Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: pOv7JjqULbZg7dZYqWTy8snkqZ77OoZoJQpprf5wJbU=
Subject key identifier: 15:2B:7D:E7:06:63:69:29:5C:A0:A0:7C:FD:0B:DE:B1:7F:F6:EB:1A
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 019CACB5063C0D0C9255DEE79435C1C25DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 1030
Signing time: Mon 02 Mar 2026 04:01:10 +0000
Manifest this update: Mon 02 Mar 2026 04:01:10 +0000
Manifest next update: Tue 03 Mar 2026 04:01:10 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: Q/3N4P1TNRqdn5NcsCNjoYZwgPnguuxpe3WZT3oV4qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:06:3c:0d:0c:92:55:de:e7:94:35:c1:c2:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Mar 2 04:01:10 2026 GMT
Not After : Mar 3 04:01:10 2026 GMT
Subject: CN=152b7de7066369295ca0a07cfd0bdeb17ff6eb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:79:3f:1a:50:da:66:33:b9:19:a1:1c:3f:
f7:ae:86:6a:b6:d0:9a:87:87:cd:4a:a7:51:2b:8e:
b3:68:4b:7e:b8:39:35:8a:ee:1d:df:95:cc:ab:6f:
89:96:da:a5:2d:44:43:69:30:1d:2b:26:3a:ba:25:
b4:af:d6:ac:a3:74:ee:0b:89:3e:ed:bf:14:d3:e7:
12:fb:4f:9d:09:38:f8:d4:00:70:cf:98:83:c0:c5:
90:aa:f4:6c:f1:5d:25:55:59:81:14:a7:f8:3b:8f:
e8:69:3f:5c:14:db:f0:c5:7d:69:3b:19:58:2b:be:
ad:8f:14:a5:63:be:58:30:9a:29:d2:dc:ea:6c:e1:
f6:28:a3:4a:d7:3c:dd:66:35:4a:e6:91:57:24:52:
11:c5:b9:2e:af:7f:1e:4b:58:3c:e7:c2:c3:88:c0:
35:3a:84:df:4a:0d:d0:7a:36:c6:03:60:be:b6:d9:
ca:a9:1c:e7:c6:60:8c:ac:ae:07:df:93:44:68:9c:
73:e8:4d:2b:bf:04:dc:22:fa:a4:4b:be:2c:e1:1f:
fd:70:be:e9:ea:b2:79:29:ea:86:a1:5f:1b:e3:65:
a8:7a:6b:c4:1c:b5:14:b6:99:4b:77:49:ee:fa:e1:
45:25:4e:30:65:f6:ea:85:31:83:ce:ff:2f:d6:ba:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2B:7D:E7:06:63:69:29:5C:A0:A0:7C:FD:0B:DE:B1:7F:F6:EB:1A
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8e:45:ef:dc:52:ec:0c:61:e8:f6:1b:b0:a6:c9:24:36:78:
5a:3c:29:6d:7f:99:f3:75:c7:16:69:3c:d7:62:59:28:8b:d0:
7c:d2:2f:c8:5d:a7:a1:06:f0:c7:f7:07:b4:11:ac:be:b7:99:
d2:fe:70:bb:af:9f:c5:6a:61:88:ea:c1:b2:00:30:30:b3:bf:
54:10:40:ce:d4:42:a9:b7:92:6e:cf:38:0d:15:0f:b0:dd:e7:
fa:7f:9f:d4:16:92:17:61:09:03:6f:6d:62:f7:1f:4d:2a:79:
46:85:10:84:ab:a7:23:4b:d3:b4:ba:11:55:11:93:e5:df:e6:
ec:94:95:6d:8c:bc:53:8a:57:fb:68:e2:23:48:0c:56:45:8d:
0b:88:cb:44:b6:80:b4:b2:21:29:74:12:f3:bf:af:8a:24:d6:
0e:da:08:bb:b6:3c:4e:41:ba:e0:1d:5e:af:89:db:9a:fb:d1:
a1:34:bf:07:2d:f2:19:3d:bb:18:5e:21:d0:f7:1c:5a:09:e4:
d4:b3:f5:53:84:58:97:b0:ce:b2:a9:2c:47:c4:77:ed:ca:ca:
75:30:82:c2:83:18:9c:dc:d0:0a:fe:6b:2a:7e:d2:29:ab:a0:
82:68:ad:97:a7:80:55:b1:cc:ca:7e:1c:53:0e:17:07:e5:68:
a9:8e:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:18 2026 by rpki-client