Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: RAC/Ye0uoYRVJazpJRimVMCk/t3h/2MpSRZyKCAf4iI=
Subject key identifier: 8E:FC:8A:41:1B:02:D9:04:CF:1F:26:5B:20:7E:D4:EF:2B:7A:56:1E
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 019D27042AB9C9924382CE86ABD3804BDE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 123B
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: VnWhauRMYlihEvr2xOkVshbByHEbzQnnGBs1sOV1DJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:2a:b9:c9:92:43:82:ce:86:ab:d3:80:4b:de:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=8efc8a411b02d904cf1f265b207ed4ef2b7a561e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:c5:29:1a:50:da:d4:ff:7a:19:5f:e8:3c:
7b:e7:da:c2:7e:9c:9c:24:96:8c:41:28:0c:ff:9a:
ce:61:a8:96:93:93:f0:4e:0d:07:86:f1:ad:5f:f2:
dc:c6:3b:35:35:35:37:46:2c:32:85:3b:5e:5e:84:
02:4f:3f:e5:a7:ea:81:45:60:11:8c:58:b9:cb:1a:
32:ac:bd:a4:de:81:1f:e7:b6:89:1c:71:ec:ec:19:
98:74:44:b8:96:cd:e4:01:2c:5b:b7:de:8c:4f:62:
e4:10:c6:03:45:be:f2:95:d4:a3:7d:53:3f:3b:a1:
42:77:bb:1c:fc:b8:70:c1:3c:c3:b9:f3:73:05:2d:
bc:27:87:a4:a0:91:5d:8c:57:ac:b8:61:36:e6:18:
db:50:9d:3d:77:5f:b8:c2:cc:f8:87:5d:04:3b:ab:
9b:ba:11:1c:2c:94:91:56:0d:4c:2f:be:80:f7:aa:
ea:39:69:0f:4e:16:3e:16:45:a6:f6:ed:2f:1b:5f:
f8:b9:ee:62:9d:25:f5:fb:f0:75:66:5c:15:b6:e9:
10:8f:b6:6b:b2:b4:99:94:d7:95:a2:10:30:00:e4:
32:2c:40:de:68:56:3c:28:6c:dd:4d:c5:b4:88:c6:
87:00:58:aa:69:7d:31:d4:fb:b2:b8:0e:7d:1b:f5:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:8A:41:1B:02:D9:04:CF:1F:26:5B:20:7E:D4:EF:2B:7A:56:1E
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:99:90:d1:88:bf:cc:b9:f6:50:c7:c8:84:29:8f:97:48:e6:
70:bd:b4:66:57:b4:42:45:2d:d4:8a:1f:2d:82:9e:78:2d:ec:
4a:e9:25:e8:bb:23:8d:3b:34:8b:70:8d:c7:b1:8e:c7:a1:61:
77:f5:00:e5:78:d7:8f:fc:cc:94:3a:b6:1c:44:2c:1b:c1:6f:
ba:70:af:69:bf:67:99:e8:76:26:16:75:29:94:37:55:be:76:
3a:a8:db:e1:94:ce:f2:74:b5:b7:d7:f7:eb:2b:65:3c:9b:93:
4f:ec:4d:d6:7c:97:e6:dd:ab:cf:5a:74:f5:09:06:b2:de:a9:
2b:7f:49:b2:b5:5e:00:d6:35:d3:fd:de:46:36:1d:af:f6:88:
b6:22:eb:59:ec:f5:ed:47:4f:10:6a:51:4f:42:20:c0:0d:b9:
26:ff:e5:87:83:ed:37:34:2e:e3:18:e4:36:37:bc:6f:31:73:
f8:fe:a5:bb:51:57:06:ce:86:11:0a:b9:dc:5f:7c:a6:cd:2a:
32:af:a7:78:d3:e2:52:8f:03:2b:5b:29:60:25:c3:a8:e8:fb:
e9:8f:1a:a1:80:de:b7:cd:25:78:15:e3:e3:ec:45:c6:52:7e:
42:a7:1b:d7:92:97:a3:fe:f7:86:7f:b5:62:1d:ee:70:4a:22:
db:a4:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:52 2026 by rpki-client