Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
File: jhTxdhHOtBMYStycGa71CKhJubI.mft (raw, json)
Hash identifier: BsUcmrZcUxp9zaT6sn7X/JMVWBu40oakohcNUkHtY50=
Subject key identifier: A6:22:67:2F:1B:93:5C:F0:58:0E:8C:5F:15:FB:B2:65:52:E2:6F:24
Authority key identifier: 8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
Certificate issuer: /CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Certificate serial: 019D28F32FA76AFC86961AC4A6CFF7E89714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:01:59 +0000
Manifest this update: Thu 26 Mar 2026 07:01:59 +0000
Manifest next update: Fri 27 Mar 2026 07:01:59 +0000
Files and hashes: 1: jhTxdhHOtBMYStycGa71CKhJubI.crl (hash: MBowEs1OwhbicrZM+jnm/yDiPkLsyOImJQFylHUmSao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:2f:a7:6a:fc:86:96:1a:c4:a6:cf:f7:e8:97:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e14f17611ceb413184adc9c19aef508a849b9b2
Validity
Not Before: Mar 26 07:01:59 2026 GMT
Not After : Mar 27 07:01:59 2026 GMT
Subject: CN=a622672f1b935cf0580e8c5f15fbb26552e26f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:39:aa:81:bf:12:c9:91:e2:b3:68:98:94:
87:8b:e3:36:ad:d7:c9:e1:6b:08:7c:fd:43:7b:91:
85:37:c9:11:cc:77:fe:86:06:76:85:56:c5:80:88:
6d:89:a7:38:75:55:19:92:ea:08:49:24:04:ad:05:
54:bc:2a:33:38:d1:e2:02:1a:ca:04:5e:9e:d2:ba:
71:fc:48:54:07:e0:cb:e6:31:2b:ef:27:86:79:60:
80:a0:8b:05:98:b9:a3:19:b0:69:b0:c1:53:b7:18:
bd:c4:78:aa:ce:57:fc:a0:3e:89:12:81:b0:f5:6d:
cc:27:75:6e:7f:c5:ac:42:02:94:a4:3b:29:97:cc:
5b:29:d4:26:c5:bf:1f:e5:28:9a:c3:25:93:64:f6:
81:8a:c4:95:6c:ab:7b:d3:56:4d:13:49:fc:c3:a4:
c2:d1:41:b5:ba:8b:b5:71:8b:5f:02:12:80:e9:4c:
24:44:c3:00:72:55:73:5f:8a:eb:b8:9a:8a:6e:72:
2c:72:ee:42:92:6f:96:fb:23:f6:f9:8f:f4:4e:f2:
17:33:34:11:a5:1a:82:d7:8e:31:b1:cd:0e:05:db:
6d:2c:46:09:e9:7c:45:37:fa:2b:f4:a1:05:3d:01:
54:90:7e:63:92:eb:29:28:6f:f3:49:77:9e:e9:94:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:67:2F:1B:93:5C:F0:58:0E:8C:5F:15:FB:B2:65:52:E2:6F:24
X509v3 Authority Key Identifier:
keyid:8E:14:F1:76:11:CE:B4:13:18:4A:DC:9C:19:AE:F5:08:A8:49:B9:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhTxdhHOtBMYStycGa71CKhJubI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/81d56d-1f52-4a9b-9591-720fd3a1eef3/1/jhTxdhHOtBMYStycGa71CKhJubI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:50:d3:4b:02:6c:9f:da:95:6f:dd:ab:14:71:ac:fb:7c:
c5:af:2e:92:3e:b6:b3:d2:89:30:c4:d1:fb:c7:36:57:5d:80:
86:fb:cd:13:15:1b:59:0f:80:ac:1f:fb:c5:c6:02:66:87:93:
9a:e1:7c:83:8d:65:1d:d1:a6:13:e6:f2:cd:0b:a4:1b:23:31:
94:b9:ef:76:62:27:c1:1b:3d:aa:a7:60:fe:86:99:96:d9:2d:
59:de:3f:b0:1b:10:f3:40:3c:a2:20:51:8c:f3:f8:6f:ad:a3:
52:e3:5f:74:58:5e:ba:58:e5:42:75:49:de:74:4c:ad:ce:35:
94:a6:7c:be:9a:a1:01:7e:dd:d2:83:b3:97:e1:25:0c:9d:d3:
87:f7:93:4a:1e:94:69:e8:53:f8:b1:64:95:c0:24:b2:75:fb:
2b:5d:d3:55:0c:91:c9:18:be:9f:c9:3e:8e:25:8c:56:f8:be:
00:00:84:2d:f7:ac:00:a8:b7:f1:98:1b:15:96:80:b4:4a:96:
0e:66:a7:38:cc:94:32:50:64:3f:f4:fc:71:2f:25:b9:b4:82:
05:32:b6:f8:4c:65:c8:db:b2:82:0b:07:92:58:e2:0a:c8:f1:
31:d6:3f:22:2f:04:bc:ad:0f:82:36:47:01:0e:d2:2b:ac:46:
3a:37:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:05 2026 by rpki-client