
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
File: jynNHq0DjoW9nTMswYrDCeBiDFE.mft (raw, json)
Hash identifier: KcrAgWt+uBcn7O7KXUF9MYUPcNfcT1MD/xGCoMl6W/A=
Subject key identifier: 6C:9C:9C:34:69:B6:82:40:1A:47:F9:8D:87:78:22:AD:C5:9F:00:75
Authority key identifier: 8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
Certificate issuer: /CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Certificate serial: 019CA97C714454583EBDE1A1C85165161718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
Manifest number: 16AF
Signing time: Sun 01 Mar 2026 13:00:30 +0000
Manifest this update: Sun 01 Mar 2026 13:00:30 +0000
Manifest next update: Mon 02 Mar 2026 13:00:30 +0000
Files and hashes: 1: jynNHq0DjoW9nTMswYrDCeBiDFE.crl (hash: uxunkzQJC4m5KSjzPYDeG2tZedPokLOH0cCjRVnaJso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:71:44:54:58:3e:bd:e1:a1:c8:51:65:16:17:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f29cd1ead038e85bd9d332cc18ac309e0620c51
Validity
Not Before: Mar 1 13:00:30 2026 GMT
Not After : Mar 2 13:00:30 2026 GMT
Subject: CN=6c9c9c3469b682401a47f98d877822adc59f0075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:3c:eb:bb:ff:d3:92:76:7a:ce:5f:7d:7b:
c0:27:ba:c6:ab:ca:cd:67:07:69:6c:66:f1:28:ee:
0c:8a:5d:6f:f2:f5:6b:31:ff:52:cb:82:5d:3f:34:
0a:13:d8:d7:16:23:7f:e7:6c:88:ca:7f:bf:11:cd:
ff:dd:8a:a4:22:ba:6f:83:fc:b4:00:c8:42:3b:86:
3b:52:45:c9:b9:9a:4c:ca:31:6b:0e:97:88:31:6b:
9a:91:5a:e6:0b:42:84:46:9c:6d:9a:3a:81:69:6b:
91:c3:f2:ae:e7:40:76:b6:45:c5:b3:7c:58:9a:05:
6b:ca:6a:3a:83:b6:88:28:dd:2a:43:76:a1:96:16:
7b:93:54:2d:69:f4:2e:8f:b9:db:cf:bf:6c:16:c4:
3e:b6:c0:4d:03:10:a3:7b:e6:74:9b:d0:85:bd:ab:
01:23:5b:d5:07:89:31:16:d9:cd:3d:87:61:4c:18:
da:8e:44:ab:63:e0:19:ba:0f:e8:19:20:de:b8:48:
cf:fe:b1:c9:b3:66:a3:1c:56:70:dc:ea:5c:46:ff:
36:4e:ac:56:74:1a:d1:41:bd:64:43:3c:a5:83:50:
72:df:de:9b:f5:74:d3:8f:dd:7a:f8:56:f9:c9:9e:
2d:db:8d:08:b8:e2:ff:87:db:26:13:90:71:60:11:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:9C:34:69:B6:82:40:1A:47:F9:8D:87:78:22:AD:C5:9F:00:75
X509v3 Authority Key Identifier:
keyid:8F:29:CD:1E:AD:03:8E:85:BD:9D:33:2C:C1:8A:C3:09:E0:62:0C:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jynNHq0DjoW9nTMswYrDCeBiDFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/70b715-a4f7-48d4-9cca-6d07546f7a5a/1/jynNHq0DjoW9nTMswYrDCeBiDFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7a:80:a7:47:15:3b:85:bb:de:09:44:c2:08:59:05:ee:f5:
ee:84:da:af:83:cf:aa:1e:97:98:49:da:35:01:1c:4b:de:8c:
df:95:a4:e7:a6:2b:ee:50:3f:37:4b:7f:e7:4d:21:4a:a0:62:
fd:a8:45:cc:49:18:ed:c5:cd:71:1f:2f:a7:c5:68:4f:cd:6d:
61:5f:1e:f7:ba:e6:d2:f8:fe:a8:67:bc:7d:27:8b:bb:3e:35:
60:8b:40:0e:ac:65:0f:27:f7:23:d1:a6:12:af:d2:04:f5:88:
70:99:39:b9:fc:c3:b7:af:59:3a:b0:8a:9b:b7:4f:e6:c2:e8:
66:3d:f9:a1:77:72:e3:3a:60:91:d3:fe:2a:2a:3f:6a:5c:22:
8a:9c:cf:1b:d4:0d:12:d6:d5:66:b5:78:52:4b:51:64:4b:0f:
14:78:a3:bc:60:19:ae:e1:0b:07:9e:2b:6a:fa:81:0b:6f:c6:
bd:e3:2f:8c:19:e5:bb:ed:5d:93:6c:95:c9:2c:c9:28:c4:e7:
90:5c:ad:4a:6e:32:41:ca:0d:b0:80:a8:1e:ed:84:ac:5c:a2:
19:02:bd:6d:21:18:65:f5:9a:0e:dd:ff:61:94:5d:88:ea:ff:
33:7c:9b:22:e1:55:08:fc:b3:d7:2a:60:a0:ba:ed:c8:89:80:
85:c2:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client