Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
File: JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft (raw, json)
Hash identifier: WHFzHyhRZsJyrWLUB3NpStp3taOPaR+p6FxQJrrDYV8=
Subject key identifier: AB:36:21:3C:3A:6A:10:05:EE:9E:EC:D1:EE:89:0F:BE:CB:1C:92:07
Authority key identifier: 24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
Certificate issuer: /CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Certificate serial: 019D34894C4E3005B85EE4EF4AD5C4F26CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
Manifest number: 0DE3
Signing time: Sat 28 Mar 2026 13:01:46 +0000
Manifest this update: Sat 28 Mar 2026 13:01:46 +0000
Manifest next update: Sun 29 Mar 2026 13:01:46 +0000
Files and hashes: 1: JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl (hash: EBpuCQqWpR0NmWt1z9OGMS7zwU+BniSA+ldZiyg3VOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:89:4c:4e:30:05:b8:5e:e4:ef:4a:d5:c4:f2:6c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444306680f8ddb8b9890d30f507e619e4415d3e
Validity
Not Before: Mar 28 13:01:46 2026 GMT
Not After : Mar 29 13:01:46 2026 GMT
Subject: CN=ab36213c3a6a1005ee9eecd1ee890fbecb1c9207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:ce:51:e9:05:8b:c1:98:f6:a7:53:b9:85:
b2:ad:81:38:6c:b9:51:54:78:dc:a7:c7:51:f4:12:
c3:25:1d:46:c4:7d:e3:d5:e2:74:d9:a1:ac:ca:b3:
00:30:19:3e:d6:dd:38:1a:29:60:2d:e5:c4:f2:dc:
4f:dd:c7:4b:19:6f:9e:0c:81:74:d7:73:e7:d1:d5:
48:93:28:34:24:96:d4:61:f6:10:17:92:dd:f4:75:
9e:63:a2:8c:95:8d:9b:89:3d:47:8c:f4:12:fe:3c:
51:1f:6c:f9:46:47:16:9b:d1:7b:ae:b5:2b:e0:59:
cf:d3:51:ff:76:42:cd:9b:72:61:26:c6:d5:ae:7e:
6f:92:e8:1e:fe:ea:1b:ee:b5:bf:5b:fb:3d:be:f9:
f1:50:e6:43:74:8a:65:e6:6d:4f:6f:3d:f4:2a:71:
f7:d9:f9:51:bc:38:47:06:f3:e1:73:b0:eb:e7:00:
44:85:57:0d:69:88:cf:3e:ef:d1:e0:21:fe:d3:c3:
a0:c6:e5:d7:36:77:e3:86:b3:28:63:dd:d6:98:d5:
24:45:78:fb:2c:b5:7e:62:e7:57:76:fd:c3:a5:d0:
c8:4d:03:04:f9:81:f6:b9:c8:55:be:63:1c:a9:0d:
99:90:86:bc:65:6d:d4:90:36:98:4d:54:d5:58:37:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:21:3C:3A:6A:10:05:EE:9E:EC:D1:EE:89:0F:BE:CB:1C:92:07
X509v3 Authority Key Identifier:
keyid:24:44:30:66:80:F8:DD:B8:B9:89:0D:30:F5:07:E6:19:E4:41:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEQwZoD43bi5iQ0w9QfmGeRBXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ebf6ea-f5d1-48cb-9678-7646731c65db/1/JEQwZoD43bi5iQ0w9QfmGeRBXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b6:e9:9b:64:7d:c4:41:13:4e:c9:d6:26:5b:bc:db:b1:ac:
