Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: beXwQMWES36pFTS83k42lVhgQBi6BPfm/5zc1B3t+Pg=
Subject key identifier: 69:28:D5:E3:7D:80:7D:59:8A:E2:5B:DD:4B:5E:DE:C9:2D:70:85:A7
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 019D2816A10BAC98E756E81DF239798BA907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 098E
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: vhiTbiwP2rrFQPfFW69gXiduxTXdyt0bl7m45FiGlIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:a1:0b:ac:98:e7:56:e8:1d:f2:39:79:8b:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=6928d5e37d807d598ae25bdd4b5edec92d7085a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:c1:5e:17:34:91:9b:e8:90:3f:37:fe:d0:
35:fc:99:3f:ac:f8:a3:ce:45:71:de:66:e8:e3:75:
c4:52:bb:5b:97:47:74:16:24:b1:47:02:f4:cd:ff:
46:fd:59:0b:f3:1e:10:62:e5:00:91:23:8b:6f:ea:
74:31:26:1d:60:2d:93:07:4e:18:42:34:d6:89:ed:
3b:78:d9:f7:40:7b:2f:67:35:cf:10:cb:19:20:c6:
9e:d9:36:7b:1e:29:4a:92:a0:91:cf:ee:01:56:61:
0f:08:ba:f5:e1:5e:e5:45:aa:2b:07:60:11:6c:70:
25:ff:ca:69:41:f1:fe:bd:a3:ac:07:a8:30:48:ac:
6b:0d:e2:9b:55:7b:6a:79:a8:15:b4:5f:40:ed:63:
4d:6e:b2:04:ba:bf:57:1b:2d:b9:6a:97:c6:7e:d3:
b7:42:92:b3:4d:b8:7a:7b:c1:cd:e6:fd:6b:9f:78:
27:f5:bd:95:a1:84:b9:73:10:07:ac:57:c4:63:86:
a0:e0:c5:cb:e4:64:fa:5d:8b:03:8a:0c:ff:99:e8:
07:db:05:1c:00:d9:4d:cc:96:91:1d:b5:72:6d:c4:
fa:b7:99:d6:5b:c1:0b:c0:bf:31:3c:a2:65:2b:44:
15:5b:98:d8:91:c8:cd:e3:e8:55:fa:0d:a9:3a:aa:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:28:D5:E3:7D:80:7D:59:8A:E2:5B:DD:4B:5E:DE:C9:2D:70:85:A7
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3f:37:86:53:86:a5:f8:c6:58:2b:64:8c:b3:d1:b7:73:ef:
e4:4c:3e:2a:02:ea:bc:ae:98:63:6b:d1:e2:d1:ff:8b:ff:19:
8d:b5:5d:23:32:65:27:4c:2e:c0:ef:12:cb:2c:79:af:e6:37:
9a:e0:83:71:4f:46:2b:5f:2a:fe:52:4b:49:b4:d0:57:a9:ee:
20:82:08:de:de:32:f1:6e:c0:3d:12:2c:bf:d2:72:ad:1f:8e:
3c:39:cf:94:13:9c:91:9d:58:54:f3:d0:e5:c7:fe:fc:59:5a:
12:97:01:31:bf:da:c7:ef:a9:e3:e1:79:d8:57:5a:8c:18:9e:
ce:a1:69:f1:d0:09:09:1f:26:94:6f:35:ad:ce:d4:68:60:ac:
9e:bb:8d:5b:a0:03:b6:3f:18:7c:cd:35:c7:0b:1a:dd:29:c3:
c0:c5:30:66:b8:e3:24:84:8e:16:a5:c2:2d:e3:0d:3d:eb:62:
d1:48:8e:b7:16:c5:82:2d:64:4e:7f:ce:76:48:35:18:f4:fb:
fd:2e:7f:f3:0c:e8:9c:08:a9:d6:89:6f:97:6a:b7:e3:05:a9:
25:83:d9:fd:78:7b:f2:2e:41:43:cb:e6:0b:46:0d:e4:95:81:
aa:55:c6:dc:30:ba:36:eb:a3:83:d4:a1:67:22:b3:66:8f:8f:
fa:c1:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:45 2026 by rpki-client