Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
File: JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft (raw, json)
Hash identifier: evYnHtO0Ll9wJSZ4J6qiXJsQZKS/lD1MQRzDbaI7I+E=
Subject key identifier: 34:9B:39:99:3B:23:68:2B:90:E1:BF:55:0F:A4:66:C5:80:AE:FA:87
Authority key identifier: 25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
Certificate issuer: /CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Certificate serial: 019D284D5E15BE12386A6D07040DBC06B679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
Manifest number: 097D
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl (hash: moaPKpGYokVZpdWULWjGwf+3YvH8qfcKYPhH0BrpVdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:5e:15:be:12:38:6a:6d:07:04:0d:bc:06:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258464cd7d5647db5a03b669bdc6b0ff73b0df8a
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=349b39993b23682b90e1bf550fa466c580aefa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:98:d8:df:90:1a:0a:f3:5e:38:01:2e:d0:
d9:67:ee:8c:41:c1:9f:0d:dd:e8:c7:2f:0d:96:d2:
54:b2:b9:28:45:e8:0c:e7:b2:dc:71:89:d8:de:c0:
5d:21:80:96:c4:3a:35:0e:38:44:52:8e:f3:6f:77:
58:06:fc:6a:f6:ab:76:84:6e:a7:ab:03:9c:d5:f9:
26:34:4c:a7:8e:03:aa:24:06:bf:1b:0b:2d:a8:b5:
a9:5f:a8:73:bc:44:89:26:f8:c6:e2:3b:fa:2a:74:
4b:0a:c0:87:70:6e:e2:ec:d7:c1:5c:0b:01:35:a4:
bf:1a:77:be:e9:78:83:d1:ec:2a:d7:54:69:2f:ed:
dd:9c:ee:2c:dd:aa:d9:28:16:54:02:48:17:9f:54:
3f:fe:06:f3:00:d3:38:27:ce:ed:ab:30:22:af:36:
92:b4:1b:d7:e5:15:74:a1:db:33:7a:ac:ae:79:2b:
d3:48:e9:ee:45:b0:b5:db:68:e0:33:56:22:3a:9c:
41:d3:73:7e:46:d9:d8:fc:2a:86:c9:19:58:56:89:
ec:2f:72:fc:3d:f0:cd:85:9e:63:1b:0e:21:78:a1:
91:c7:36:d7:19:1a:cd:a6:e6:bc:2f:43:e3:49:fc:
8b:0a:13:9b:c9:84:5c:be:e7:0d:97:67:9f:7d:d6:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:39:99:3B:23:68:2B:90:E1:BF:55:0F:A4:66:C5:80:AE:FA:87
X509v3 Authority Key Identifier:
keyid:25:84:64:CD:7D:56:47:DB:5A:03:B6:69:BD:C6:B0:FF:73:B0:DF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYRkzX1WR9taA7Zpvcaw_3Ow34o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8042b6-a899-4c9f-8ffd-d623022c9e97/1/JYRkzX1WR9taA7Zpvcaw_3Ow34o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0c:17:b4:04:c4:56:c2:15:f9:08:af:cf:ac:02:d3:2a:fd:
95:78:0a:4f:75:18:b9:36:74:52:d9:b7:e6:e8:9b:1e:f2:83:
92:75:ed:2f:5f:c0:e2:19:d9:57:f3:a8:51:74:0f:1a:b9:01:
b1:5b:f1:d9:c5:ed:3d:ce:3a:cb:4f:91:b6:01:15:4c:71:a9:
87:6d:ba:d6:8a:33:ed:eb:c0:00:a2:a5:32:09:55:9d:c9:6b:
64:7d:67:c7:16:c7:ee:7e:95:29:89:de:75:b6:2f:ef:ec:31:
d4:e1:1e:9e:94:09:e1:e7:fa:86:78:3f:89:00:6e:e7:f2:51:
7b:07:71:60:d5:3b:d2:be:a5:1e:8f:ce:f2:af:4d:b9:9e:ad:
22:9d:7a:87:b2:88:b7:6d:5a:2f:bc:29:ff:f2:38:22:81:b7:
2b:f5:f6:4d:34:73:c2:72:ea:d5:13:ea:04:7d:f1:11:79:f9:
bf:e2:d5:45:30:0f:d7:4e:de:0a:84:99:5f:1f:1c:6d:f0:11:
ce:6d:e8:18:e9:2b:c8:dc:cb:30:1d:95:3f:3c:6d:b5:43:bb:
d1:54:08:01:8c:7d:26:b5:cd:c0:b8:42:86:74:af:f1:9a:38:
9f:d6:d5:a0:aa:d6:b8:4a:b1:4e:e3:a7:bf:28:ab:c8:65:e5:
1f:22:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:31 2026 by rpki-client