Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: KmnfE0+4BzDo1TObCPopKLUyGRoM9OqJzDyEHWVA/go=
Subject key identifier: 6C:B0:20:84:6F:52:1C:48:10:55:97:F8:69:C4:40:9B:01:AC:94:3D
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 019D329ABA9A16DF58F98DDD02E1AB546078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 04:01:34 +0000
Manifest this update: Sat 28 Mar 2026 04:01:34 +0000
Manifest next update: Sun 29 Mar 2026 04:01:34 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: 6zBVQYmgJlVdsNjUG4bX6ITj/aybGxT+6EDVIdqMZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:ba:9a:16:df:58:f9:8d:dd:02:e1:ab:54:60:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Mar 28 04:01:34 2026 GMT
Not After : Mar 29 04:01:34 2026 GMT
Subject: CN=6cb020846f521c48105597f869c4409b01ac943d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:21:71:27:3b:cd:1d:10:1d:58:af:de:86:
26:c8:be:2e:b6:87:2a:42:0c:bc:8f:b4:72:0e:33:
9a:9e:2b:43:5b:10:36:3a:a4:ad:37:75:c6:66:51:
08:8a:57:ff:d4:7b:ae:5d:0b:25:f4:ae:d0:d5:06:
cd:eb:09:42:3d:77:bb:28:b5:d9:1d:59:9d:5a:01:
50:64:ab:c0:c8:ac:36:ab:c4:a4:16:91:d3:55:54:
32:f3:39:3a:0e:49:9c:20:6b:0c:57:69:d1:46:c4:
5f:28:fc:07:aa:a9:36:15:f6:8d:a2:b9:54:80:f5:
07:cb:42:ed:fa:17:69:ef:ec:b5:69:72:89:59:75:
20:55:d7:f8:a8:ff:24:36:f5:67:0c:71:6b:25:d2:
2c:a2:79:0d:6f:b4:6e:92:2e:9a:fb:ec:71:70:01:
6b:9b:c4:08:e3:21:31:b8:34:c9:6e:6d:33:6c:28:
24:5d:f4:ac:65:de:c9:5b:9c:1a:65:8c:3d:86:0b:
10:ac:35:d6:1f:ee:70:c0:6e:24:1a:af:56:3f:5a:
62:3d:be:bf:b8:58:c6:3c:11:d6:eb:9f:c7:b5:d8:
d0:c3:80:11:7d:d6:07:c9:66:64:0b:b8:fb:12:cc:
39:23:26:6c:da:c8:b1:38:c6:ec:ea:d3:5c:9b:71:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:20:84:6F:52:1C:48:10:55:97:F8:69:C4:40:9B:01:AC:94:3D
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e6:ab:fe:51:24:99:3e:22:13:f3:df:36:ea:80:41:74:7b:
6d:43:00:fc:5b:f0:75:75:1a:bf:28:95:9f:d9:a8:b6:ff:2f:
17:cc:e8:ab:82:1e:27:ed:51:4e:54:ba:0c:a4:be:61:fb:46:
19:4e:d9:20:6a:f1:cc:bf:0b:8d:e2:d2:41:26:f6:89:c5:04:
03:6a:19:53:4a:85:b9:f4:8a:bf:ec:95:2a:c9:46:c6:0f:5f:
dc:0f:9e:ea:b2:1a:ca:fd:8f:0a:0a:9f:a1:c6:09:d8:91:5a:
f7:e3:59:32:af:a1:52:4a:a1:91:e1:10:d4:64:79:b8:df:2f:
72:c5:7e:57:b2:b8:13:c2:22:f5:53:2d:32:bb:08:c2:c0:2f:
8f:ef:2b:69:a2:08:3d:4c:7f:8c:88:a8:4f:2d:b8:02:db:19:
ea:e4:b6:30:78:a1:1b:23:cf:fa:d0:cd:4f:f7:f2:55:c9:4a:
7c:fe:2e:1d:a7:56:db:24:ee:1f:ce:52:88:eb:da:76:78:97:
e9:55:ca:d1:16:23:88:bd:47:da:97:1e:36:c7:e0:77:26:6b:
67:ea:17:84:d7:87:93:d8:f8:a4:56:41:62:7c:07:4d:43:29:
cc:40:87:96:4e:94:0a:bd:bb:44:0a:72:84:93:96:2a:3d:60:
a3:3a:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:45 2026 by rpki-client