Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: koC0bMuwmEhSBJvol9f1fZRmVzav2z5NDZv3xIWnELQ=
Subject key identifier: CE:6E:57:1E:AC:96:72:78:67:AA:B0:2E:53:0F:6B:BE:71:53:8D:61
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019D2704213E74B07FB2B7A1C5D34930BB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 0830
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: 82/c9lKETDcGTwxxCfDM6DDYMKB/qIdYLlcPIe5vmFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:21:3e:74:b0:7f:b2:b7:a1:c5:d3:49:30:bb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=ce6e571eac96727867aab02e530f6bbe71538d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:c2:0e:96:8e:25:c5:8b:e6:c2:07:ab:66:
cf:c6:30:de:4e:70:a2:06:da:92:d7:e3:c8:bc:f3:
af:db:2c:0a:c3:1a:0a:81:46:0a:d3:f9:90:22:15:
db:20:46:81:36:86:05:68:74:1f:68:e6:d0:24:3c:
9e:1d:57:d6:00:58:11:c7:d8:45:b5:29:40:13:f2:
eb:42:a2:bb:e6:67:01:e3:d8:d4:29:07:81:51:80:
94:98:61:43:e0:c9:6f:25:84:80:e0:a4:fa:69:f5:
30:dd:e7:d1:ba:11:7f:31:51:4a:f8:ae:e4:df:cb:
47:af:2c:50:09:ef:f6:fe:49:45:d9:ab:a6:84:c7:
4d:9b:47:ec:cf:c7:d7:60:cd:04:ff:67:42:9e:d9:
4e:75:6f:3f:dd:1d:1e:3f:af:63:77:da:5a:8b:4c:
e4:34:80:0e:90:fd:e6:d8:e7:58:be:4a:13:62:48:
8d:ff:7d:ef:6e:15:11:24:b2:52:4b:6a:94:dd:60:
59:24:36:a1:ba:3d:c5:ae:9f:c7:2f:e3:f8:fd:dd:
88:33:a7:5c:07:24:32:94:31:e4:69:ab:9b:61:ac:
23:f2:90:94:b6:ec:20:b8:9f:08:4d:9e:58:39:06:
17:9c:31:c7:b2:9a:8c:22:2e:e8:b4:d7:09:d2:34:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:57:1E:AC:96:72:78:67:AA:B0:2E:53:0F:6B:BE:71:53:8D:61
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c2:66:a3:7f:54:2a:e5:63:6f:a0:9f:09:57:68:24:f8:11:
dd:c8:64:14:1a:6d:e6:5e:2a:8d:4c:90:61:f4:3b:3d:1e:57:
e0:fa:b6:f7:40:45:1a:6a:78:51:e2:f5:91:90:10:84:74:0d:
8e:ab:4e:71:06:93:36:22:35:99:c0:25:1c:c8:dd:42:86:49:
5f:f6:93:cb:45:34:3d:bb:8f:f9:7c:19:4d:99:a6:ff:ab:a0:
59:a2:9d:28:44:de:35:9c:de:a5:e8:e5:12:dc:00:6f:aa:83:
1a:e2:c2:71:70:c0:81:02:eb:61:9f:f1:e4:53:32:c4:86:2e:
91:b2:bb:1a:12:96:00:84:dd:3e:27:fe:e4:2a:3b:80:1a:6a:
f5:e3:ba:ad:12:31:87:1a:54:7e:02:0c:59:41:cf:47:fa:fd:
7e:fd:f7:27:3f:de:f6:73:8b:35:b7:d6:17:db:f0:bf:f5:b0:
cf:14:96:32:23:de:be:f4:82:ac:d8:36:b3:f7:da:87:9e:6a:
43:17:43:df:2a:ab:14:4d:e9:8b:12:2b:ad:59:6d:ad:c5:22:
8a:f4:a9:e5:db:68:0f:33:5f:d4:d0:3b:85:8c:c0:0c:0e:96:
83:33:60:8f:44:10:d1:12:3e:5f:e7:71:4c:ae:8b:3d:71:e5:
1e:69:1f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCE+dLB/srehxdNJMLuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzIwYzVmZjBjZGJlMmQ1MWIwOGI4ZjYwMWU0ZjBhNDQ1
NTBmMzIwHhcNMjYwMzI1MjIwMTE1WhcNMjYwMzI2MjIwMTE1WjAzMTEwLwYDVQQD
EyhjZTZlNTcxZWFjOTY3Mjc4NjdhYWIwMmU1MzBmNmJiZTcxNTM4ZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE3CDpaOJcWL5sIHq2bPxjDeTnCi
BtqS1+PIvPOv2ywKwxoKgUYK0/mQIhXbIEaBNoYFaHQfaObQJDyeHVfWAFgRx9hF
tSlAE/LrQqK75mcB49jUKQeBUYCUmGFD4MlvJYSA4KT6afUw3efRuhF/MVFK+K7k
38tHryxQCe/2/klF2aumhMdNm0fsz8fXYM0E/2dCntlOdW8/3R0eP69jd9pai0zk
NIAOkP3m2OdYvkoTYkiN/33vbhURJLJSS2qU3WBZJDahuj3Frp/HL+P4/d2IM6dc
ByQylDHkaaubYawj8pCUtuwguJ8ITZ5YOQYXnDHHspqMIi7otNcJ0jTmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5uVx6slnJ4Z6qwLlMPa75xU41hMB8GA1UdIwQY
MBaAFI0yDF/wzb4tUbCLj2AeTwpEVQ8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQt
MWI1MTNlYmQ0MzMwLzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQtMWI1MTNlYmQ0MzMw
LzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsJmo39U
KuVjb6CfCVdoJPgR3chkFBpt5l4qjUyQYfQ7PR5X4Pq290BFGmp4UeL1kZAQhHQN
jqtOcQaTNiI1mcAlHMjdQoZJX/aTy0U0PbuP+XwZTZmm/6ugWaKdKETeNZzepejl
EtwAb6qDGuLCcXDAgQLrYZ/x5FMyxIYukbK7GhKWAITdPif+5Co7gBpq9eO6rRIx
hxpUfgIMWUHPR/r9fv33Jz/e9nOLNbfWF9vwv/WwzxSWMiPevvSCrNg2s/fah55q
QxdD3yqrFE3pixIrrVltrcUiivSp5dtoDzNf1NA7hYzADA6WgzNgj0QQ0RI+X+dx
TK6LPXHlHmkfVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:47 2026 by rpki-client