Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier: 00x/78RUQJdoZ9OesD5fbJ4ilgSGE5bE5myHXyWLrHg=
Subject key identifier: BA:CA:3A:A2:0F:50:FB:5C:FF:2B:8D:BD:AB:66:06:58:7F:3B:C2:82
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial: 019D254C8960F643D79B815A7C8AAA72B921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number: 018C
Signing time: Wed 25 Mar 2026 14:01:05 +0000
Manifest this update: Wed 25 Mar 2026 14:01:05 +0000
Manifest next update: Thu 26 Mar 2026 14:01:05 +0000
Files and hashes: 1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: clvJluILayne+xiJ/uYfjNWO/y2xFGoPBgqBecw66H8=)
2: QzF6zdAmWlqa8MJWx9j94DfMPOM.roa (hash: GR81IrpEx4ZIKShy/solAKxjvbcjUDvmJG95WKquc+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:89:60:f6:43:d7:9b:81:5a:7c:8a:aa:72:b9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Validity
Not Before: Mar 25 14:01:05 2026 GMT
Not After : Mar 26 14:01:05 2026 GMT
Subject: CN=baca3aa20f50fb5cff2b8dbdab6606587f3bc282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:96:56:01:98:4d:59:80:c0:99:ce:f9:05:
a8:a4:70:9a:9f:d4:ca:e2:ab:d9:73:0f:17:73:81:
c2:a5:1b:93:02:f2:ba:33:eb:d1:fc:95:8b:03:bc:
69:88:cc:57:a3:6b:64:59:2c:4f:20:a2:bf:c0:f9:
e5:f0:c1:b0:61:d3:3a:42:c2:c4:7e:47:77:08:ee:
79:94:68:6e:06:d2:48:19:0c:c8:46:78:db:a3:09:
83:f5:ff:e6:a3:28:15:32:09:f2:9c:ee:86:a1:be:
43:8c:c2:a6:33:5f:3c:dd:74:34:4b:aa:d0:08:bb:
c0:28:15:81:f4:a5:28:ba:2d:61:68:65:d2:89:64:
13:e0:a7:2e:43:af:ee:3a:70:04:1d:ad:69:67:b9:
3a:a1:9d:07:e4:f5:1f:ad:99:73:5f:77:22:af:28:
af:ac:d9:8d:f7:a2:a1:a9:f3:d3:f2:1f:e3:cf:ee:
6c:57:6f:d4:92:d7:bb:cc:7f:22:1d:ad:c0:ac:fa:
44:7e:41:6b:79:d1:e1:57:1a:5f:cc:ba:e1:45:16:
ea:97:e6:e4:f4:7a:9e:04:45:1c:52:80:71:18:9e:
01:d5:e4:05:7d:4f:08:fb:79:50:c6:15:48:2b:fc:
f3:ed:c1:9d:09:c6:65:8d:b7:c5:29:d4:66:01:27:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:3A:A2:0F:50:FB:5C:FF:2B:8D:BD:AB:66:06:58:7F:3B:C2:82
X509v3 Authority Key Identifier:
keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:58:1a:d2:7c:fb:23:91:2b:42:95:16:7f:bb:2a:06:c2:
4b:df:f3:23:53:2a:79:30:c2:7c:89:ad:f7:09:32:44:95:fa:
77:ad:bb:87:7a:28:35:cd:26:1c:eb:54:bd:41:77:f4:05:9c:
11:0f:70:a1:d4:70:6a:c6:b3:15:34:3f:6e:c8:b7:4c:ad:0d:
93:7e:7e:6d:d9:c6:bf:8b:9d:e9:df:a2:cc:6c:19:e3:a1:8c:
7f:bc:99:eb:48:d0:92:a2:5f:c9:9c:50:c9:6d:13:68:18:5b:
3a:d7:6b:7f:5f:81:3a:e7:86:21:ec:1e:61:76:5a:d2:a5:6d:
58:87:53:3a:ec:5e:cc:5c:a3:9c:2d:3f:2f:3f:e2:07:dd:61:
65:c2:37:b3:f8:e9:22:02:b7:67:6c:d7:83:86:eb:76:c8:8e:
4e:2f:e0:fb:f3:14:8c:d7:bd:35:ae:0b:04:1a:75:55:53:b0:
23:e7:ab:0e:8a:39:26:b6:54:13:9a:83:e8:c0:51:9c:3c:e6:
62:41:71:d0:d9:54:ee:37:a1:95:eb:e2:f8:20:a5:1e:3f:d8:
25:dc:90:b6:ec:4b:34:97:b5:fc:aa:cc:74:69:85:2f:09:43:
73:54:98:6c:f9:b8:79:60:f3:31:b8:d3:89:12:56:8c:a9:04:
4f:ca:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:45 2026 by rpki-client