Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: 5KaCdNPxgHJ3cn71X0pllpbgcpBp4q1o9bSWelFBcvU=
Subject key identifier: E7:B8:C6:6A:A6:EE:76:CE:AD:2F:92:15:7C:7B:DB:FE:1C:8D:84:31
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 019D29CDC1C5231F0720B5902E29D1E48BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 1458
Signing time: Thu 26 Mar 2026 11:00:43 +0000
Manifest this update: Thu 26 Mar 2026 11:00:43 +0000
Manifest next update: Fri 27 Mar 2026 11:00:43 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: mp+i4C+jt02ZTsDbmqoRKYu6FzPkSoTMGlTabCtFp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:c1:c5:23:1f:07:20:b5:90:2e:29:d1:e4:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Mar 26 11:00:43 2026 GMT
Not After : Mar 27 11:00:43 2026 GMT
Subject: CN=e7b8c66aa6ee76cead2f92157c7bdbfe1c8d8431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:6a:18:a2:bc:f9:d6:9f:89:02:dc:ae:93:
3a:6a:5f:db:c3:a2:5c:b0:e0:27:ae:2b:0a:93:2c:
3e:10:f6:21:dd:5e:a4:dc:ad:55:1f:8e:56:16:9f:
b8:51:8c:f6:af:a9:79:7c:59:20:59:b0:7f:9f:51:
66:fe:53:2b:e6:32:10:d7:21:d0:7d:85:38:89:fd:
00:95:d2:ee:90:43:eb:49:cf:d4:79:50:b5:91:2c:
37:24:4d:51:50:b3:30:8d:2f:bf:71:bb:e6:2f:20:
88:81:cc:56:36:21:7d:9e:41:4c:5b:f3:3b:3c:cb:
1e:6e:06:13:ca:96:87:95:56:50:53:a1:9f:7a:2a:
a3:18:4a:69:75:09:64:73:14:7c:ce:00:39:f8:78:
3c:c4:96:1c:8f:0a:45:c4:3a:75:ef:ea:15:12:d7:
5b:80:b5:8f:cc:3a:b7:44:44:70:78:cb:a5:25:70:
3d:9a:57:ac:83:c2:dd:cf:8a:35:d1:ff:2b:bb:e0:
78:27:36:1a:c8:28:64:ef:92:d6:f3:9d:12:4d:23:
31:08:5a:fa:2e:1a:ab:12:c6:cf:a6:38:99:3b:a6:
c0:4b:b6:9e:d5:63:9a:15:f6:e5:75:76:c1:3a:2a:
4e:9a:87:d4:c2:c0:d3:5a:08:5c:d4:28:8d:e2:d7:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:C6:6A:A6:EE:76:CE:AD:2F:92:15:7C:7B:DB:FE:1C:8D:84:31
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:88:d8:b9:b7:50:1f:1b:44:55:9b:cd:b6:d0:5f:7e:d2:
a0:d9:09:49:8b:e8:f0:36:48:b8:04:d6:ac:b1:30:da:1c:23:
ac:b7:ae:f7:45:f1:ee:5e:78:15:fd:3e:1a:ba:77:54:cb:71:
8e:af:3a:78:d7:aa:af:21:a2:92:48:31:9d:57:84:b7:4c:2c:
f1:c0:77:29:69:51:fd:7e:5d:bc:e2:46:42:84:bc:1d:eb:6f:
ea:ca:aa:b4:25:8f:ba:1c:78:79:bb:fb:37:2d:a9:27:6d:55:
8c:53:b0:a2:41:ee:96:af:6e:22:39:0f:24:d6:31:8a:cd:0f:
01:f2:6f:99:1d:46:b9:fd:3f:b9:29:8c:b3:8f:16:0a:1e:29:
ad:04:07:ef:95:6d:f9:99:a7:51:17:8d:af:ca:fc:b3:e3:b2:
9f:4b:18:f2:2d:5e:a1:6d:a5:37:62:5f:99:c0:b2:db:d9:8a:
7a:61:12:04:8e:20:ca:cc:ec:a4:1c:dc:99:a2:50:d1:0b:a1:
10:16:b6:42:44:32:d4:83:53:c0:5e:0b:4e:ea:8b:92:7b:22:
a3:f5:bb:e7:b8:6d:9d:db:ce:8d:3e:32:ce:37:04:b5:7a:d6:
47:36:1f:ed:b2:95:ce:a8:e0:a5:29:b4:4c:81:55:a0:30:95:
61:28:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:24:05 2026 by rpki-client