ea:59:f8:2c:19:3e:69:72:8d:b9:1d:4e:47:20:32:18:89:8f:
07:9d:db:1d:10:b3:5d:97:b4:09:05:d2:96:c5:d9:ac:ce:5c:
bf:21:3d:dc:b1:14:cf:c7:71:9a:97:bd:7c:11:fb:a9:45:5c:
32:f9:a7:b6:4e:4a:e3:80:b5:3b:00:36:0c:96:be:26:26:a6:
ba:1c:7e:f3:1b:67:4a:d9:9a:71:6c:e6:5d:7b:94:ac:60:57:
18:3f:49:de:5e:fa:62:fb:9a:ff:30:05:e9:b6:cc:36:b5:5f:
5e:e2:b8:4a:db:34:6b:bd:23:12:9f:32:41:4a:07:69:81:5a:
bf:48:f2:ec:5f:67:c7:16:18:68:29:75:3c:59:b8:11:0e:62:
f2:8d:5a:13:0c:10:14:d9:a9:6e:a6:f0:38:e5:5b:f2:d7:1f:
8c:b8:7f:6d:8d:cd:61:a7:c9:5b:d2:09:56:cc:f2:ac:03:0c:
d7:78:9a:72:36:61:5c:12:b1:70:68:22:a5:c9:4b:da:96:f2:
84:4a:73:25:00:ba:e0:25:58:e2:0b:f8:d7:04:2f:9f:67:8d:
bb:78:94:51:ce:b1:04:25:70:50:49:8b:cc:45:cc:13:90:7e:
29:c8:07:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ00iUxOMAW4XuTvStXE8mzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NDQzMDY2ODBmOGRkYjhiOTg5MGQzMGY1MDdlNjE5ZTQ0
MTVkM2UwHhcNMjYwMzI4MTMwMTQ2WhcNMjYwMzI5MTMwMTQ2WjAzMTEwLwYDVQQD
EyhhYjM2MjEzYzNhNmExMDA1ZWU5ZWVjZDFlZTg5MGZiZWNiMWM5MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hjOUekFi8GY9qdTuYWyrYE4bLlR
VHjcp8dR9BLDJR1GxH3j1eJ02aGsyrMAMBk+1t04GilgLeXE8txP3cdLGW+eDIF0
13Pn0dVIkyg0JJbUYfYQF5Ld9HWeY6KMlY2biT1HjPQS/jxRH2z5RkcWm9F7rrUr
4FnP01H/dkLNm3JhJsbVrn5vkuge/uob7rW/W/s9vvnxUOZDdIpl5m1Pbz30KnH3
2flRvDhHBvPhc7Dr5wBEhVcNaYjPPu/R4CH+08OgxuXXNnfjhrMoY93WmNUkRXj7
LLV+YudXdv3DpdDITQME+YH2uchVvmMcqQ2ZkIa8ZW3UkDaYTVTVWDcelQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKs2ITw6ahAF7p7s0e6JD77LHJIHMB8GA1UdIwQY
MBaAFCREMGaA+N24uYkNMPUH5hnkQV0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2Nzgt
NzY0NjczMWM2NWRiLzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lYmY2ZWEtZjVkMS00OGNiLTk2NzgtNzY0NjczMWM2NWRi
LzEvSkVRd1pvRDQzYmk1aVEwdzlRZm1HZVJCWFQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLbpm2R9
xEETTsnWJlu827Gs6ln4LBk+aXKNuR1ORyAyGImPB53bHRCzXZe0CQXSlsXZrM5c
vyE93LEUz8dxmpe9fBH7qUVcMvmntk5K44C1OwA2DJa+Jiamuhx+8xtnStmacWzm
XXuUrGBXGD9J3l76Yvua/zAF6bbMNrVfXuK4Sts0a70jEp8yQUoHaYFav0jy7F9n
xxYYaCl1PFm4EQ5i8o1aEwwQFNmpbqbwOOVb8tcfjLh/bY3NYafJW9IJVszyrAMM
13iacjZhXBKxcGgipclL2pbyhEpzJQC64CVY4gv41wQvn2eNu3iUUc6xBCVwUEmL
zEXME5B+KcgH3Q==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:27 2026 by rpki-client