Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File: jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier: 09Iv6N3xlaVhtmTJz5WytDMLyl6SRO8zhHm7ZOKH8Js=
Subject key identifier: A6:B7:8F:F4:A2:8D:16:D0:32:34:AE:7C:D7:A3:D9:6D:4E:42:FE:BD
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer: /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial: 019CAD22F275C880993A7D2B3FE2F31CFE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number: 0B27
Signing time: Mon 02 Mar 2026 06:01:14 +0000
Manifest this update: Mon 02 Mar 2026 06:01:14 +0000
Manifest next update: Tue 03 Mar 2026 06:01:14 +0000
Files and hashes: 1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: RXHlR7x2okJMJmvJ5ktjBxpwbRmkaWHh0ISg2Jouaf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:f2:75:c8:80:99:3a:7d:2b:3f:e2:f3:1c:fe:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Validity
Not Before: Mar 2 06:01:14 2026 GMT
Not After : Mar 3 06:01:14 2026 GMT
Subject: CN=a6b78ff4a28d16d03234ae7cd7a3d96d4e42febd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:ea:ab:f8:b7:55:23:11:ff:ce:39:64:d0:
55:ca:c3:82:bf:b6:74:73:8c:96:24:e8:0d:bf:b0:
9a:4e:59:be:bc:6e:5f:56:cf:0a:24:0e:8e:af:33:
48:c6:ed:d6:0d:2d:15:04:4c:bb:88:a1:39:62:38:
ff:a0:ad:ec:d3:67:76:5a:47:3a:58:78:86:64:90:
2f:d8:87:36:29:2d:ed:f9:e3:5b:0c:33:3a:1e:3c:
12:76:ff:22:6e:96:f1:ac:33:ec:e1:5e:e4:18:d7:
bd:4e:38:ad:c0:01:d2:f1:b3:0f:2d:c0:07:cb:8d:
43:6a:5b:fe:91:b0:62:e6:e4:93:ed:6a:f8:cf:35:
12:67:35:4f:21:d9:5f:0b:16:b1:69:41:bf:63:3c:
eb:1b:d3:41:55:54:5c:87:f1:59:d6:f5:7c:be:74:
07:57:bd:47:65:23:6a:6a:59:ea:2c:39:53:bf:b3:
b9:4d:a1:b4:5a:e7:7c:9c:ce:ef:0d:1a:ce:fd:2b:
c6:ac:e5:9d:f4:c0:14:f2:9f:ae:29:0b:2b:4d:0b:
f2:82:55:97:98:c2:e9:4a:52:fd:89:69:05:83:44:
92:a1:64:40:4f:6b:80:0e:60:2c:15:1c:78:c7:2b:
64:b9:bc:f7:c4:85:d3:5b:93:45:74:0b:d2:9d:be:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B7:8F:F4:A2:8D:16:D0:32:34:AE:7C:D7:A3:D9:6D:4E:42:FE:BD
X509v3 Authority Key Identifier:
keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d0:72:07:2a:6b:29:a4:bb:fe:be:e9:3d:df:89:68:c6:fe:
12:20:fe:35:66:c1:19:20:81:0d:9f:36:07:d4:8a:7a:58:1e:
65:52:55:ea:11:13:b7:17:80:74:44:cd:75:88:c2:7e:a6:71:
11:0a:80:30:2e:a5:e1:66:5f:80:fe:fa:96:f0:e7:a6:b2:61:
47:45:95:b0:12:66:18:08:c0:31:f4:6c:8d:a6:61:d4:92:9c:
19:c7:c2:2f:51:c9:c8:a3:cf:d7:aa:a4:09:aa:1d:9e:25:14:
ac:0a:68:26:b6:e0:32:81:a2:c3:58:c8:a9:74:be:c6:71:7e:
4b:25:7f:c9:3b:87:7f:04:17:0f:b8:ee:04:60:5e:49:41:b9:
02:52:f1:29:8d:92:30:1d:e8:2e:9b:51:8c:90:d3:c7:19:89:
d7:dd:e1:ab:4c:8a:4c:35:e0:92:47:ca:b4:ab:b0:b5:65:6e:
94:f0:28:6a:5e:dc:85:e4:c9:59:20:85:d5:e8:2f:b6:1a:17:
30:73:07:b8:21:2e:0b:9d:e6:2b:33:63:75:f3:fc:c6:54:f9:
2f:23:31:34:ca:f8:25:9b:e4:14:6d:1a:d9:7d:43:78:1f:b2:
3d:17:85:e7:39:09:f5:4a:7c:d8:17:60:e8:da:f7:3c:9e:04:
b6:30:c6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIvJ1yICZOn0rP+LzHP5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWVjM2Q1YTQ4NjhlMzUzMTIyNjJhN2M2YWE5MTQ0MzU4
OTNjZDgwHhcNMjYwMzAyMDYwMTE0WhcNMjYwMzAzMDYwMTE0WjAzMTEwLwYDVQQD
EyhhNmI3OGZmNGEyOGQxNmQwMzIzNGFlN2NkN2EzZDk2ZDRlNDJmZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuLqq/i3VSMR/845ZNBVysOCv7Z0
c4yWJOgNv7CaTlm+vG5fVs8KJA6OrzNIxu3WDS0VBEy7iKE5Yjj/oK3s02d2Wkc6
WHiGZJAv2Ic2KS3t+eNbDDM6HjwSdv8ibpbxrDPs4V7kGNe9TjitwAHS8bMPLcAH
y41Dalv+kbBi5uST7Wr4zzUSZzVPIdlfCxaxaUG/YzzrG9NBVVRch/FZ1vV8vnQH
V71HZSNqalnqLDlTv7O5TaG0Wud8nM7vDRrO/SvGrOWd9MAU8p+uKQsrTQvyglWX
mMLpSlL9iWkFg0SSoWRAT2uADmAsFRx4xytkubz3xIXTW5NFdAvSnb6JLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKa3j/SijRbQMjSufNej2W1OQv69MB8GA1UdIwQY
MBaAFI1ew9Wkho41MSJip8aqkUQ1iTzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTkt
OWFmN2NiMzg2ZjgwLzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xNTI2NWMtYmY3OS00Y2UxLTk0OTktOWFmN2NiMzg2Zjgw
LzEvalY3RDFhU0dqalV4SW1LbnhxcVJSRFdKUE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdByBypr
KaS7/r7pPd+JaMb+EiD+NWbBGSCBDZ82B9SKelgeZVJV6hETtxeAdETNdYjCfqZx
EQqAMC6l4WZfgP76lvDnprJhR0WVsBJmGAjAMfRsjaZh1JKcGcfCL1HJyKPP16qk
CaodniUUrApoJrbgMoGiw1jIqXS+xnF+SyV/yTuHfwQXD7juBGBeSUG5AlLxKY2S
MB3oLptRjJDTxxmJ193hq0yKTDXgkkfKtKuwtWVulPAoal7cheTJWSCF1egvthoX
MHMHuCEuC53mKzNjdfP8xlT5LyMxNMr4JZvkFG0a2X1DeB+yPReF5zkJ9Up82Bdg
6Nr3PJ4EtjDGwA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:11 2026 by rpki-client