Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File: j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier: 2HxTvTXiQuDdw/mofVSbZ2KhcYYMk4Z/xliICSalsI0=
Subject key identifier: D5:B2:29:F2:69:DA:38:CD:B9:58:41:6D:F2:D8:91:48:3D:D7:54:74
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer: /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial: 019D999985EC42B44568118B27C9808C2EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number: 1114
Signing time: Fri 17 Apr 2026 04:01:08 +0000
Manifest this update: Fri 17 Apr 2026 04:01:08 +0000
Manifest next update: Sat 18 Apr 2026 04:01:08 +0000
Files and hashes: 1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: wf0xRIJzJMpV46o5B2tmsHKdV9Tl9ag+2HDuysvswEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:85:ec:42:b4:45:68:11:8b:27:c9:80:8c:2e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Validity
Not Before: Apr 17 04:01:08 2026 GMT
Not After : Apr 18 04:01:08 2026 GMT
Subject: CN=d5b229f269da38cdb958416df2d891483dd75474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:26:5c:2b:78:15:56:8e:3a:bd:9f:2c:79:
25:29:13:89:dd:d5:e2:92:01:25:49:ff:1a:1c:ab:
82:4a:5d:98:7a:66:3a:3b:a2:ad:ed:c3:39:c6:fd:
6d:77:48:59:51:3b:49:2f:12:36:32:56:25:0a:87:
4f:28:d4:0e:f7:77:74:41:78:95:21:ef:d4:38:d2:
63:86:69:12:68:15:9d:81:3c:53:57:30:3a:0f:55:
7b:e3:4c:ff:4c:88:6a:99:35:f6:85:15:2d:df:22:
b7:22:b5:60:78:8b:2f:cf:41:a1:50:19:66:51:9a:
86:9e:fd:e8:ec:9d:d4:79:cf:52:9c:cf:e1:ad:73:
88:68:d6:ed:ce:25:cb:58:2d:5e:e7:2d:d3:39:ad:
07:4d:cf:c1:81:c7:8a:92:fc:a0:31:dd:c2:94:2e:
e6:c0:6a:1e:40:04:57:ab:51:54:4f:d7:68:3b:48:
1d:6e:67:88:0e:ac:94:f9:dd:51:f9:20:c3:07:91:
3e:14:9a:67:1c:fd:d5:3a:b5:7b:50:f3:57:0a:fd:
fb:01:6e:88:10:c0:15:55:9a:bc:d6:90:f7:6e:b4:
26:d6:de:b9:24:d9:0b:2e:45:41:06:a2:76:a9:a1:
4f:9f:67:3d:c4:f5:ce:fe:b1:bb:39:93:c2:3b:2d:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:29:F2:69:DA:38:CD:B9:58:41:6D:F2:D8:91:48:3D:D7:54:74
X509v3 Authority Key Identifier:
keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5e:a6:0f:32:ab:35:ca:a8:bd:7d:93:b6:8e:16:cb:99:0f:
d6:dd:61:59:b1:b8:bc:14:26:29:14:29:59:7d:f5:2a:68:99:
36:28:8a:a6:fe:0d:f5:a3:46:e7:17:2d:b0:39:bb:49:c3:82:
ce:0b:d2:01:0e:46:63:34:a3:a8:8f:a7:02:d5:87:b7:d3:87:
bd:fa:e4:e3:84:c3:c1:75:9d:66:8b:07:0a:49:db:0d:33:98:
08:f7:6d:13:da:5a:f0:e2:9a:79:92:78:f9:05:04:3d:30:f5:
d6:45:c4:33:ce:f2:6f:09:a5:ba:6b:00:c0:f7:29:87:97:13:
96:c3:b2:1b:85:2e:dc:5b:10:ed:86:37:48:aa:0d:5f:bf:24:
75:9f:5b:2e:bb:1e:03:d0:8b:a6:ce:a4:ca:b8:d8:fc:7a:db:
eb:3a:a1:0e:36:84:a7:81:3c:d5:04:bb:e5:7a:de:6a:47:fe:
7b:0a:23:51:9e:5b:dc:04:93:cf:dd:61:67:0d:64:b2:ef:cd:
aa:7d:a9:eb:30:7c:b8:7e:71:74:4b:77:ff:e4:27:54:47:e4:
31:f1:87:9d:04:0c:1d:2f:1e:3d:6b:86:14:4e:3a:e7:79:7d:
d6:a3:90:e8:0e:b3:5b:13:13:49:6d:af:2b:7e:84:ce:b4:cc:
30:59:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:43 2026 by rpki-client