Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: Yt3MPcYIFEIkIh1Vy9cYR5P9gPk2jeXlglYLxzI3gEw=
Subject key identifier: 50:ED:DA:CC:38:3C:CC:0B:99:AC:B4:C2:49:B3:BC:46:FE:72:79:4C
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019CA94592ECD9EC09E1411B26DB29DF5DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 12:00:34 +0000
Manifest this update: Sun 01 Mar 2026 12:00:34 +0000
Manifest next update: Mon 02 Mar 2026 12:00:34 +0000
Files and hashes: 1: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: aik/07xCxEJqQTwPqMXwAdUeJ1Oa9dAQ8IwRsxqAgbM=)
2: p7jLTkUSRNX7xVVtIjhX0ElcSkM.roa (hash: V5+8Cu1ZSU54lkDzthadhaeHWXQzx9+t4lsqXq/ECiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:92:ec:d9:ec:09:e1:41:1b:26:db:29:df:5d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Mar 1 12:00:34 2026 GMT
Not After : Mar 2 12:00:34 2026 GMT
Subject: CN=50eddacc383ccc0b99acb4c249b3bc46fe72794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6a:40:44:ba:e8:e1:c5:5f:d3:d2:68:da:05:
2b:7c:26:bb:ca:fa:76:44:0b:3c:c5:49:36:25:64:
ce:9e:ec:13:27:64:ae:eb:9e:71:ad:bc:95:55:42:
ed:60:d0:80:8e:5b:1d:bf:5d:fb:04:ad:4d:3e:71:
9d:41:7f:ec:58:b3:a9:10:b8:74:97:b2:b8:33:19:
96:ab:c0:24:8b:50:43:c8:93:a5:b4:c4:29:db:6d:
ea:06:61:7e:ac:c3:f6:aa:f9:91:fa:db:84:6d:83:
04:75:de:f8:63:84:e3:10:8a:b4:aa:32:52:03:dc:
0a:1c:e1:33:dc:36:16:a1:c2:b5:b9:12:ce:36:f3:
bd:e9:76:5e:dc:4e:be:46:3a:e2:57:34:ef:6b:e3:
29:75:64:2c:b3:99:eb:17:80:8c:3b:7e:1b:d7:a9:
ee:ab:50:ff:54:18:35:d5:bc:bf:a9:1e:4f:a6:ad:
84:dd:cd:1b:e7:16:49:3f:d4:65:e7:3c:fe:42:94:
30:2a:97:20:f0:7e:9a:37:98:28:ba:b9:65:e7:b2:
f5:dd:e0:a3:06:f5:28:fa:fa:55:9c:94:f1:8d:0e:
21:8e:e3:a9:9a:81:a9:46:db:74:2a:c2:49:9b:c0:
b0:48:7d:73:d9:d5:63:08:b6:25:29:58:66:3e:3a:
4f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:ED:DA:CC:38:3C:CC:0B:99:AC:B4:C2:49:B3:BC:46:FE:72:79:4C
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:70:89:29:20:67:69:90:c1:cf:81:e1:c9:3f:46:e8:3a:e0:
48:7f:d2:95:c3:2d:96:4c:c8:dd:3c:bb:de:57:e6:5d:53:60:
2e:ad:8b:78:66:93:60:c1:32:3d:8e:9a:d3:59:90:24:b9:6a:
c1:a9:28:bf:17:d2:01:73:b5:a3:e9:b8:f8:9f:9c:42:d7:6e:
38:33:41:2b:80:df:a0:cd:8b:19:a0:f8:ee:f4:3a:77:75:48:
a7:d6:e8:ff:df:bd:3a:4a:91:1d:ff:3c:cd:71:d6:04:d2:b5:
59:4f:68:68:17:d8:72:a2:35:d2:3b:b9:8d:f1:ea:04:11:e8:
13:f3:ed:c4:d9:46:98:bd:30:66:5e:ce:1f:86:19:66:de:ff:
a2:0b:a1:a1:6b:ec:67:2f:c7:35:a0:bf:6a:d8:da:f8:0e:99:
2c:d8:15:9c:ed:5b:d5:c2:08:2d:f8:b4:cf:88:50:05:84:a8:
a8:ff:70:e4:d7:41:00:4d:92:7a:57:d6:97:4e:2b:d0:36:0e:
4d:6d:a0:d2:cf:2b:c4:d3:e4:f3:f7:89:b2:9e:8f:0e:d8:d4:
0e:94:d0:4c:36:99:39:ba:89:52:11:21:5d:23:14:e1:73:f7:
1b:08:a8:f7:f7:c8:6c:9c:31:9d:ea:1c:c6:87:31:6c:b3:ce:
e9:75:d7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:40 2026 by rpki-client