:19:e7:b3:c6:bb:82:
87:83:e8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:28 2026 by rpki-client