Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: 3J/8+JVD0APBNa6YdaRf/U4Vk7dGf9xw+3MSYx1Mjho=
Subject key identifier: 50:61:1B:16:13:D0:EB:BB:03:7C:83:C2:98:04:AD:77:1D:A1:F9:FA
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 019CAD223E9940F2EAA0074E2AA6D67A2399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 11D3
Signing time: Mon 02 Mar 2026 06:00:28 +0000
Manifest this update: Mon 02 Mar 2026 06:00:28 +0000
Manifest next update: Tue 03 Mar 2026 06:00:28 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: VYcMY4AmI+9yFE8Iogoy74/B7KMEn4EZ5nSa9o0SrwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:3e:99:40:f2:ea:a0:07:4e:2a:a6:d6:7a:23:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Mar 2 06:00:28 2026 GMT
Not After : Mar 3 06:00:28 2026 GMT
Subject: CN=50611b1613d0ebbb037c83c29804ad771da1f9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:d2:73:95:aa:b5:2a:ac:7e:22:d9:2b:0a:
89:0a:11:11:fd:78:e4:b7:47:77:0b:bd:b6:23:7a:
c0:bf:ea:f7:1c:41:9b:d0:39:57:7e:f8:d5:74:ca:
c6:cf:0d:0d:93:62:b9:c7:2a:a4:0d:b3:9d:57:9c:
66:33:df:ba:ab:00:e7:07:a1:46:73:14:c0:bb:39:
b2:1d:bd:56:79:d1:d6:ed:53:09:e7:d4:d9:cf:06:
2c:6d:a3:fc:f1:4d:17:8f:2b:d2:ab:4b:9d:da:1e:
4d:0d:0e:0c:ce:30:1e:94:4b:cf:d8:7c:8e:65:02:
fb:d0:90:83:eb:e0:f9:70:cd:88:3c:80:26:54:c8:
40:77:c9:90:16:01:65:f2:3e:6e:05:f2:dc:26:5f:
2c:6c:15:57:13:6d:f0:51:3e:5b:ef:5f:13:d7:c6:
0e:9a:89:52:74:b9:0a:eb:a4:b0:35:46:d2:dc:a0:
a4:37:c1:7f:04:24:cc:ff:66:27:a0:80:63:7c:d0:
c4:af:ec:53:a4:8c:6a:f8:1d:43:15:73:77:eb:20:
98:8e:1e:46:00:78:52:73:df:25:5c:6c:00:90:50:
cc:a7:b3:dd:32:3f:e4:90:c8:27:ee:43:81:4c:c0:
76:c9:e0:f0:83:93:48:d1:11:01:20:8d:16:48:1d:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:1B:16:13:D0:EB:BB:03:7C:83:C2:98:04:AD:77:1D:A1:F9:FA
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:11:ee:2b:27:ca:dd:ee:ee:d0:24:43:ff:88:ea:b0:bf:36:
6d:54:9f:18:46:58:3b:2c:72:4d:73:38:d8:a2:bb:b1:b6:a2:
07:3e:e4:af:a1:c5:e7:56:92:45:3e:38:45:84:44:96:19:9c:
36:0e:75:54:19:f5:ce:90:a6:37:a2:26:e3:09:58:71:d8:c3:
f7:ee:97:bb:fc:6b:70:ee:be:57:e0:ef:e8:fd:5a:0e:c6:ab:
f1:e2:7e:7c:8e:e0:21:ba:d8:0a:97:2f:11:a4:19:ce:03:c9:
e7:4a:bb:8a:d2:b1:cd:4a:3c:9a:70:d8:6d:8f:9c:89:b7:40:
9d:8b:9f:2b:ae:95:95:24:20:f5:eb:99:85:e0:28:aa:cf:de:
5b:9f:7d:0a:5f:0a:1b:8d:11:e0:fc:8b:bc:25:0e:49:fe:50:
51:9f:e0:db:4e:e7:dc:4b:2d:6e:61:f5:44:73:b4:e9:6a:bf:
0a:61:c9:c2:d8:bd:04:c5:e5:e4:6a:43:6a:9f:54:79:be:8b:
25:10:30:42:8f:21:bc:d9:dc:ac:0a:4e:5e:83:86:4b:08:97:
a9:af:c9:c9:4e:4b:c3:e2:ff:01:0f:65:2e:da:f3:2d:c3:8f:
ff:95:1e:d0:ae:ba:22:6a:77:6c:15:91:c2:04:f8:a6:d0:3e:
57:ba:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:08 2026 by rpki-client