Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: XaV3uJXKnJjryg7yIJ7rBXQhvC6jEtE20jzgS2dPeCg=
Subject key identifier: 25:38:B1:0E:1C:F9:15:6B:00:A7:18:1F:41:32:60:F3:70:F9:2F:1F
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 019D27DFA04FFD9857E72C5DFE0701446410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: 027C
Signing time: Thu 26 Mar 2026 02:01:00 +0000
Manifest this update: Thu 26 Mar 2026 02:01:00 +0000
Manifest next update: Fri 27 Mar 2026 02:01:00 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: 7O4o5R1LDCH4UsXZt/9lIVUq3A7P5UhQ0X8w6Up+KaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:a0:4f:fd:98:57:e7:2c:5d:fe:07:01:44:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Mar 26 02:01:00 2026 GMT
Not After : Mar 27 02:01:00 2026 GMT
Subject: CN=2538b10e1cf9156b00a7181f413260f370f92f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:26:59:a5:19:54:e7:ca:d1:45:53:7e:f9:
85:cf:c4:7f:76:5f:d8:98:c8:3e:70:fd:8b:0f:f5:
e3:40:a5:1c:80:6e:b5:d3:fe:fd:ad:37:d2:5f:29:
4d:27:f5:48:5c:94:d3:9e:b8:61:53:c4:d9:59:3e:
ee:88:35:ba:4e:6c:7e:aa:69:94:fc:f0:9f:80:c8:
af:31:76:1b:a8:8a:cf:12:d4:3a:b1:ec:43:9c:39:
dd:a0:79:c6:b8:13:e2:f9:df:68:45:70:7f:8b:4d:
43:1a:be:97:1a:2b:36:c0:5f:fc:34:b6:50:eb:9e:
7a:9d:48:4e:26:b0:64:51:a9:37:ca:00:cb:35:84:
26:a5:b6:56:73:59:b2:1d:32:9f:68:e2:ea:7d:15:
18:b7:25:3b:4c:a7:bf:40:24:f4:4d:d2:de:47:f5:
b4:1c:a5:49:52:dd:e5:24:93:ff:13:2a:c7:9a:0f:
68:83:d2:0a:6a:ef:be:12:ad:1e:85:21:9d:bb:6e:
4d:c1:72:e1:9c:85:4b:40:4e:15:8a:2d:77:5f:12:
48:6c:0a:e6:17:03:0a:99:72:b8:34:8a:5c:02:ef:
a4:df:53:38:a3:c0:fc:d7:ff:62:02:ca:61:38:e2:
a4:09:6f:31:b6:37:14:eb:c3:2c:a5:99:b0:01:e2:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:B1:0E:1C:F9:15:6B:00:A7:18:1F:41:32:60:F3:70:F9:2F:1F
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c1:b7:7c:94:5b:fe:e0:08:07:42:d0:b9:ef:eb:f2:6b:8b:
c4:0d:c0:ab:d7:1d:a4:cc:b5:02:a4:51:5e:89:7d:d6:d1:14:
f7:89:94:24:0d:40:01:c1:b7:3f:2c:65:7c:05:fe:88:5b:2d:
95:d0:c4:1c:44:d7:48:96:5c:81:5e:15:40:50:57:81:08:bb:
c3:a6:db:b6:86:d0:a4:97:da:b6:9b:5b:ce:92:7b:fb:b4:18:
40:38:e5:63:b9:79:e9:ae:38:fd:48:06:bb:14:59:9a:1d:05:
b6:5e:47:f7:4f:7a:8b:fe:a4:c7:99:cb:4b:ad:64:4b:25:13:
01:5a:36:15:f2:0f:72:fd:cd:06:d3:91:74:f5:3d:91:b0:0f:
33:8c:27:dd:80:8a:54:fc:ca:85:ad:0c:bc:a1:22:ba:b5:42:
f5:b4:4a:14:12:19:aa:dd:2d:e7:67:23:50:f8:63:40:cf:ad:
b5:af:ed:7e:10:e0:c8:4d:8b:ac:1b:55:64:52:91:b4:8b:e4:
be:41:09:06:5e:ea:e4:65:6e:c6:84:af:b7:49:84:ef:22:1e:
e2:6b:23:81:4d:67:40:74:0e:db:b5:16:5c:21:73:68:7e:73:
6e:cc:e7:1a:83:79:08:fc:a6:7a:8d:1e:4b:69:e0:a1:ca:3f:
2c:77:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:37 2026 by rpki-client