Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File: JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier: 2B+PIYcXMEmCqrkLsytfDykn7k2b9MF4q9raOfz5z5w=
Subject key identifier: B5:D9:A2:E0:76:6B:5C:36:75:A2:80:D2:B9:AB:FA:0F:90:2B:F4:0A
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer: /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial: 019D28F238E53A265E76AAC6AFB70C4F59EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:00:56 +0000
Manifest this update: Thu 26 Mar 2026 07:00:56 +0000
Manifest next update: Fri 27 Mar 2026 07:00:56 +0000
Files and hashes: 1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: YRUydPlYLNaAZwxf8FqAYIujYfu92pMiXXhBaELY9S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:38:e5:3a:26:5e:76:aa:c6:af:b7:0c:4f:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Validity
Not Before: Mar 26 07:00:56 2026 GMT
Not After : Mar 27 07:00:56 2026 GMT
Subject: CN=b5d9a2e0766b5c3675a280d2b9abfa0f902bf40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:64:87:ac:9e:85:aa:6c:0b:8e:29:43:ac:
9d:4a:b9:14:b9:4b:c6:db:9e:11:0d:45:f2:03:eb:
d3:a7:bf:79:a0:54:92:f5:67:b0:e3:ad:75:f0:2f:
0e:ca:11:0e:a3:f3:6a:4d:9f:f1:b8:e2:54:6f:de:
51:61:53:3c:7c:44:cd:b3:fa:46:f8:a6:88:a0:62:
28:a5:c5:55:44:55:ec:09:36:6a:53:4a:0e:3d:8c:
7d:b0:e9:d8:93:c4:2f:22:b0:f2:f4:67:d4:99:e4:
9f:ae:1e:37:d7:95:3a:db:94:0a:03:d7:66:d3:46:
66:68:ae:5c:d2:4c:96:d0:79:16:75:bc:8b:94:8f:
cb:e2:b4:5b:53:7f:04:f9:47:6e:3a:0a:79:92:65:
33:76:58:dd:c8:6b:a6:1f:df:7d:be:1c:22:97:92:
9b:d1:6c:38:04:db:3d:a1:49:64:32:8e:d3:d2:8e:
e7:74:dd:2e:68:de:e6:91:2b:9e:f8:0d:e6:d7:95:
05:a5:bf:97:2e:e5:ef:1f:e7:f2:db:9b:c5:07:96:
b8:b4:8a:e9:3d:00:c3:eb:93:20:b5:3b:33:29:cb:
cb:96:73:91:a4:7c:8b:9d:70:7e:23:fb:b7:fb:69:
02:7e:5d:db:94:4d:54:ed:b2:74:06:d0:ab:5d:92:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:A2:E0:76:6B:5C:36:75:A2:80:D2:B9:AB:FA:0F:90:2B:F4:0A
X509v3 Authority Key Identifier:
keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b4:ae:44:db:d0:63:7d:d0:df:43:b5:31:bf:67:4e:1f:d0:
b7:bc:10:5a:4c:8f:5f:82:e8:d1:16:6a:d4:31:6d:51:c0:ef:
fd:21:27:a8:a3:40:22:1c:96:19:3a:57:89:69:51:9e:77:ac:
d5:2c:13:f6:9f:64:d5:90:ae:78:41:14:b7:34:e9:1d:15:f4:
29:0b:e2:1c:d1:c7:3c:a3:f7:34:71:66:b0:39:e9:2d:ce:c3:
b4:f9:44:de:3f:e6:c8:84:90:12:64:aa:b9:91:36:23:33:47:
25:08:f6:3d:d5:21:84:1f:2a:14:14:c8:2e:42:57:9e:f9:a9:
79:67:d0:e9:3d:73:d2:3d:33:95:c1:07:0c:f9:f6:39:b1:80:
a0:09:98:f3:a0:ad:4b:68:85:ea:68:0d:61:c2:9d:4c:1a:ff:
cd:77:0a:df:97:79:14:d5:62:1c:c4:96:b0:b8:bd:d1:5e:cc:
bd:18:5f:58:7d:b9:99:50:06:15:a3:d0:ac:15:32:28:46:07:
36:ef:67:eb:f1:15:1e:d3:15:2f:53:73:98:96:20:06:67:14:
93:c8:08:8f:1f:6a:d3:24:07:11:c3:8c:f4:ac:fc:5d:4c:2d:
a5:e4:15:dc:b5:57:4c:0d:1f:cf:67:73:21:e4:a1:50:79:e3:
97:96:a9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:51 2026 by rpki-client