Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: BzaTOImPWh6GcMDXRIDcA8AbfO/O2g3otIWGAXk0Nd8=
Subject key identifier: B2:23:2D:D5:66:BF:97:EA:D6:FD:34:D0:B2:3C:1B:89:76:95:8E:C9
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 019D28F2074144761CC7FCF5B5EA30B1AEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 09A6
Signing time: Thu 26 Mar 2026 07:00:43 +0000
Manifest this update: Thu 26 Mar 2026 07:00:43 +0000
Manifest next update: Fri 27 Mar 2026 07:00:43 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: G9deKUiQDO6GkglgZuOcnRsUMLPGZt8yX7MakGusgWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:07:41:44:76:1c:c7:fc:f5:b5:ea:30:b1:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Mar 26 07:00:43 2026 GMT
Not After : Mar 27 07:00:43 2026 GMT
Subject: CN=b2232dd566bf97ead6fd34d0b23c1b8976958ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:eb:aa:c0:e9:1d:67:e8:1d:36:19:8a:4d:
76:ca:6f:dc:fb:c7:7c:22:d8:3a:32:bd:af:14:7e:
4a:68:7c:a1:5a:85:44:c8:18:56:04:77:54:6f:75:
95:7a:64:85:49:95:c8:ee:6c:8c:db:b6:f1:5e:4f:
8c:49:3e:0e:92:fb:01:05:28:42:ad:55:6a:c0:7e:
b7:e5:42:45:1e:25:fd:dc:06:8f:19:a8:c9:0e:6a:
3b:6d:78:48:f5:e3:48:4f:1f:a8:d9:a7:50:ba:4d:
04:aa:cf:2b:19:0d:04:e0:22:4f:88:44:7f:c0:87:
fa:78:2d:bb:98:9f:84:2c:63:80:39:d5:a7:b3:31:
c3:a3:48:ee:dc:da:3d:97:40:1e:7b:4e:4a:8c:e5:
5c:c1:7a:a5:27:ba:e6:01:83:b1:c4:6e:f7:19:db:
7f:4d:35:7b:05:42:e8:db:45:78:70:48:37:86:0e:
d1:58:e0:c9:f8:7d:16:04:9d:49:bb:14:f7:47:79:
ec:d5:d6:33:6e:28:2c:1b:57:e5:aa:f0:36:81:2a:
27:14:05:6e:f9:35:45:ed:93:ff:60:ce:9d:30:c2:
dd:de:81:20:29:41:15:2d:20:c5:94:3c:58:2d:fa:
9a:d8:4b:28:78:f5:37:16:8d:6a:c5:89:b9:a1:17:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:2D:D5:66:BF:97:EA:D6:FD:34:D0:B2:3C:1B:89:76:95:8E:C9
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f6:af:05:c7:03:c9:13:a3:70:4a:5d:ad:03:99:cd:02:49:
6b:aa:d7:86:5e:77:9f:e6:a0:1b:36:8a:ca:a1:92:89:30:f8:
d0:47:db:3b:17:f5:b8:42:3d:1d:0c:6b:eb:e0:a5:56:1b:5b:
c5:b7:fa:60:da:f4:e0:57:d1:1b:03:7b:45:08:0f:91:a2:9a:
84:f4:9c:ef:ab:74:ff:b6:90:f6:90:85:ca:ac:fd:f6:52:a8:
91:92:b8:3c:ca:69:ea:bf:2b:2f:fc:3e:c3:96:5e:0d:35:6d:
63:6e:17:f9:6e:88:6c:e0:22:e5:46:24:71:1c:6b:75:27:9d:
58:16:29:45:52:ad:94:81:17:68:35:bb:90:da:cd:e8:0c:95:
84:2f:b9:a8:8f:41:dd:e4:7c:d6:65:d2:69:11:da:f2:58:30:
f7:88:e5:3a:46:29:16:ed:13:ab:18:76:84:b1:d1:4b:bd:cb:
4f:89:51:5f:fa:11:32:d6:f6:2b:4b:81:6f:0b:49:50:29:92:
46:5d:14:2c:e5:bf:ec:85:40:50:bc:3b:d4:4d:0e:2a:7e:94:
cf:78:ca:5b:fc:c2:1c:47:0d:80:6b:86:bd:c0:36:41:60:e1:
c1:7c:77:21:88:53:aa:0c:50:7b:92:6d:9e:d5:99:1b:af:d0:
e4:b1:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:49 2026 by rpki-client