Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
File: JZYIYbefTqtQdAg3i6kIfMHkTic.mft (raw, json)
Hash identifier: DC8IwVxbU/1WbJHT39Xz+UBe7B09fLKvGoTfbYOWyz8=
Subject key identifier: 8B:91:A5:E3:36:15:03:EF:6B:49:E7:E9:DE:17:3D:D6:D4:43:A5:91
Authority key identifier: 25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
Certificate issuer: /CN=25960861b79f4eab507408378ba9087cc1e44e27
Certificate serial: 019D2772DD46D43F90C1FA8FAD5003F1331D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 00:02:12 +0000
Manifest this update: Thu 26 Mar 2026 00:02:12 +0000
Manifest next update: Fri 27 Mar 2026 00:02:12 +0000
Files and hashes: 1: JZYIYbefTqtQdAg3i6kIfMHkTic.crl (hash: 18WeSdB0uAY7T9FCGkZUHaAobx1yGjSUnEol22f2w/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:dd:46:d4:3f:90:c1:fa:8f:ad:50:03:f1:33:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25960861b79f4eab507408378ba9087cc1e44e27
Validity
Not Before: Mar 26 00:02:12 2026 GMT
Not After : Mar 27 00:02:12 2026 GMT
Subject: CN=8b91a5e3361503ef6b49e7e9de173dd6d443a591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:cf:83:85:14:8a:0e:95:95:06:1c:5b:80:
07:a2:a3:d3:8b:c2:fe:1e:51:c9:c9:06:a4:34:11:
fd:e7:bb:0c:96:7d:c1:5c:5b:f8:52:31:a2:86:bd:
12:8f:70:77:5e:51:64:46:88:77:af:53:13:67:81:
51:cd:e5:52:0e:a1:f1:31:f6:93:a1:6a:28:b2:28:
b8:e6:d3:ad:2c:df:40:9d:db:68:ca:5c:87:4e:9a:
b4:73:e7:87:cc:c4:76:d0:3b:55:3b:ee:cc:73:69:
18:c0:1e:f5:91:09:40:b6:09:0a:6a:53:49:dd:b1:
3d:29:3a:68:a5:3d:78:61:14:98:d2:3d:6d:04:c0:
67:6c:71:c1:aa:c4:2e:ba:02:a1:d6:fa:aa:9c:20:
1f:39:ca:7d:6e:e0:2a:0c:0b:c9:d4:a4:67:ac:0f:
19:75:ff:f2:74:0c:0c:48:f6:41:19:76:ba:f9:94:
df:4f:1e:a0:d9:93:6f:7c:81:69:7a:26:e9:3e:3e:
2a:ae:9e:6a:ca:a3:24:21:b1:42:57:7a:84:36:d4:
68:87:33:ab:ad:96:c3:60:f0:d7:7d:43:79:47:a9:
a1:2a:df:bc:8e:ad:f8:3f:8a:6e:fc:67:98:a5:b4:
92:98:0b:36:74:eb:cd:4c:07:73:e2:c7:09:66:00:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:A5:E3:36:15:03:EF:6B:49:E7:E9:DE:17:3D:D6:D4:43:A5:91
X509v3 Authority Key Identifier:
keyid:25:96:08:61:B7:9F:4E:AB:50:74:08:37:8B:A9:08:7C:C1:E4:4E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZYIYbefTqtQdAg3i6kIfMHkTic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/48d987-ee17-4906-b595-7a904f20f53c/1/JZYIYbefTqtQdAg3i6kIfMHkTic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b7:60:3f:eb:1d:bc:2b:3d:37:2d:15:b2:69:95:04:d2:7c:
aa:af:f7:ff:a8:58:27:fa:28:22:83:f9:49:c4:b1:11:ed:94:
23:d2:fb:21:05:e1:00:6a:21:18:5f:8a:88:94:77:b3:a7:dc:
3d:60:eb:95:66:79:18:30:4c:cd:24:e8:ac:cc:f0:c3:d7:a6:
b3:44:37:41:1c:68:ae:8f:fb:2e:19:64:55:96:fc:70:14:e5:
31:b9:f9:1c:1b:be:00:f1:75:6f:ab:ee:58:66:bd:66:66:7d:
64:b7:6d:96:c8:d8:90:00:9c:a9:fb:57:6f:90:f4:4b:35:90:
4e:fe:4b:f1:92:1f:b4:20:3a:60:ca:bd:1f:40:17:9f:78:51:
fc:80:19:87:13:26:68:8a:5a:75:68:99:a3:7f:ef:8f:e7:f9:
24:ed:37:0b:90:3c:27:d4:1e:0b:eb:aa:03:ac:8a:eb:85:fb:
ad:93:b6:9a:1f:66:81:10:42:e6:ea:76:a0:33:94:33:41:25:
f9:d3:c1:82:21:ab:e7:fc:e6:3c:58:c7:0d:97:c2:7b:1e:da:
46:4c:24:0e:d8:df:61:58:18:ed:fe:6a:63:1d:a3:29:68:ba:
9b:80:2a:2f:51:d2:a5:27:e2:44:d7:a0:6b:b2:58:5a:51:48:
ee:ed:58:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:47 2026 by rpki-client