Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
File: jR4EozwylZxnL0X0a-EIZLgemEo.mft (raw, json)
Hash identifier: hX3i4HWaA9KNGuq+vPEcOdsVS1UVlqllSCBEWUw+Wkg=
Subject key identifier: 34:C3:36:D7:C1:85:0E:2C:D1:B1:50:F6:59:36:FA:FB:38:F0:BF:95
Authority key identifier: 8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
Certificate issuer: /CN=8d1e04a33c32959c672f45f46be10864b81e984a
Certificate serial: 019D333F33E28C7E1C136FB84CBAC943FA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
Manifest number: 1887
Signing time: Sat 28 Mar 2026 07:01:13 +0000
Manifest this update: Sat 28 Mar 2026 07:01:13 +0000
Manifest next update: Sun 29 Mar 2026 07:01:13 +0000
Files and hashes: 1: jR4EozwylZxnL0X0a-EIZLgemEo.crl (hash: gQkiHKs5cppoXxzcrAxqIkmW+CKl7TS0p1RbHWgwPi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:33:e2:8c:7e:1c:13:6f:b8:4c:ba:c9:43:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1e04a33c32959c672f45f46be10864b81e984a
Validity
Not Before: Mar 28 07:01:13 2026 GMT
Not After : Mar 29 07:01:13 2026 GMT
Subject: CN=34c336d7c1850e2cd1b150f65936fafb38f0bf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:49:da:4f:14:a2:56:be:3e:2b:f7:18:aa:
12:ac:9c:06:78:ee:4d:fc:2d:c4:fe:ee:4b:52:01:
54:86:11:a0:eb:1e:b3:db:f0:4c:53:ba:9d:bb:ea:
22:94:8e:c7:ad:16:55:30:e8:59:f2:9c:3f:e9:10:
73:a2:58:bb:36:60:84:25:e1:fd:e0:92:62:7d:92:
0f:e7:1b:97:77:3a:e6:ac:ba:48:95:bf:4f:da:71:
df:19:45:f9:36:ed:70:59:16:a9:d7:9e:8b:93:f6:
f7:a7:d2:e7:4f:b6:9a:f8:2f:19:b3:d6:94:46:61:
5b:69:8e:2a:8f:52:11:33:c3:cb:5e:99:55:f4:ec:
f2:53:4b:e5:cc:05:87:d8:6c:6c:72:4c:a3:88:63:
31:4d:33:c4:1f:9a:25:07:b1:05:06:9e:d9:ee:78:
a0:b5:17:c7:57:1d:16:d9:9c:7c:cd:37:74:ef:60:
3d:e6:91:03:ac:45:23:a8:34:92:3c:69:43:db:63:
a2:91:b3:6c:94:2d:23:d9:ff:b8:97:eb:bc:e0:57:
53:eb:e9:e9:88:20:d8:58:f1:19:7c:97:d2:95:74:
3a:b0:f8:0e:6d:11:bc:9f:81:c4:d5:ff:c8:6b:c8:
1a:d4:67:21:3b:2f:d9:70:c7:c7:39:bb:50:0a:b5:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:36:D7:C1:85:0E:2C:D1:B1:50:F6:59:36:FA:FB:38:F0:BF:95
X509v3 Authority Key Identifier:
keyid:8D:1E:04:A3:3C:32:95:9C:67:2F:45:F4:6B:E1:08:64:B8:1E:98:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR4EozwylZxnL0X0a-EIZLgemEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ee63f3-7d48-49e7-aea7-e249e73eccf1/1/jR4EozwylZxnL0X0a-EIZLgemEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:40:3d:3d:58:29:df:eb:f7:fc:d0:26:7f:dd:7d:90:ec:19:
91:1f:cb:7a:0e:d5:fb:56:43:11:42:d2:0c:a6:32:da:bb:c2:
00:ee:e4:4b:55:1d:9b:28:5d:f7:d4:91:bb:93:84:ac:2f:b2:
b0:2e:c8:2b:74:c1:54:04:22:dc:2f:48:f7:dd:31:ce:1b:3d:
fe:ae:f8:b5:ab:b1:3c:a9:f5:c1:ca:f4:41:c1:1a:08:a6:1b:
bd:2d:d7:01:a8:74:c4:30:88:5e:74:8a:03:63:89:10:57:ad:
28:26:19:02:d3:de:c4:ab:11:d4:1a:7f:6c:b1:76:80:12:93:
0e:32:4b:23:60:88:96:a3:12:cd:fd:13:5c:1b:aa:42:8b:88:
19:ab:b9:4a:32:51:a6:af:1d:1d:8b:7d:7d:a6:7e:f6:0e:e4:
50:42:a2:64:ac:7a:84:2b:9d:b5:d4:3a:8f:f0:3e:f4:bb:89:
df:ef:21:78:66:b6:5d:04:09:62:ca:a3:e7:b1:a2:08:df:84:
95:8c:3a:2f:65:36:a3:10:50:f5:b5:3a:db:41:a0:fc:a5:8b:
09:0f:bd:0b:d7:a8:ca:ae:32:f4:1a:f5:79:f3:85:f1:7b:16:
e1:7f:06:6f:18:33:39:de:da:31:d8:a5:a1:f2:31:64:3d:e6:
6b:21:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:47 2026 by rpki-client