Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: lJfhRGE4Acu6t+G27AU9XGst6YBvbu00FhuU+6EwZ6U=
Subject key identifier: 19:64:F0:E6:8D:E8:AB:A5:62:DC:67:8B:A5:8A:42:1A:36:49:6C:B1
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019D265FB6C47B8AD3AC54E8D43A3FF88959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 11B7
Signing time: Wed 25 Mar 2026 19:01:40 +0000
Manifest this update: Wed 25 Mar 2026 19:01:40 +0000
Manifest next update: Thu 26 Mar 2026 19:01:40 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: QWrgxZoEQQUIL9Pcqx/Cy0mE6eVl8Q3SibM7DN6b4g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b6:c4:7b:8a:d3:ac:54:e8:d4:3a:3f:f8:89:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Mar 25 19:01:40 2026 GMT
Not After : Mar 26 19:01:40 2026 GMT
Subject: CN=1964f0e68de8aba562dc678ba58a421a36496cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:ef:51:07:a2:c4:d6:38:fe:b8:31:f7:ab:
6c:58:68:30:db:49:a0:c5:05:b5:38:a8:fc:85:78:
50:08:49:f5:dc:07:51:96:99:d2:28:20:ec:bc:7f:
9c:5c:7e:d3:a3:d1:b4:6a:2a:48:ce:3d:02:a0:45:
60:ab:20:b5:08:68:ea:b5:7a:47:f9:9e:9c:fb:50:
7f:11:85:5e:29:b1:fa:ef:a3:99:b2:59:5d:eb:de:
d2:e7:f8:85:85:ca:63:28:24:c8:b5:dd:72:be:71:
fb:2d:9f:af:82:1e:62:34:7b:be:c6:e6:ec:09:21:
0f:91:da:24:45:74:b5:a9:27:d3:65:df:bb:cb:16:
6e:49:97:ac:92:35:43:fc:b9:49:87:b6:59:c0:61:
42:df:66:d3:5c:01:c6:da:73:22:40:26:f0:0e:d1:
88:d8:87:49:9a:d7:b3:cf:f5:8b:3f:5c:62:1d:a7:
59:29:fa:ee:51:59:4c:ab:5f:65:12:f1:3e:97:2e:
85:53:80:99:90:c3:56:65:6b:57:0b:4c:32:12:c3:
15:81:7d:02:5e:bf:13:66:72:f7:87:39:30:3c:ce:
58:2d:4c:30:8e:1f:92:50:ae:81:97:e3:b4:c7:d1:
21:9b:94:e7:dc:63:37:c1:a0:f4:23:de:14:83:1e:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:F0:E6:8D:E8:AB:A5:62:DC:67:8B:A5:8A:42:1A:36:49:6C:B1
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:9e:3b:3d:6b:d9:c6:77:90:b3:fd:05:ce:40:bb:44:b6:
4c:0c:01:0b:53:77:18:18:b6:46:61:0c:92:59:cb:e2:89:ea:
d1:10:73:cc:59:c7:63:ff:88:64:8b:aa:96:27:2a:d0:1e:5e:
5e:e9:61:ab:43:54:11:a2:ed:58:d0:6c:3c:99:a8:6e:bb:17:
e0:8b:0b:2a:66:c5:64:a9:7d:e7:9d:df:07:51:d6:86:62:0b:
44:48:41:6e:7e:3d:a8:38:4f:c0:ee:f9:08:1f:80:19:2d:92:
6c:0b:a9:c0:2b:b6:e6:c6:8a:f8:38:3b:bd:88:0b:fc:86:3c:
9c:36:5f:ea:7e:8b:2c:7d:eb:e5:30:b4:72:b4:4d:cf:28:00:
01:91:e0:fc:76:16:0f:2d:30:06:af:4d:e4:70:d9:56:7f:2d:
f1:d8:77:47:22:c6:2f:56:f2:12:55:b2:2e:17:1d:57:cb:ef:
36:6e:ce:d2:74:1e:4b:f6:db:6b:29:c3:cf:e8:ec:1b:b6:51:
cf:ee:d2:cc:4e:b9:5f:a7:e5:6a:39:f8:01:f9:19:9b:9f:70:
7a:f1:bf:b0:5b:f5:27:0e:e6:a6:17:1d:73:81:4e:ba:fd:56:
ad:3c:41:6c:e4:bb:42:84:18:79:a4:50:61:70:d5:65:a8:f5:
3d:0d:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:29 2026 by rpki-client