Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: p9IKXdfPhLJaWParGofScZu6rvksyiB21VUZDpAcmjE=
Subject key identifier: C5:17:61:8D:9F:8D:8B:98:D3:4A:2B:42:AB:FF:0F:E7:C7:E4:0B:62
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019D25BAAC25DED32E773BC1936BEB51A450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 4qAkQf+uIzHbStfeJOwQRutrwjnxVR2OTFmeZRpNv4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:ac:25:de:d3:2e:77:3b:c1:93:6b:eb:51:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=c517618d9f8d8b98d34a2b42abff0fe7c7e40b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:ff:0a:a1:6b:b7:ad:90:a1:91:f0:fc:64:
c4:77:7c:db:e2:54:a2:4c:dc:ae:7c:e2:75:e4:8b:
cf:a4:f7:14:10:15:a8:ce:74:4e:5c:6f:9a:09:79:
1b:3a:e0:a0:22:99:69:04:d2:82:9b:68:82:dc:62:
72:75:29:82:d2:24:26:fb:79:c8:29:7e:72:14:f7:
c1:79:e9:6c:59:9f:ac:a3:6b:74:01:ee:9c:57:a0:
95:d6:d2:30:f7:bf:e2:1d:d2:6d:b9:8c:e3:63:1e:
3e:6e:55:a9:50:39:26:3e:27:51:0c:e6:6d:aa:9f:
de:ac:6b:42:06:86:3e:90:d2:21:f4:a9:31:71:51:
ba:ff:d0:b8:f4:58:c9:da:6a:65:76:5a:22:15:48:
22:7f:8e:e0:58:1a:ec:ec:15:c4:5f:ee:19:4b:75:
44:c4:9d:68:4d:43:8e:dc:4b:f0:de:2c:14:5d:7e:
8e:e5:33:db:53:75:61:aa:43:7e:8b:42:78:08:be:
3d:1d:b6:48:60:d2:6d:89:44:38:2d:92:4d:00:ef:
3f:b9:5b:68:31:78:d0:4e:62:9c:bb:dd:64:2f:f1:
13:05:bb:0f:e4:3d:fa:3a:37:d7:71:6b:fe:d7:32:
26:f6:50:2e:2d:a3:70:d4:3d:64:b4:dc:fc:9e:e5:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:17:61:8D:9F:8D:8B:98:D3:4A:2B:42:AB:FF:0F:E7:C7:E4:0B:62
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c4:57:27:dd:a2:74:bd:f5:95:78:20:f4:16:21:f7:51:92:
0a:ad:4a:dc:09:48:29:0a:9d:5b:05:60:6f:96:ec:e7:3d:7b:
b0:74:8d:2a:7e:99:5d:b4:cc:75:79:3a:f2:ad:fc:41:a4:db:
8c:12:6d:95:a7:27:e2:5f:ec:f4:b4:bf:14:ee:fc:21:fc:0d:
b0:22:3e:d4:bf:31:bc:b2:22:e9:c3:bb:71:b1:c2:60:46:03:
aa:69:b2:70:49:ec:12:7a:eb:0e:35:ba:73:13:c1:82:d6:89:
06:83:a2:33:a4:f8:28:df:83:b4:d0:96:90:fd:a1:f4:59:c0:
a2:f2:28:f3:6a:5c:66:5f:8d:2f:6a:02:ca:7e:da:ce:6c:ec:
95:e1:55:5a:6d:58:eb:e8:e0:56:5f:bf:29:c5:43:80:e2:6a:
11:7d:e7:de:b3:e4:0b:43:b5:e7:58:fc:7d:1c:be:42:3d:50:
97:f8:10:75:a2:bf:b7:3d:27:8f:64:4c:de:1d:33:ae:7c:d4:
23:83:12:3e:f5:cc:6c:01:b7:f9:23:e3:93:26:f1:bb:b9:4e:
8a:67:0c:98:96:0a:1f:23:af:10:8f:a5:99:dc:13:ea:35:ae:
f0:c1:38:1c:1e:93:ed:c2:46:52:5b:e2:02:b4:39:45:ab:79:
fd:75:da:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luqwl3tMudzvBk2vrUaRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk
Yzc1ZjkwHhcNMjYwMzI1MTYwMTIzWhcNMjYwMzI2MTYwMTIzWjAzMTEwLwYDVQQD
EyhjNTE3NjE4ZDlmOGQ4Yjk4ZDM0YTJiNDJhYmZmMGZlN2M3ZTQwYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6X/CqFrt62QoZHw/GTEd3zb4lSi
TNyufOJ15IvPpPcUEBWoznROXG+aCXkbOuCgIplpBNKCm2iC3GJydSmC0iQm+3nI
KX5yFPfBeelsWZ+so2t0Ae6cV6CV1tIw97/iHdJtuYzjYx4+blWpUDkmPidRDOZt
qp/erGtCBoY+kNIh9KkxcVG6/9C49FjJ2mpldloiFUgif47gWBrs7BXEX+4ZS3VE
xJ1oTUOO3Evw3iwUXX6O5TPbU3VhqkN+i0J4CL49HbZIYNJtiUQ4LZJNAO8/uVto
MXjQTmKcu91kL/ETBbsP5D36OjfXcWv+1zIm9lAuLaNw1D1ktNz8nuWqkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUXYY2fjYuY00orQqv/D+fH5AtiMB8GA1UdIwQY
MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt
NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl
LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsRXJ92i
dL31lXgg9BYh91GSCq1K3AlIKQqdWwVgb5bs5z17sHSNKn6ZXbTMdXk68q38QaTb
jBJtlacn4l/s9LS/FO78IfwNsCI+1L8xvLIi6cO7cbHCYEYDqmmycEnsEnrrDjW6
cxPBgtaJBoOiM6T4KN+DtNCWkP2h9FnAovIo82pcZl+NL2oCyn7azmzsleFVWm1Y
6+jgVl+/KcVDgOJqEX3n3rPkC0O151j8fRy+Qj1Ql/gQdaK/tz0nj2RM3h0zrnzU
I4MSPvXMbAG3+SPjkybxu7lOimcMmJYKHyOvEI+lmdwT6jWu8ME4HB6T7cJGUlvi
ArQ5Rat5/XXaLA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:28 2026 by rpki-client