Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: pTfPL4YxkEtvwihMp3A5TXRgVjIzqZTt+/Z2QJmrI6A=
Subject key identifier: 22:75:5F:C0:D1:FB:38:6F:34:C6:FD:27:A0:39:E7:75:E5:2B:A6:EB
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019D277289FFBB9C24F48756A191A9DC61AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: LVv2oKTxAPvj3i8jjcZ1FzDGJKGSndGJW59NoyyasPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:89:ff:bb:9c:24:f4:87:56:a1:91:a9:dc:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=22755fc0d1fb386f34c6fd27a039e775e52ba6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:85:db:3e:1f:74:be:89:1c:05:68:7e:09:
e2:32:84:75:2c:54:ac:d0:98:ac:6c:8e:48:ca:86:
e6:7d:2d:75:a7:e7:72:dc:5d:98:6c:e6:4c:9d:14:
b4:00:7c:06:bc:d8:0a:af:32:ab:4d:83:ab:7a:58:
53:47:c3:ae:af:01:fd:9b:ea:d2:8c:5c:89:e9:47:
8e:d8:2f:bc:d8:b2:35:c0:89:3e:36:19:23:07:d9:
28:51:82:51:55:e2:f6:70:9d:a9:86:e8:ad:a4:57:
b1:8c:5a:43:ca:de:59:37:2c:d6:cd:39:0e:09:15:
d4:e4:e7:96:26:05:2b:a6:d0:a3:14:fa:9c:a0:66:
02:7f:73:18:62:ed:4f:2f:bb:02:52:a3:a3:71:aa:
62:18:64:87:b3:1d:a2:3d:e6:67:3a:9f:2f:98:54:
1f:26:a1:b4:e6:d0:ff:51:e6:6a:77:54:a9:3f:ca:
1b:b8:38:f8:24:d1:8f:ae:ab:4c:50:da:e7:8a:77:
68:1e:f9:09:7f:3a:74:5f:e1:96:25:92:dc:95:10:
40:03:ea:1a:55:05:32:69:af:41:d0:e9:3e:88:0b:
28:f0:cf:53:0c:72:b6:95:6c:15:fd:66:f3:7c:db:
05:e6:e4:2d:ae:99:46:6d:19:d6:44:ee:10:6c:d0:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:75:5F:C0:D1:FB:38:6F:34:C6:FD:27:A0:39:E7:75:E5:2B:A6:EB
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:55:69:b4:70:6b:c4:3b:27:a2:7f:cb:6c:a7:c1:f0:c6:70:
34:67:e2:a9:a6:08:4c:8f:93:d2:dd:28:c2:e6:b0:f1:0b:f2:
9e:dd:0a:22:1d:e9:b3:3d:fb:e5:fe:36:c5:f2:d4:4a:8f:c0:
94:99:bb:b4:57:22:1a:01:17:c1:74:61:81:11:f2:f8:1c:5a:
0c:ec:ce:b1:2e:4a:ee:fd:f0:b9:2c:eb:8a:94:d9:cd:05:04:
3d:07:c7:70:4a:71:b8:88:41:3e:68:a2:9a:61:6e:fe:54:cd:
92:62:35:b8:d4:f0:b8:5e:b7:21:c2:ad:ba:4b:67:77:7f:4a:
15:03:1d:a0:4b:b4:d0:6c:65:be:30:29:23:c7:92:70:0c:d5:
0b:66:2a:fb:c1:ca:a9:d2:a6:f8:db:4e:33:61:c5:56:ab:22:
fc:89:64:70:9b:7f:86:f5:8a:2c:46:83:3f:43:ca:7f:4c:3f:
6a:44:c4:b9:0d:37:4a:75:b6:ce:97:7b:8f:d9:70:96:6e:c9:
80:e6:9d:19:95:8b:1c:4b:d4:01:be:fe:bd:c2:1c:de:55:5f:
00:ba:b5:4a:d0:a2:c4:c0:22:0f:a5:73:00:3e:44:5e:4a:4b:
99:cc:6c:94:77:19:75:e0:42:78:78:c5:0c:10:08:c8:3d:a4:
df:99:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:26 2026 by rpki-client