Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: 9HPgaTuvktoLchaDHH4bfePaLkeUO+1nExDMAJgohQI=
Subject key identifier: B8:52:A9:93:45:93:DE:DB:F5:45:E0:28:D8:25:67:79:41:EB:2E:AD
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 019D27049BEB56096BA81972A2232B7A666E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 1028
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: 1SZzHLdzqk4klWLxm8Zm6Ra+dOYu1J6oKOITPUreiSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9b:eb:56:09:6b:a8:19:72:a2:23:2b:7a:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=b852a9934593dedbf545e028d825677941eb2ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:99:4b:4f:5b:3d:22:67:cf:a0:8b:88:94:
0e:79:3b:49:a3:39:53:da:ca:0e:ed:15:09:f7:a6:
b8:9f:90:e8:63:b4:d0:c2:09:9f:78:8b:b6:d3:3e:
5d:b3:7b:bf:c1:86:f8:b8:74:b5:93:a5:fb:25:47:
1b:d5:8e:8a:6d:e1:fc:c9:9d:31:71:d8:b9:e6:cd:
f8:a5:a5:ea:c3:a0:83:bd:89:a9:10:c9:23:43:d8:
71:cb:f8:5c:16:43:fb:9c:c9:41:61:eb:59:38:25:
28:eb:a2:e6:8a:f3:d1:ba:85:9e:93:33:94:22:9e:
a9:a7:be:05:79:2e:3a:16:7f:81:4c:b1:4c:c3:a1:
6b:b8:4b:04:85:63:47:4b:72:34:41:65:22:62:cb:
48:c3:07:6d:7e:85:1c:9c:d0:af:23:2b:68:7a:2e:
70:ca:b1:17:dc:53:bc:3c:0f:06:d5:67:e6:40:d4:
5a:77:26:6b:83:89:55:4c:22:c2:ae:0d:8e:0a:e1:
03:75:fd:d5:0b:60:db:4c:36:ae:f1:a8:60:52:51:
02:53:9a:58:f3:dd:1e:b2:ba:b0:36:b0:03:87:fa:
ef:53:99:5d:17:48:65:c6:0d:13:cc:9d:0a:58:d1:
0c:2e:40:af:11:43:d9:3c:32:13:1a:18:e6:80:fc:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:52:A9:93:45:93:DE:DB:F5:45:E0:28:D8:25:67:79:41:EB:2E:AD
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:bb:b8:ef:68:42:9a:45:6b:06:5f:73:a3:8a:f5:ca:e2:
69:eb:8a:a6:9b:bd:d2:fc:9d:1d:1a:1a:76:c4:6f:78:9c:51:
2c:0d:d3:77:91:35:71:d3:82:36:3b:ba:9d:11:48:d2:9f:35:
11:1d:31:d9:18:cf:db:0e:61:81:23:7a:47:28:83:6f:7a:fb:
56:cd:2d:ef:a1:47:7b:0a:a7:93:e5:b6:ff:0b:01:bf:cd:69:
31:2d:62:4c:8d:d4:ac:58:5f:d4:42:fe:b7:5d:11:09:e8:58:
26:a3:fb:67:4b:cc:f3:1c:3f:10:83:3a:3f:c5:cb:11:a6:56:
68:63:75:8d:00:89:94:51:37:5e:4c:ea:1b:cd:d5:91:a0:7a:
5e:5f:18:f8:a5:d1:95:c5:3c:7f:02:2d:91:a6:9e:d4:f5:32:
15:d9:5f:a9:79:c3:f5:22:af:35:79:23:3d:5e:93:0d:4b:59:
89:7d:37:53:c8:dc:31:58:a4:01:9f:94:51:52:8a:05:9b:9e:
6d:c8:d7:b6:3c:27:e8:09:b8:82:0c:34:7f:00:ad:03:de:5d:
f9:c3:2e:cb:b9:0e:fa:39:61:05:83:81:c4:89:71:f1:aa:46:
a1:e6:4b:4f:24:df:d6:ac:88:af:09:78:86:5a:02:c1:ff:40:
b4:01:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:56 2026 by rpki-client