Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
File: jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft (raw, json)
Hash identifier: BCnx3OkIOcQhechnHfW3C7cPX0fX8EHyUwvTRfl77ig=
Subject key identifier: 64:2D:F3:11:2B:7A:56:65:81:74:18:D6:7D:6C:48:39:A9:BB:56:2C
Authority key identifier: 8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
Certificate issuer: /CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Certificate serial: 019CAC7E25511C417FBEBB6CC12DB0673B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
Manifest number: 1177
Signing time: Mon 02 Mar 2026 03:01:14 +0000
Manifest this update: Mon 02 Mar 2026 03:01:14 +0000
Manifest next update: Tue 03 Mar 2026 03:01:14 +0000
Files and hashes: 1: jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl (hash: w0s2kAa+ktoGggXPTIzXMocjjaLQlLrb5+4AHi663kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:25:51:1c:41:7f:be:bb:6c:c1:2d:b0:67:3b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cb076e59f49b5dcacb37518607e695b04cdbf87
Validity
Not Before: Mar 2 03:01:14 2026 GMT
Not After : Mar 3 03:01:14 2026 GMT
Subject: CN=642df3112b7a5665817418d67d6c4839a9bb562c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:91:0a:cf:50:c1:8e:c9:bc:2b:98:0c:3d:
d6:70:9a:bd:b4:12:96:d5:8b:7c:a6:1b:dc:73:c4:
bf:55:4c:d0:d8:70:b3:a8:e3:32:47:fb:c2:52:eb:
64:8c:f1:03:b9:43:33:50:e8:46:f0:27:d8:9f:62:
db:06:a2:ea:6d:4e:34:56:7b:05:22:fe:6a:5a:63:
81:66:d9:57:3c:db:19:d7:a6:3f:12:67:e4:bb:cc:
7f:1a:09:a9:28:ac:11:e3:9a:fc:5f:2f:b1:78:c7:
aa:e1:92:8d:15:f1:1e:ea:62:06:75:b5:aa:f5:91:
68:ad:ef:56:d0:e5:86:db:81:06:e9:38:ba:09:9c:
bc:a6:df:3e:3a:af:12:c6:fa:66:66:61:2a:b3:ef:
cd:a3:13:a5:c0:10:fe:bd:8a:83:3b:10:db:e1:da:
05:5a:02:46:c5:e9:73:e4:74:f4:13:7f:e8:89:cb:
cd:7b:e3:be:f1:5f:c8:9d:58:a5:c1:67:ac:a5:3a:
29:e8:12:4f:f2:0c:42:18:bd:34:23:62:da:bb:33:
71:6f:2a:e0:67:7e:a2:71:79:b7:d8:f5:94:e7:c9:
18:14:56:61:25:ea:af:fb:6f:7f:4a:ef:d7:69:38:
fa:09:4e:2a:74:fa:47:5a:a8:23:c5:78:fb:a1:bf:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2D:F3:11:2B:7A:56:65:81:74:18:D6:7D:6C:48:39:A9:BB:56:2C
X509v3 Authority Key Identifier:
keyid:8C:B0:76:E5:9F:49:B5:DC:AC:B3:75:18:60:7E:69:5B:04:CD:BF:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLB25Z9Jtdyss3UYYH5pWwTNv4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f16d10-f34e-4d3a-a20a-4c4764683907/1/jLB25Z9Jtdyss3UYYH5pWwTNv4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:99:3b:bc:03:c7:ea:92:03:0c:92:4e:65:ef:8d:1c:b6:fc:
29:6f:e7:b4:14:e5:54:d7:df:bb:dc:3a:e1:2a:60:19:d6:c9:
53:f9:aa:79:c7:a0:30:c4:9b:22:c6:35:a6:65:9d:98:52:67:
70:e8:e5:81:9a:e8:6a:db:1d:6e:88:92:43:28:6f:56:40:16:
c6:cc:0b:27:9a:40:45:96:eb:70:7c:79:69:78:7d:b9:3f:cf:
79:36:13:cf:47:8e:3f:d4:40:01:21:da:4d:44:6e:de:2d:f4:
92:56:87:31:f2:8b:db:53:6a:71:a3:43:81:92:af:21:d5:72:
73:b8:9a:07:7b:5a:f4:f5:ca:6b:f8:51:17:84:33:8f:5c:60:
06:f5:ac:8c:a4:5f:8b:3b:e8:bf:5f:5c:ef:b0:9c:1c:fc:f1:
a3:98:f2:6e:17:ae:72:09:9f:3f:69:14:97:5a:e8:f9:85:af:
0e:09:42:49:ae:9b:57:65:40:8f:51:b2:f3:ca:e5:40:44:6c:
5a:35:fc:c7:e5:b9:25:5c:ba:fe:76:47:d6:f5:ad:2a:8e:8f:
cb:24:0b:10:00:ec:a6:bf:5d:b4:a5:a3:e6:b1:cf:55:ff:fe:
d8:dc:97:10:c8:dd:28:70:ad:e8:d2:6a:de:b6:b4:65:f1:aa:
22:58:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:15 2026 by rpki-client