Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: KI+s5SLuTITOO6kgfiYKBMF0ea88KM+RHHIWK4NOWxo=
Subject key identifier: AF:56:5D:D1:19:28:9C:44:84:C8:C3:C8:44:FF:D0:AA:DA:62:B9:59
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019D27E04E643BAB6FB2B866D482708ADC23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 13C8
Signing time: Thu 26 Mar 2026 02:01:44 +0000
Manifest this update: Thu 26 Mar 2026 02:01:44 +0000
Manifest next update: Fri 27 Mar 2026 02:01:44 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: YJddFrtN2x8UpD5HMzisCqoGeVhnmOFF5PxtPdTaQJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:4e:64:3b:ab:6f:b2:b8:66:d4:82:70:8a:dc:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Mar 26 02:01:44 2026 GMT
Not After : Mar 27 02:01:44 2026 GMT
Subject: CN=af565dd119289c4484c8c3c844ffd0aada62b959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:50:1b:18:f7:6f:bb:85:30:9a:a0:b1:1c:
dd:9d:3e:ca:eb:2b:a8:2f:7a:66:ed:9d:38:98:1f:
5c:c1:1c:0a:c9:59:e3:7b:6c:f4:69:53:10:59:95:
62:0f:27:6e:37:90:01:bf:f9:4c:ab:51:c5:b1:9a:
9a:0e:e2:dd:80:75:70:a2:75:79:cd:aa:ab:17:1d:
cd:fd:a0:b8:57:5e:51:9e:46:26:d1:14:0a:ab:be:
9c:e4:bd:ad:ab:59:5c:5a:d5:c1:ad:0e:cf:ed:42:
a8:7b:0d:4f:50:4d:41:ff:4c:38:91:20:2d:9e:7f:
16:a6:0e:bd:56:1b:57:4b:d2:0e:fd:93:f5:08:cc:
90:9a:5a:bc:9d:48:e0:ce:48:4b:be:a3:3a:62:4f:
e5:34:5f:57:ba:da:7d:49:dd:ab:95:5a:60:9e:a3:
2e:56:df:3d:32:14:dc:d9:d4:40:1d:72:99:64:02:
24:b8:41:b0:05:e9:50:e7:b5:70:f8:e5:1f:50:3a:
cb:7c:fb:30:97:b9:b6:2e:ae:46:83:67:6b:d4:06:
85:20:58:f5:48:5d:b6:5c:d6:ce:10:68:42:62:da:
18:40:eb:e8:0d:ed:ab:e4:d8:02:72:cd:31:13:86:
b8:e4:29:ca:8a:a4:46:8a:47:e2:58:37:97:61:92:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:56:5D:D1:19:28:9C:44:84:C8:C3:C8:44:FF:D0:AA:DA:62:B9:59
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:61:62:36:f7:be:33:95:64:ce:84:26:d0:c5:07:3a:4c:
c5:0e:91:9d:2b:3b:c5:e9:ff:3d:15:d4:59:5d:37:2a:6e:d9:
e6:41:79:8a:9c:83:b9:0b:96:60:96:68:be:d6:12:d5:e4:fa:
ce:05:99:15:4b:88:b3:f5:a7:10:1e:95:28:30:fd:7c:7d:56:
08:06:4e:b4:3f:ec:a1:29:34:b1:22:0d:40:73:46:5f:f4:18:
f9:7a:b1:df:ee:a6:32:11:d2:69:dd:9f:ba:32:9d:ce:b4:bd:
b1:15:e6:d2:28:32:86:e3:e0:e1:31:f5:97:28:ea:d1:69:0f:
35:f5:16:66:96:1d:4e:32:d5:06:bb:9f:4e:aa:e3:d5:02:92:
90:32:b1:ea:d4:ba:b6:62:86:ab:50:95:55:5a:3e:be:73:fa:
bc:b5:7b:f5:a3:72:da:eb:ab:0d:1c:82:26:6a:3b:1d:b6:f6:
ea:0d:41:49:25:52:8d:3f:3b:18:09:6a:5f:da:56:d1:e2:3d:
47:b9:39:7f:a4:fc:be:6a:aa:e4:a8:13:38:3c:29:53:18:74:
38:80:4d:5a:b7:65:18:8b:ae:06:1f:2a:46:9e:24:08:35:1e:
46:12:ab:13:5d:82:aa:42:bf:c4:31:e0:fc:b8:11:41:aa:ed:
2d:de:b4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:53 2026 by rpki-client