Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
File: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft (raw, json)
Hash identifier: ex5bQ+SU/7Xog2IQyjxcplpqnkfYCY47S2GyBqHuZ/8=
Subject key identifier: 04:F1:76:B1:91:39:1E:FA:6B:CD:92:71:CB:EE:9B:7B:37:81:E6:AE
Authority key identifier: 8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89
Certificate issuer: /CN=8c23849b89238d95a6f4c175a34637fe3ff80489
Certificate serial: 019D265FC057191C3EEC950DCA4A6A9A58A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
Manifest number: 0155
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl (hash: 6xaVh0PTJv4GYDRWce/prMMMwD6NM0XcFZ/Ll348yNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c0:57:19:1c:3e:ec:95:0d:ca:4a:6a:9a:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c23849b89238d95a6f4c175a34637fe3ff80489
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=04f176b191391efa6bcd9271cbee9b7b3781e6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:f4:ed:99:08:42:5a:06:10:1b:04:b1:c6:
df:fe:f3:b0:14:d4:18:e6:cb:e0:dc:39:80:76:0b:
4e:64:76:84:b5:be:23:28:f6:6a:8a:1e:c7:a2:b6:
3f:59:d7:22:e0:2d:04:8e:06:e7:dd:11:03:0b:9d:
c2:01:57:fd:a4:65:e6:11:b5:97:d0:08:e7:6c:f5:
a8:83:5a:9b:df:ce:1e:6e:dc:59:f8:5c:5b:a9:fa:
14:1e:73:e5:11:8e:6f:39:6a:52:45:af:3b:5b:ba:
22:76:d5:e5:0d:87:2a:a6:51:c2:e6:5b:82:29:af:
ee:b6:80:96:65:56:6a:ce:b5:b4:33:02:7d:01:f9:
c8:07:65:a7:d2:cb:75:7d:77:1e:5d:4c:16:fc:c9:
3d:0b:b8:4b:79:91:3f:75:ee:af:9a:56:01:35:17:
20:22:70:59:b5:52:50:f0:8a:f2:c9:9f:43:1d:ea:
6a:61:fa:ca:c0:ad:82:5f:98:7f:91:5c:34:4f:94:
a3:a8:f1:6f:21:f9:13:55:09:46:f6:20:4a:82:0d:
8c:6c:97:33:f8:17:31:05:64:df:33:fa:d5:89:90:
1f:8f:e2:38:57:db:34:7f:8a:e2:6c:eb:aa:f8:73:
1e:65:70:1d:7e:1a:54:c9:27:65:ad:f3:e7:2b:2d:
33:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:76:B1:91:39:1E:FA:6B:CD:92:71:CB:EE:9B:7B:37:81:E6:AE
X509v3 Authority Key Identifier:
keyid:8C:23:84:9B:89:23:8D:95:A6:F4:C1:75:A3:46:37:FE:3F:F8:04:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7a8a09-ac13-4620-aaa1-7a11334892a3/1/jCOEm4kjjZWm9MF1o0Y3_j_4BIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:eb:d9:4e:48:85:cd:ee:50:a6:e9:97:26:36:61:6d:6c:79:
02:b7:67:52:99:25:61:53:18:84:ab:54:db:af:f6:50:23:1e:
7a:e0:a0:6d:9f:75:7c:98:73:a8:88:20:1e:c5:6e:b5:66:63:
52:41:93:a1:57:e2:2a:bd:97:52:0e:5a:b0:93:46:28:50:35:
80:33:a7:cf:4f:4d:44:00:d7:03:03:6a:fb:69:6e:b5:eb:02:
66:67:b4:0d:de:3e:a1:3d:1e:92:39:13:ff:ad:d4:27:c5:90:
a5:e0:86:93:28:d5:8c:bc:d7:97:b3:77:47:b3:b9:f6:bd:72:
f8:27:d4:6a:65:71:31:73:1c:15:05:ee:f2:35:0c:46:c2:57:
ee:32:ad:0e:24:57:3f:55:d5:d6:b7:72:18:df:c7:06:6a:87:
7d:f7:55:fd:59:c3:32:00:61:a7:c0:7a:28:87:30:8b:40:07:
57:dc:78:44:90:5d:c6:d2:29:c0:f0:b9:f1:79:46:7e:07:cf:
19:f8:dd:4b:ec:66:24:27:79:a1:04:4f:c8:54:ee:ea:59:92:
f0:0c:1d:6b:17:0c:8b:ef:09:34:a3:59:14:c7:39:b4:2d:f7:
7d:45:90:f9:7b:19:e2:8e:2b:1b:11:76:8c:41:7d:4f:3c:2d:
f1:94:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:25 2026 by rpki-client