Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
File: jzAoLIbxBGuTEkzycOEU5fAm_3M.mft (raw, json)
Hash identifier: 8Pwx+7AtQlynbD6z5Cy/SbLIfymeg9jacSDwQDuqlrM=
Subject key identifier: E5:0C:C5:7D:35:25:02:B6:03:98:9B:E1:20:EB:00:F8:6B:AC:70:0C
Authority key identifier: 8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73
Certificate issuer: /CN=8f30282c86f1046b93124cf270e114e5f026ff73
Certificate serial: 019D270443180343DFA0DDA31D11FD4E5A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
Manifest number: 1244
Signing time: Wed 25 Mar 2026 22:01:23 +0000
Manifest this update: Wed 25 Mar 2026 22:01:23 +0000
Manifest next update: Thu 26 Mar 2026 22:01:23 +0000
Files and hashes: 1: jzAoLIbxBGuTEkzycOEU5fAm_3M.crl (hash: bF2mrJSfGsVFeSw7mTzM3s4ttJJmR+zmDYvm5NyAVb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:43:18:03:43:df:a0:dd:a3:1d:11:fd:4e:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f30282c86f1046b93124cf270e114e5f026ff73
Validity
Not Before: Mar 25 22:01:23 2026 GMT
Not After : Mar 26 22:01:23 2026 GMT
Subject: CN=e50cc57d352502b603989be120eb00f86bac700c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:83:57:e2:79:be:c7:37:52:f6:ee:68:ab:
ad:69:d9:6f:1a:13:61:dd:94:c7:ed:b2:56:e6:f8:
d6:43:da:fc:5c:46:5e:58:7f:17:a4:74:d2:8d:77:
ff:10:59:c0:2b:a4:78:c1:ee:f4:6f:61:30:4e:86:
d4:47:d9:09:62:2b:9c:cc:bd:81:b8:49:12:a2:00:
5e:08:be:21:3d:45:60:ce:31:97:41:fd:95:f7:25:
4b:56:b6:7a:34:73:77:40:ab:5b:4d:a6:20:51:58:
2d:13:04:80:50:6c:fe:fe:86:4c:a2:d9:e3:30:36:
ac:ba:59:f4:c9:0e:2d:61:c2:af:4f:10:aa:5f:7b:
a4:52:ae:fe:62:0d:5b:26:5d:6d:5b:d1:dd:37:29:
f2:b3:eb:ca:05:8d:d0:05:99:d4:2d:07:f7:4e:c6:
05:3e:76:37:6e:a4:13:be:23:f1:d4:a6:aa:b8:90:
82:9f:30:c1:4e:6f:41:b6:b8:9c:c3:57:37:bf:a6:
e1:40:26:81:ac:d2:be:c4:90:d2:b1:4f:71:a6:98:
a0:51:ee:55:35:0f:5e:67:77:c8:e0:3d:5b:58:15:
df:b9:94:36:b5:3e:93:3f:9a:d2:3d:4b:21:0f:64:
d1:8f:8e:2d:3c:7a:5f:c9:eb:03:53:75:2b:33:b7:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:C5:7D:35:25:02:B6:03:98:9B:E1:20:EB:00:F8:6B:AC:70:0C
X509v3 Authority Key Identifier:
keyid:8F:30:28:2C:86:F1:04:6B:93:12:4C:F2:70:E1:14:E5:F0:26:FF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzAoLIbxBGuTEkzycOEU5fAm_3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6cd798-31d4-4478-9962-f98796f51022/1/jzAoLIbxBGuTEkzycOEU5fAm_3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:13:47:a5:f4:c9:4f:ce:bc:75:48:27:df:7d:b7:35:63:9a:
60:0f:7e:5f:8e:77:5a:a4:c4:8f:e2:0e:77:07:d8:a0:2c:87:
47:2c:30:05:de:13:88:f3:66:a7:2d:51:c5:98:f5:d8:b6:d8:
db:24:3f:4f:e5:db:1f:e5:f6:ec:9e:81:35:e7:57:3f:82:85:
93:c8:b1:8f:b8:7c:c2:af:1c:9f:ea:43:05:4a:2a:cd:f2:d2:
32:2c:46:03:38:23:4a:f0:cb:60:e3:09:c1:77:5f:6d:27:f8:
da:da:4e:11:03:8d:5c:82:fc:5d:8d:eb:c8:3e:88:ba:14:2c:
e5:38:63:c6:f1:bd:8d:a6:5c:be:ff:6e:dc:c9:d8:8f:da:6e:
1e:58:36:d9:dc:4a:05:52:c5:08:f5:da:69:2b:8a:de:b7:d2:
98:fe:42:84:f6:33:9f:69:90:91:ae:b1:da:15:73:fa:08:1c:
46:de:ab:02:fe:b0:0a:2a:e7:3e:19:f0:6b:26:46:fe:2a:2b:
5e:55:b5:02:1f:af:86:ac:93:96:8d:7d:26:24:c6:7e:57:0c:
27:d5:ad:00:97:9e:db:ce:a3:cc:e7:2e:f6:90:01:43:32:e0:
40:7e:5c:d2:b3:c6:44:cc:f7:a0:bd:f8:bc:63:dd:ab:da:40:
12:e2:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:14 2026 by rpki-client