Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
File: jR3ulkqib4m9ECJ21GVjP7guqig.mft (raw, json)
Hash identifier: i+Hw11fQt3iXYpYqCjw6O6ilWPHTDd8MM0MF1Lyw+6Q=
Subject key identifier: 21:4F:00:21:94:9E:B9:50:73:DF:37:75:2E:92:6C:30:E9:AB:D3:0B
Authority key identifier: 8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
Certificate issuer: /CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Certificate serial: 019D9B873CEC452BCEB9E2250344599A75B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
Manifest number: 0D22
Signing time: Fri 17 Apr 2026 13:00:24 +0000
Manifest this update: Fri 17 Apr 2026 13:00:24 +0000
Manifest next update: Sat 18 Apr 2026 13:00:24 +0000
Files and hashes: 1: jR3ulkqib4m9ECJ21GVjP7guqig.crl (hash: YumhzB86DGnof3e2s3F7rIC613jKtrIBCu6flk7Ukqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:3c:ec:45:2b:ce:b9:e2:25:03:44:59:9a:75:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1dee964aa26f89bd102276d465633fb82eaa28
Validity
Not Before: Apr 17 13:00:24 2026 GMT
Not After : Apr 18 13:00:24 2026 GMT
Subject: CN=214f0021949eb95073df37752e926c30e9abd30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:97:20:cb:73:ef:3c:b4:fc:81:bb:2c:24:
31:aa:16:6d:b8:32:07:2c:85:22:68:3a:11:98:c3:
ec:f0:da:fd:ab:52:89:96:1e:3a:8f:7c:79:4a:3f:
f6:05:05:7c:11:ed:a1:fb:32:ca:4d:ff:24:6d:b5:
d6:34:bc:e9:de:d4:61:4a:5f:04:e4:0b:f3:c0:f8:
9f:bd:b9:81:9e:1d:44:75:bc:bc:e2:59:1f:cf:8b:
e5:49:9e:6e:7a:87:f4:54:c8:d8:fc:5e:eb:ce:f6:
35:c5:6d:ec:df:32:d9:34:c0:52:6d:a9:07:db:70:
a0:b6:bd:a5:3b:9b:29:06:da:fe:24:f4:dd:28:b1:
dd:8c:b0:47:ca:d9:17:97:79:17:66:cd:26:b3:42:
3c:8a:d6:cb:bd:19:5b:18:af:18:a1:7f:97:ea:53:
35:13:96:07:5c:5a:d5:b1:f9:9e:62:01:da:ee:58:
0f:a3:d4:13:a2:e1:44:3c:d1:9a:ff:43:54:a2:5e:
6c:48:be:1b:9d:ed:17:8b:62:22:38:e2:d2:5b:df:
e4:b3:ef:85:9b:7f:cd:bd:8d:04:bd:e2:9c:78:05:
0e:7d:06:3d:7e:e3:b9:9a:9a:6c:7d:1e:2e:73:11:
0b:e3:d4:f4:20:a9:dc:20:d9:a9:0b:5b:5f:1d:2d:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:00:21:94:9E:B9:50:73:DF:37:75:2E:92:6C:30:E9:AB:D3:0B
X509v3 Authority Key Identifier:
keyid:8D:1D:EE:96:4A:A2:6F:89:BD:10:22:76:D4:65:63:3F:B8:2E:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jR3ulkqib4m9ECJ21GVjP7guqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/549363-1229-4114-a996-259420d32472/1/jR3ulkqib4m9ECJ21GVjP7guqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ed:41:65:18:d4:a3:61:b4:84:d6:8d:d5:89:cc:4a:9e:2a:
48:a0:b3:79:d3:07:c3:56:72:6e:e6:62:6e:39:16:ba:b1:ea:
4a:b0:91:08:51:0c:b1:9a:7c:3c:2f:48:dc:b5:5d:84:f4:00:
a4:38:df:6b:bf:cb:ee:b8:a9:dc:54:37:e8:c1:e4:ad:72:dd:
30:14:44:37:68:ca:79:ab:34:ac:9e:58:a0:f2:5c:57:77:15:
5d:7d:00:59:24:65:7a:b6:ff:d2:ea:2a:90:62:3d:01:22:a6:
5c:d0:ff:75:e4:4f:db:b3:22:ae:8c:8f:e8:b7:d8:bd:d2:d8:
ba:a1:d3:8a:82:68:6d:d4:5b:90:f3:98:36:a9:65:16:9d:dd:
05:50:21:b9:d9:9c:49:6e:13:59:0f:f4:9b:88:f9:b9:6d:c7:
0c:67:a9:bf:bd:aa:21:99:b9:2b:c7:3c:cb:f1:d0:de:59:50:
90:a8:15:cf:ae:e8:75:1a:05:1e:a5:e8:c4:3d:03:77:14:fc:
ca:7c:2b:94:2a:57:75:ef:bb:52:03:b1:42:95:26:b6:52:b0:
58:ed:d3:3e:cc:d8:36:cc:f7:24:b0:bf:97:7b:34:e0:93:a7:
0e:c6:a7:40:d0:6f:2f:f4:b6:3c:0f:ae:de:50:c5:4e:cc:d8:
19:13:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:45 2026 by rpki-client