
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
File: jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft (raw, json)
Hash identifier: 9fk8/Y7CMnVRUNNx+ctQJRjjBBPeMUQJ71Bj9vLorRY=
Subject key identifier: 14:1F:5F:21:8E:BC:45:E8:B2:A8:7F:C3:EC:1A:0A:09:75:AD:A6:F0
Authority key identifier: 8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
Certificate issuer: /CN=8c4378b571682d34773b463752701c9405fbed78
Certificate serial: 019CA97D9069EE16A33C584A62553D7CA14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
Manifest number: 073B
Signing time: Sun 01 Mar 2026 13:01:44 +0000
Manifest this update: Sun 01 Mar 2026 13:01:44 +0000
Manifest next update: Mon 02 Mar 2026 13:01:44 +0000
Files and hashes: 1: jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl (hash: EQ8CfJX3UcfMyj9fD0/FBdqnsbN54ltxJmOP8qymJxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:90:69:ee:16:a3:3c:58:4a:62:55:3d:7c:a1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c4378b571682d34773b463752701c9405fbed78
Validity
Not Before: Mar 1 13:01:44 2026 GMT
Not After : Mar 2 13:01:44 2026 GMT
Subject: CN=141f5f218ebc45e8b2a87fc3ec1a0a0975ada6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:8a:b4:b2:35:44:9f:fa:de:7f:17:3a:be:
a4:7d:6a:cb:77:66:86:7a:3b:ac:c5:c2:41:7a:59:
5e:64:36:52:e9:f2:78:c5:fc:1c:58:d2:28:60:88:
60:c9:51:cc:3a:3c:91:bf:dc:d9:95:61:90:63:5d:
50:57:f7:f9:c3:05:f8:06:2b:e7:a0:bf:82:44:c1:
dd:af:4f:06:eb:61:1e:e8:84:53:51:26:73:35:3c:
d9:80:5c:90:2b:d8:71:f1:8f:c0:da:32:3e:f4:21:
55:68:66:c4:43:51:ef:ba:f0:9c:ef:12:cf:c1:6d:
be:f6:c1:d4:f5:d9:f9:ee:b0:b5:47:67:1a:1c:96:
3f:65:ec:7b:1b:21:a4:ce:15:9a:fb:43:4b:11:22:
67:bf:52:c4:58:48:82:ac:b7:dd:38:31:59:8e:a7:
e8:cb:2a:95:59:6f:bb:7e:e1:e1:a8:34:60:c0:e4:
d2:40:e5:59:29:bc:e3:5e:3f:af:cb:79:47:74:a8:
f1:a2:12:fa:04:cc:99:c0:95:21:6b:46:d8:d4:83:
83:dd:46:ba:c1:0c:a9:8d:3a:b4:10:95:49:20:af:
f9:7d:cb:20:00:6c:12:1d:da:0d:db:3b:11:a7:a2:
ba:59:ce:f4:08:89:4e:0f:76:13:31:1b:cd:88:a3:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:5F:21:8E:BC:45:E8:B2:A8:7F:C3:EC:1A:0A:09:75:AD:A6:F0
X509v3 Authority Key Identifier:
keyid:8C:43:78:B5:71:68:2D:34:77:3B:46:37:52:70:1C:94:05:FB:ED:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEN4tXFoLTR3O0Y3UnAclAX77Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/76b445-3461-4f4f-9b42-74f01b2586f5/1/jEN4tXFoLTR3O0Y3UnAclAX77Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:e4:b2:14:90:14:a0:5a:2b:3c:21:4c:fe:e0:52:6c:fb:
f7:b8:ba:45:f5:4b:a3:45:9a:53:4d:57:1c:9f:c0:51:5f:09:
29:25:83:bd:de:97:42:d5:bf:ed:35:52:fc:07:a9:34:4a:d6:
90:0b:c0:cb:a7:1f:ee:c3:ea:72:38:aa:2c:eb:ba:12:2d:6c:
cb:20:f3:68:1e:e8:8c:5c:87:23:83:d5:11:9e:59:72:3c:3c:
32:54:0d:de:0a:9e:96:fd:d4:25:22:27:b8:59:69:76:17:da:
7f:c2:56:ae:bb:51:78:51:5c:2c:9d:8b:22:3f:c3:80:3a:94:
17:c7:05:ed:f3:f6:01:4f:20:d4:e9:38:53:4f:f2:b7:bb:da:
5f:cf:56:5b:e7:75:94:aa:fe:53:0e:ac:1d:fb:d7:3b:63:57:
65:bc:df:3d:97:d1:ae:1b:de:08:14:2c:34:69:b1:b6:c2:1a:
bb:3e:23:25:af:a3:cf:12:73:95:ed:1f:e4:55:55:f6:4a:74:
16:d8:13:d5:08:bf:61:ea:10:7a:3b:24:ef:89:49:a3:ed:53:
2f:df:65:f2:87:69:43:d4:1a:6c:6d:e5:0c:08:8c:17:ed:68:
54:c3:ad:a4:7c:e0:55:1a:6b:e8:17:2a:ed:2d:ec:c8:c2:ce:
cb:eb:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:28 2026 by rpki-client