Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
File: jQjCXuFjw27WtzFxYBoYNkgupe4.mft (raw, json)
Hash identifier: MSVQz2/PAqyO41ZEqAVfR5XvVnQlU3sKLTSjyaRfyig=
Subject key identifier: B6:24:05:91:67:71:4C:28:D2:48:2D:20:02:12:F5:17:B9:4E:02:91
Authority key identifier: 8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
Certificate issuer: /CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Certificate serial: 019D27047AF6BB509C04AC005DD34F971272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
Manifest number: 0BE4
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: jQjCXuFjw27WtzFxYBoYNkgupe4.crl (hash: UocwigU/D9kr9iHOWiT6hB2fP1YCBcUmqylXx1u+638=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7a:f6:bb:50:9c:04:ac:00:5d:d3:4f:97:12:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d08c25ee163c36ed6b73171601a1836482ea5ee
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=b624059167714c28d2482d200212f517b94e0291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:31:05:f0:3b:0e:2c:83:66:80:d6:5e:70:
00:f5:62:45:b3:ee:57:35:be:1b:ac:61:6e:77:c1:
bb:25:52:cd:4c:1c:f3:77:2d:12:79:0f:2b:c1:5d:
4b:14:cb:37:5d:0a:38:c1:51:bb:34:d6:b1:ea:6d:
2e:62:59:46:20:60:16:dc:00:9d:66:74:7d:0f:23:
76:71:84:04:30:01:16:37:2e:d8:64:cb:77:42:6f:
cd:ba:d7:1c:2a:54:4e:28:44:87:c0:e0:74:32:f5:
42:33:25:e2:e9:b5:f5:51:fa:47:09:63:da:94:5f:
94:9a:2d:81:95:cd:91:9e:72:b1:28:2a:46:2b:f5:
2e:28:0f:2d:7c:22:47:46:41:f1:73:a2:c8:64:8d:
cd:47:91:c8:56:aa:86:07:ec:65:33:f7:39:66:85:
fc:71:09:50:08:e1:96:3f:c5:7d:af:28:a5:a4:55:
6a:46:27:70:61:d7:7c:35:12:bd:05:24:2e:5b:bf:
b4:c5:03:38:27:d1:bc:e4:b3:01:e7:7d:87:b6:dc:
47:19:fc:db:fa:3a:a4:02:61:a5:30:bc:f7:fe:46:
c1:5e:a9:fc:e9:29:23:9f:03:d4:dc:39:3f:f0:29:
80:0a:b6:04:cb:99:a4:51:40:1a:7c:b7:fa:30:61:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:05:91:67:71:4C:28:D2:48:2D:20:02:12:F5:17:B9:4E:02:91
X509v3 Authority Key Identifier:
keyid:8D:08:C2:5E:E1:63:C3:6E:D6:B7:31:71:60:1A:18:36:48:2E:A5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQjCXuFjw27WtzFxYBoYNkgupe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/51cc20-1f81-4ee1-bd93-44d781ed62d4/1/jQjCXuFjw27WtzFxYBoYNkgupe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:2a:68:c0:f3:53:5a:59:41:27:e6:49:00:c3:5a:f9:d4:
7a:83:60:18:b4:17:15:1e:fd:07:f0:dc:1b:fb:51:b5:c9:c9:
95:ff:3d:42:c2:da:6f:54:7e:d5:88:37:61:55:68:2a:ed:a1:
74:b5:d4:02:5a:e3:d1:9f:7d:3f:27:6c:63:a1:8c:0c:3b:50:
49:5d:e7:5d:b0:27:b4:da:34:f5:ab:5c:d6:8d:b5:db:8c:1c:
a6:71:3e:13:83:a6:d3:03:39:49:f8:03:d9:89:59:21:a1:56:
59:13:a0:05:3c:2d:b8:4f:63:ce:94:8a:5c:67:6a:27:27:a8:
9a:93:b6:65:df:99:76:6e:55:fb:a3:06:d3:18:e3:68:8b:23:
34:84:4d:84:a1:06:eb:e6:35:ba:05:88:21:0e:1f:a5:9d:4b:
5f:59:d3:a5:c1:3f:bd:3a:5a:c0:55:53:c4:9f:05:53:be:be:
24:cb:af:5c:95:3a:f3:e6:91:98:4a:73:b4:81:9c:de:76:fd:
3e:da:41:39:53:5d:ce:82:61:63:4f:a5:16:c3:1d:96:94:9f:
7c:12:0f:b8:9a:06:9f:92:19:6c:45:a2:58:64:a7:cf:87:4a:
48:16:f1:4f:aa:a6:35:68:bf:bd:c7:0d:85:a7:11:e9:19:c8:
16:e5:0f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHr2u1CcBKwAXdNPlxJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMDhjMjVlZTE2M2MzNmVkNmI3MzE3MTYwMWExODM2NDgy
ZWE1ZWUwHhcNMjYwMzI1MjIwMTM4WhcNMjYwMzI2MjIwMTM4WjAzMTEwLwYDVQQD
EyhiNjI0MDU5MTY3NzE0YzI4ZDI0ODJkMjAwMjEyZjUxN2I5NGUwMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wxBfA7DiyDZoDWXnAA9WJFs+5X
Nb4brGFud8G7JVLNTBzzdy0SeQ8rwV1LFMs3XQo4wVG7NNax6m0uYllGIGAW3ACd
ZnR9DyN2cYQEMAEWNy7YZMt3Qm/NutccKlROKESHwOB0MvVCMyXi6bX1UfpHCWPa
lF+Umi2Blc2RnnKxKCpGK/UuKA8tfCJHRkHxc6LIZI3NR5HIVqqGB+xlM/c5ZoX8
cQlQCOGWP8V9ryilpFVqRidwYdd8NRK9BSQuW7+0xQM4J9G85LMB532HttxHGfzb
+jqkAmGlMLz3/kbBXqn86SkjnwPU3Dk/8CmACrYEy5mkUUAafLf6MGE50wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYkBZFncUwo0kgtIAIS9Re5TgKRMB8GA1UdIwQY
MBaAFI0Iwl7hY8Nu1rcxcWAaGDZILqXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81MWNjMjAtMWY4MS00ZWUxLWJkOTMt
NDRkNzgxZWQ2MmQ0LzEvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81MWNjMjAtMWY4MS00ZWUxLWJkOTMtNDRkNzgxZWQ2MmQ0
LzEvalFqQ1h1Rmp3MjdXdHpGeFlCb1lOa2d1cGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWsqaMDz
U1pZQSfmSQDDWvnUeoNgGLQXFR79B/DcG/tRtcnJlf89QsLab1R+1Yg3YVVoKu2h
dLXUAlrj0Z99PydsY6GMDDtQSV3nXbAntNo09atc1o2124wcpnE+E4Om0wM5SfgD
2YlZIaFWWROgBTwtuE9jzpSKXGdqJyeompO2Zd+Zdm5V+6MG0xjjaIsjNIRNhKEG
6+Y1ugWIIQ4fpZ1LX1nTpcE/vTpawFVTxJ8FU76+JMuvXJU68+aRmEpztIGc3nb9
PtpBOVNdzoJhY0+lFsMdlpSffBIPuJoGn5IZbEWiWGSnz4dKSBbxT6qmNWi/vccN
hacR6RnIFuUPcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:42 2026 by rpki-client