Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File: jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier: 90UJ4mesqWs7pYQZeliR33xXJAoYyGDULrNlk8AASeI=
Subject key identifier: 7B:6B:25:43:05:20:7C:4B:0A:69:A3:58:24:7E:47:80:F2:51:5F:C1
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer: /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial: 019D254CA6EF5BA7DB7A5C70D296700A93F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number: 1126
Signing time: Wed 25 Mar 2026 14:01:13 +0000
Manifest this update: Wed 25 Mar 2026 14:01:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: TYOZS6000A6IM1f4GzE1j13lr3beszbG5CQYCOvBOkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a6:ef:5b:a7:db:7a:5c:70:d2:96:70:0a:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Validity
Not Before: Mar 25 14:01:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=7b6b254305207c4b0a69a358247e4780f2515fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:34:5b:8b:14:e9:38:2b:d7:c8:28:4f:6d:
c3:8a:35:45:81:59:ab:e7:3b:30:61:1b:9c:e2:b0:
58:30:0b:fc:5e:94:51:6b:1a:42:82:06:62:a4:d2:
0a:23:82:4b:3a:5f:85:f7:c5:d5:95:63:da:5d:9d:
26:06:6b:27:cd:b8:0a:b2:86:61:10:a3:04:aa:c1:
d2:b5:0f:42:4f:12:81:b5:8f:f3:76:d3:a4:af:91:
ff:98:7a:17:c9:23:40:f9:64:7c:ab:c9:76:2b:e1:
58:3b:30:45:9a:9b:f5:b0:91:46:02:82:44:ee:a9:
a3:e7:1a:0b:3a:8b:5f:df:35:bb:fd:3f:24:5a:93:
e8:e9:b8:b0:d2:5a:e1:7b:b3:e3:34:9b:04:14:42:
11:a5:c6:74:e6:a7:ad:8d:92:69:80:f4:c2:57:58:
7d:0b:85:6b:73:9b:cc:77:6b:f5:42:77:31:d8:a8:
f5:51:bf:da:9e:99:4e:34:b9:48:89:ba:51:11:6e:
96:f6:28:30:df:83:e1:4b:06:31:56:a4:5e:6f:c6:
22:14:0c:12:15:69:f4:ab:ae:93:1e:89:9a:26:e0:
78:e8:51:63:d4:1b:59:df:77:5c:6a:b2:2b:d2:26:
b2:2d:63:cc:40:9a:db:92:5e:76:86:7c:4f:9b:ae:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:6B:25:43:05:20:7C:4B:0A:69:A3:58:24:7E:47:80:F2:51:5F:C1
X509v3 Authority Key Identifier:
keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:76:9c:08:89:b7:5d:02:79:32:d7:33:10:9b:62:b7:81:f7:
f8:76:9f:a3:b0:0f:1f:99:13:d8:83:7c:ce:6a:8b:e5:f4:c5:
a2:e7:3f:a6:54:91:95:80:63:62:2c:99:75:e6:69:68:89:98:
3f:24:65:e1:cf:03:c9:9c:0e:99:2f:52:d6:78:35:5b:fa:6e:
cb:95:fb:64:a3:df:b2:71:b7:31:05:57:e9:f2:d2:77:cd:da:
cc:22:cf:02:ae:af:91:1d:a7:b6:04:f5:02:ca:ae:e9:7e:04:
2e:82:98:b6:cf:78:1c:21:b9:78:17:c2:99:87:39:b3:5c:dc:
f4:75:74:d4:dc:f8:54:e7:47:d7:97:fe:79:21:40:ec:e2:c2:
40:94:26:9f:c8:92:34:26:f1:56:93:2f:f6:04:4a:7f:40:31:
a5:a5:d6:ec:f2:62:28:3c:2f:d0:ff:a6:04:bd:65:86:53:3c:
e1:9d:81:6a:07:b6:99:d8:72:91:16:c6:1c:98:a5:7f:5f:14:
53:13:ba:9f:e3:5e:a0:79:39:e8:be:7c:6c:ac:65:83:9d:c4:
fa:ab:d1:7e:a7:6f:c9:a9:b6:ff:7d:19:4e:bc:ba:77:78:95:
53:2b:28:d4:78:85:03:e3:1e:0c:81:51:12:a6:9d:26:c1:55:
ab:c8:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:59 2026 by rpki-client