Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: MaNwFXps4SQwcj4Bnn5sPMk3GHd4PEJDOkKPXdQrX/o=
Subject key identifier: 29:B9:29:CF:FE:B7:FE:DA:92:87:05:92:A4:EF:19:00:43:2A:88:27
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019D2704A6D785C7AF56CD6033EE9F010446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: 77nYVOh0IcdmSPGY9HkiT9ylJN5U/eQfdfc60Z0m9zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a6:d7:85:c7:af:56:cd:60:33:ee:9f:01:04:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=29b929cffeb7feda92870592a4ef1900432a8827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:e6:b7:20:77:60:1e:8c:9a:eb:9d:0d:1f:
a0:2c:aa:82:79:19:f8:5e:a1:ef:97:6f:57:6f:79:
6c:53:f5:35:5f:25:18:9e:dd:98:9e:25:1b:40:ad:
75:a4:d9:75:a9:c4:6f:d8:b3:da:7b:64:ca:9e:53:
23:c0:14:61:19:ff:f2:99:ff:b6:e4:22:e7:e9:33:
83:71:cb:4e:dc:5c:eb:b0:2e:22:d0:98:91:1a:3d:
20:82:9f:78:f6:13:2b:c2:c9:e7:c5:5d:68:ac:6d:
d1:00:7c:f4:c4:d4:17:5f:95:ce:ab:22:ce:0f:27:
06:66:e9:be:e9:a1:d1:35:ef:de:8d:9c:82:b6:e5:
3c:0b:27:e6:c4:34:d0:92:20:ff:e7:27:2a:e8:00:
a4:55:30:d2:ae:0c:94:03:16:3b:57:37:71:e9:63:
c3:2b:b5:3a:9f:4a:40:98:7f:bf:d2:61:09:9a:b8:
78:6f:51:f8:ce:ca:b0:ea:b9:5d:bb:2f:3e:08:45:
96:a8:be:3c:ba:db:67:26:1d:59:44:8f:7a:ee:1a:
54:62:fc:7f:95:ff:12:73:81:66:01:5f:eb:e3:65:
3a:f7:bf:53:a3:0f:2b:85:33:f3:5d:b5:40:6e:5a:
e6:0f:65:5f:36:80:ec:1f:bb:37:eb:6a:27:4a:e3:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:29:CF:FE:B7:FE:DA:92:87:05:92:A4:EF:19:00:43:2A:88:27
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fd:c5:3c:7e:52:66:36:6d:5a:22:89:1a:1d:22:00:cf:18:
8e:0e:3a:03:4a:c4:b8:3a:bd:cf:92:b6:a9:e0:7b:7f:69:4e:
94:8f:d4:76:fb:ae:f4:80:01:7c:fd:ca:47:23:eb:fe:1e:50:
a3:97:a4:f8:62:56:d4:fa:81:87:bf:60:aa:a4:93:69:0e:4c:
41:ec:91:74:1f:4a:7f:bd:a2:bd:bd:c0:15:2f:ed:dd:bd:58:
4e:3a:d3:15:48:9f:8f:a8:11:cd:67:33:3f:2c:b9:62:ae:0e:
40:ee:36:cf:f5:5d:e6:aa:a1:67:1b:32:ac:3a:2a:76:6f:3c:
57:e7:4c:6b:a8:ce:03:fa:bc:c3:1b:b4:b7:bc:8c:cc:f7:03:
71:71:ef:a1:85:ac:d6:c8:04:ca:45:48:08:6a:28:d5:86:98:
77:5c:43:9a:b3:b9:61:9b:1c:af:e9:3c:bb:3f:d5:20:ee:bb:
d2:09:ee:6e:2c:df:09:bc:db:5a:0f:46:82:e5:21:83:25:59:
51:4d:c0:51:5f:4c:41:0b:52:0d:93:d6:99:8b:fd:5a:0f:f3:
e2:a2:6a:77:87:8d:67:93:76:8a:79:27:05:59:b1:6b:ff:ff:
85:42:50:28:b2:d3:49:9a:eb:7d:7b:eb:43:a9:85:e9:f0:67:
6d:53:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:59 2026 by rpki-client