Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
File: JxpAOL3rGJJC8o-dhcQOxNfTIes.mft (raw, json)
Hash identifier: leCDLSNZ4PgpY9sNsVcp1xha8YJkPEJ5LyMWqFs2NDE=
Subject key identifier: ED:CA:7D:9A:D6:DC:F1:03:B3:0D:24:A9:1E:23:AA:EF:41:0E:D8:6B
Authority key identifier: 27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
Certificate issuer: /CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Certificate serial: 019D27DFBD444055C344392962C079866485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
Manifest number: 09F0
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: JxpAOL3rGJJC8o-dhcQOxNfTIes.crl (hash: L+ftsfkMrqbHn7H7eDVPtxlhZ0xOaxPJ9kbslnfJxA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bd:44:40:55:c3:44:39:29:62:c0:79:86:64:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271a4038bdeb189242f28f9d85c40ec4d7d321eb
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=edca7d9ad6dcf103b30d24a91e23aaef410ed86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:68:45:6a:1c:7d:c5:bc:3e:77:07:45:f0:26:
38:f1:68:22:77:92:20:07:53:76:c3:33:3f:df:8c:
58:4f:10:4d:ca:8c:22:31:61:c7:87:16:fe:c5:10:
46:ca:44:7b:e7:53:cf:ed:4e:54:71:d2:c1:64:6d:
4a:3e:ae:d2:4a:c1:5e:ad:a6:36:a3:62:65:c0:11:
86:6e:9e:5d:10:eb:26:e8:ba:5e:37:70:9e:73:b8:
35:8d:ea:2d:ac:f1:63:60:a1:e7:3e:2a:d3:95:c4:
d6:1c:d1:89:a7:07:1a:5a:db:f9:3f:e9:02:c7:5b:
02:90:b8:e6:a5:dc:fb:58:a8:d0:f5:61:cd:bd:56:
28:57:6a:4b:f3:b8:76:fa:40:71:a3:c2:f4:31:84:
43:d9:dd:e3:d1:4a:94:e0:de:32:53:d9:b9:28:51:
83:87:cd:ec:c6:60:59:19:84:b2:05:49:f6:17:8e:
36:17:c0:15:7f:8d:43:0e:ed:67:22:cf:cc:7a:42:
be:3d:e1:4e:ca:b1:38:02:3e:20:42:d3:08:51:1f:
04:3c:c6:47:e0:de:b1:65:ec:dd:7e:f0:43:09:a8:
8b:6c:94:f2:c0:84:3c:90:a3:26:ed:2e:69:65:c8:
18:78:0a:6f:01:f3:1c:e9:d5:57:08:8a:25:af:a9:
4a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:7D:9A:D6:DC:F1:03:B3:0D:24:A9:1E:23:AA:EF:41:0E:D8:6B
X509v3 Authority Key Identifier:
keyid:27:1A:40:38:BD:EB:18:92:42:F2:8F:9D:85:C4:0E:C4:D7:D3:21:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxpAOL3rGJJC8o-dhcQOxNfTIes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6ff1e7-a84d-4221-aac7-8862c7429425/1/JxpAOL3rGJJC8o-dhcQOxNfTIes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:88:ae:66:d8:e4:23:b9:ae:59:19:eb:11:d1:1c:dd:9d:1d:
74:48:22:a3:71:9b:3a:03:14:dd:3f:b1:d3:ce:94:90:57:20:
6d:5d:06:5f:34:e2:ef:fd:c9:02:7c:b9:5a:7f:dc:50:f0:a6:
b4:14:be:54:98:47:b2:3b:35:49:ef:d3:57:fd:ec:25:17:f8:
83:1f:ea:da:c7:60:99:34:d1:d0:4d:62:14:b8:af:73:a0:f7:
43:ab:23:9f:7b:8c:6a:d4:15:b9:8c:4c:0e:2f:54:ca:f1:d1:
58:eb:d1:fa:8b:3c:47:29:93:69:9f:59:58:78:f3:5c:ec:90:
76:02:07:18:49:85:ed:19:f4:0c:b6:ed:34:7d:e7:14:e1:2f:
d8:2e:3a:68:bd:57:6d:08:dc:81:1c:b6:ff:22:3d:24:68:6b:
0b:ff:1e:7b:1b:27:f3:85:ad:e7:8d:a4:cf:5f:f4:66:81:0b:
c2:07:df:a0:be:ab:75:5e:14:6a:5c:db:a6:c7:14:5d:24:5b:
cd:cc:cb:91:a9:53:4a:1b:4d:e2:35:2d:de:b5:c2:f0:77:7b:
25:eb:91:28:b1:8b:68:cc:d4:44:fe:b4:f1:d4:07:4f:01:c1:
91:98:ac:ad:04:1b:74:54:7b:dd:a0:ee:7d:63:74:d9:b4:50:
13:d4:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:39 2026 by rpki-client