Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json)
Hash identifier: GwXzJgqZkHbaAJXPcPJjNH6JgugHY3hYst3imXXEbtU=
Subject key identifier: E3:34:91:D1:5F:35:D4:63:C8:CF:25:DB:51:8E:4F:9A:AC:82:57:E7
Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39
Certificate serial: 019D2AE050AE36C06089D13255072977E45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
Manifest number: 033F
Signing time: Thu 26 Mar 2026 16:00:36 +0000
Manifest this update: Thu 26 Mar 2026 16:00:36 +0000
Manifest next update: Fri 27 Mar 2026 16:00:36 +0000
Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: 7/Wrs6TGx0tLjt6jS13k9ugo3ZhOZp0lAirW/8Ari00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:50:ae:36:c0:60:89:d1:32:55:07:29:77:e4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39
Validity
Not Before: Mar 26 16:00:36 2026 GMT
Not After : Mar 27 16:00:36 2026 GMT
Subject: CN=e33491d15f35d463c8cf25db518e4f9aac8257e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:73:6d:5f:62:fd:84:86:6f:f2:37:b4:5b:
cf:64:70:ac:85:b3:ab:90:fd:d5:63:0b:ae:74:83:
ed:3a:d4:62:5f:c4:19:75:f0:a2:50:5c:58:17:56:
4f:52:de:28:27:84:8f:f5:83:46:4c:3a:33:ed:e7:
f9:92:4b:29:dd:75:ab:8b:c6:52:e3:8f:2a:c1:d9:
95:3a:ab:0c:f3:99:26:4b:b6:ca:e5:45:24:be:cf:
bd:4b:21:48:3d:a6:48:70:34:81:e4:49:13:d7:f3:
4a:02:0a:03:5c:f7:06:a1:f8:b8:dc:8d:81:8b:d5:
40:95:d7:bb:8c:52:1c:c5:38:4c:6d:04:97:0e:3a:
5e:e8:27:70:8b:64:21:20:36:9c:ee:ea:73:62:63:
45:c9:3d:56:8f:2e:ff:25:2d:90:16:6e:38:73:6c:
e2:1f:35:49:f4:3b:79:1c:f8:3b:91:2c:56:62:3a:
83:1b:6c:b6:a6:9f:fa:d3:ff:fb:ea:c6:91:1b:22:
8f:e8:9d:dd:5f:b7:e6:89:6f:a1:8b:cd:85:71:38:
7b:24:25:37:77:7e:41:84:63:51:f8:4e:a0:db:c1:
ee:e4:32:c6:34:68:a4:93:ff:b6:d5:b1:93:5f:60:
bc:b7:ef:ea:f7:a5:80:1d:ad:9f:25:36:1d:f1:19:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:34:91:D1:5F:35:D4:63:C8:CF:25:DB:51:8E:4F:9A:AC:82:57:E7
X509v3 Authority Key Identifier:
keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f9:54:c0:d8:b7:9a:32:d8:c4:32:b8:42:c2:06:de:f9:41:
ed:cf:73:ad:86:fc:97:3c:c5:6e:ff:73:44:e8:f0:ec:0f:a3:
0e:4a:02:98:51:5a:4d:bb:5b:18:9f:b1:14:bb:9b:0c:f7:f1:
a6:a9:51:8b:ee:71:af:2a:24:91:be:30:a0:97:e5:a1:aa:7a:
22:a8:40:22:e8:19:94:f5:84:ad:36:fe:45:ad:a8:fd:dc:d3:
d4:5c:60:2f:24:e5:5c:90:8e:50:f1:2b:09:12:62:96:76:87:
62:95:02:eb:54:4b:6b:56:e8:c7:5c:1b:59:a9:9c:5c:5f:f0:
cb:ff:83:23:17:2d:0a:4c:59:f3:a0:b9:0c:9a:1d:45:16:56:
fa:5a:f2:c8:56:28:3e:f2:3b:57:fa:4c:2c:f5:de:b2:8b:7b:
87:0f:8f:c3:eb:12:30:a5:7f:b7:01:57:6d:5b:02:9e:b8:5e:
d6:c4:31:0c:38:e7:fe:4c:97:8c:4d:be:bd:a6:d1:9a:7f:48:
83:0b:2d:d1:50:f0:6e:2f:2b:9d:fa:6d:aa:28:d2:db:68:cb:
e1:a5:2c:fc:bc:33:2d:a4:bf:10:c5:ee:2a:5f:67:25:bd:52:
bb:43:cd:f5:18:cd:9e:87:58:e0:b5:71:b1:d0:81:db:b8:51:
eb:24:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:08 2026 by rpki-client