Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File: jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier: RyteHwTa/zth3rICqMvPRFfGiiTnGtle9VO3yjmyiAw=
Subject key identifier: 13:8D:E9:65:A3:3B:F1:D6:8F:7D:77:1C:32:9A:78:E0:43:C6:B1:3B
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer: /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial: 019CAD90AB840105D6F05A7DFA517AF9F3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number: 137B
Signing time: Mon 02 Mar 2026 08:01:05 +0000
Manifest this update: Mon 02 Mar 2026 08:01:05 +0000
Manifest next update: Tue 03 Mar 2026 08:01:05 +0000
Files and hashes: 1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: JlNMZJTIjBR2IHaTvPZgk5KOPsh3Zm53uRWrsZnro4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:ab:84:01:05:d6:f0:5a:7d:fa:51:7a:f9:f3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Validity
Not Before: Mar 2 08:01:05 2026 GMT
Not After : Mar 3 08:01:05 2026 GMT
Subject: CN=138de965a33bf1d68f7d771c329a78e043c6b13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:d5:1c:99:32:aa:f8:b2:d4:3a:c6:88:2f:
b2:d5:cf:14:0a:e0:ef:49:db:0c:85:e8:25:8f:75:
3a:34:5c:02:da:6b:b4:cc:3c:17:f5:b4:29:e9:10:
c2:91:f1:36:4f:52:86:cb:34:41:f6:d9:08:c1:6c:
56:a1:e6:a0:ac:b5:57:01:3c:91:c0:87:5d:85:c9:
76:9a:88:5f:19:06:c0:64:d5:f8:c8:2b:22:6c:16:
58:e4:c4:20:c5:0c:c0:80:1a:73:67:ca:30:13:43:
93:7b:b6:48:16:87:28:42:36:64:50:30:32:90:6b:
4f:78:2d:d0:48:14:b2:a5:e0:ce:a5:ef:f3:31:5a:
40:3c:1e:56:a7:bc:73:19:52:2c:02:b9:82:47:cf:
f7:30:4e:2b:4a:d3:4f:ac:bf:a9:6a:57:53:70:33:
9a:cb:a6:9e:75:72:88:d4:5f:01:37:12:12:98:d4:
87:38:2f:b5:c3:db:86:29:f4:70:65:cb:80:0f:23:
09:3d:a5:42:ab:8c:de:a2:3b:2c:21:47:20:c4:c0:
50:c2:4f:82:62:05:f8:5c:1f:b5:be:41:8e:f7:7d:
88:28:d9:1b:75:51:97:77:c5:2d:7c:6b:63:59:f7:
ad:61:15:f7:de:6d:f1:ff:3b:9a:4c:68:4a:f4:41:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8D:E9:65:A3:3B:F1:D6:8F:7D:77:1C:32:9A:78:E0:43:C6:B1:3B
X509v3 Authority Key Identifier:
keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:4c:dd:f7:90:ae:86:c7:52:36:d4:d9:55:27:37:91:95:
73:02:f6:98:ed:99:5c:52:49:5c:ff:b6:2a:d9:ec:65:58:3b:
00:63:a9:d2:c0:70:72:3a:cf:33:96:b7:72:0c:50:01:08:27:
9f:72:67:c5:a8:7c:20:c3:58:6e:52:b5:8a:37:09:45:bb:d5:
15:65:02:09:41:c7:61:2d:06:64:81:18:15:c1:a0:1b:c8:17:
30:18:52:22:5d:e5:d1:75:1d:49:de:27:1d:4c:e0:88:a3:59:
53:df:6c:db:23:1e:63:11:8c:38:fc:6e:0c:00:78:1c:52:a6:
eb:d5:0f:69:1d:d1:fc:bd:37:8d:3b:70:42:43:15:ed:91:4e:
90:e5:bb:a0:a2:09:23:4b:fc:b1:78:06:7e:44:9c:bc:d3:f7:
53:ea:88:1b:78:ff:2a:40:b4:6c:8c:1f:68:cf:ce:d7:27:06:
92:a3:ee:b6:5f:61:13:43:77:5e:6f:85:59:c2:34:be:fb:f5:
97:5b:25:d6:74:4d:29:6e:f1:72:d2:59:0e:2f:ce:70:7c:96:
d4:4b:ab:7e:41:29:a6:4c:f5:f8:06:68:cd:00:7f:61:cb:7a:
b2:36:d0:54:0c:26:9d:44:9f:2d:e2:cc:16:4e:d8:95:a9:c5:
1d:f5:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:48 2026 by rpki-client