Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: kLA39x878JsQcjEQXaqBuGVQ8Bl82owoC8vdaE+7O6g=
Subject key identifier: BC:7E:AC:44:6A:47:5C:4B:16:1F:78:FA:06:12:18:21:28:82:E8:EC
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 019D29613D363447695D7D7AC991948A7F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 0601
Signing time: Thu 26 Mar 2026 09:02:11 +0000
Manifest this update: Thu 26 Mar 2026 09:02:11 +0000
Manifest next update: Fri 27 Mar 2026 09:02:11 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: kKbJzcHq8i3+O39fxIZW5OEKoMu2XMOoKhwiTvHuT7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3d:36:34:47:69:5d:7d:7a:c9:91:94:8a:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Mar 26 09:02:11 2026 GMT
Not After : Mar 27 09:02:11 2026 GMT
Subject: CN=bc7eac446a475c4b161f78fa061218212882e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:3a:e7:d0:83:cc:b6:01:12:f8:d5:3d:0b:
dd:31:a6:11:6d:38:79:13:73:72:d0:cb:50:27:e2:
03:42:34:d2:e6:d4:7d:ba:32:e8:04:29:85:b1:97:
23:8d:44:9a:75:f9:9a:e1:2b:a4:7d:e4:60:fd:e1:
91:da:5d:5b:f8:8c:24:29:fb:5b:c1:d9:25:b3:6e:
05:ed:95:eb:30:19:52:e1:b5:9a:ac:b4:a7:43:34:
21:0e:de:87:c8:c1:3a:b8:42:e1:9e:86:46:6c:2b:
0e:89:0a:c2:b3:cd:d4:65:19:27:01:f0:06:a6:19:
3b:d6:ea:58:64:b3:44:a7:f5:3c:08:68:47:af:4b:
60:ef:5f:b7:97:a1:c9:58:f0:88:56:cf:f3:9b:3c:
e2:6c:6b:f6:a9:51:87:52:c6:f6:42:ef:87:05:7e:
15:e6:45:0c:e0:e2:93:fd:d9:48:31:da:46:67:00:
97:44:f9:9e:ac:35:c0:cb:e8:ca:84:2b:0c:be:7c:
b1:f8:20:c6:e5:56:a2:66:74:7a:db:f0:8a:5b:8d:
c3:dd:fc:ba:6f:d6:6e:bb:64:ae:58:90:c0:e9:fc:
dc:f8:b8:b4:34:5f:2e:26:b0:cd:84:2e:27:60:a4:
e4:00:9c:d7:e3:c1:11:2d:d7:1f:bf:18:66:74:23:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7E:AC:44:6A:47:5C:4B:16:1F:78:FA:06:12:18:21:28:82:E8:EC
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ff:ce:c6:c0:9b:1f:ba:69:c7:0c:cf:f6:b4:c1:38:78:b4:
3b:dc:93:5f:7b:f9:c5:d3:36:45:08:0d:03:ea:27:91:5a:a8:
84:db:a1:e3:53:d1:ee:8e:0e:50:83:63:61:9b:a2:00:49:38:
69:b1:99:36:b4:45:bd:ea:b4:d5:10:a7:93:ad:c2:d0:6c:e2:
1b:ed:ee:ba:b3:77:bc:64:02:6e:11:3a:7b:54:8c:c6:c9:4f:
7d:a1:0a:6e:0e:d4:dc:f8:71:bc:1a:f5:cf:82:db:03:59:4e:
fb:f6:b5:64:33:da:9f:56:87:5e:8b:2b:c4:3e:08:97:e3:4c:
e1:2e:44:69:5e:85:e0:bb:0d:71:83:2d:8e:19:47:88:e4:f7:
f4:72:35:19:5a:d6:05:8f:9b:e0:5b:bb:dc:d9:cb:ba:78:47:
f9:25:03:13:f5:57:c6:41:7e:50:9a:95:ce:39:0b:8d:56:01:
3e:00:da:20:25:07:53:0f:25:71:6a:95:00:29:89:b6:a9:19:
70:01:35:4e:ee:57:99:7c:1c:15:e0:6d:b7:92:12:c6:d6:70:
cb:e4:da:c3:40:67:62:24:e1:9a:b6:7c:7e:4a:c8:08:66:95:
6a:ad:f9:24:41:a9:cc:10:90:e1:40:61:d7:e6:cf:95:09:66:
bf:bc:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:52 2026 by rpki-client