Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
File: jXFsWj-FNOaifTBNiDC8AxGaTF0.mft (raw, json)
Hash identifier: SrX9LXUWVinJ4xsRNwEgArBURUcghI0LCmYvuYaxC80=
Subject key identifier: ED:48:8C:8C:D2:A7:53:15:F6:6B:53:52:9D:42:51:F7:30:49:DF:2A
Authority key identifier: 8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
Certificate issuer: /CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Certificate serial: 019CAD5982D37B5FBC727BB265FEC16F7AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 07:00:50 +0000
Manifest this update: Mon 02 Mar 2026 07:00:50 +0000
Manifest next update: Tue 03 Mar 2026 07:00:50 +0000
Files and hashes: 1: jXFsWj-FNOaifTBNiDC8AxGaTF0.crl (hash: e82aY3TR6lc7fJ5myeQ//7RQErPIXRE4NJNa6aw6wLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:82:d3:7b:5f:bc:72:7b:b2:65:fe:c1:6f:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d716c5a3f8534e6a27d304d8830bc03119a4c5d
Validity
Not Before: Mar 2 07:00:50 2026 GMT
Not After : Mar 3 07:00:50 2026 GMT
Subject: CN=ed488c8cd2a75315f66b53529d4251f73049df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:96:0a:68:b2:f1:ed:15:25:48:50:d2:d8:
d9:68:f1:5d:09:88:99:d4:87:7e:5c:45:94:24:c6:
a3:81:b5:d4:3e:e3:f0:c0:01:e2:a0:14:3c:f1:47:
b5:3f:ab:24:e3:4b:5e:32:24:0d:c8:bd:36:45:5b:
a0:35:8e:ae:57:e1:39:c0:2f:10:ec:63:00:21:23:
15:3d:4d:dd:d0:c6:be:c0:67:e4:ec:6b:23:ca:b4:
ca:6c:56:fc:c2:5e:96:92:63:71:ea:fa:65:fb:bb:
11:46:9e:1f:a0:db:e2:43:24:73:8e:a3:63:1b:af:
26:53:f0:83:19:9f:7b:45:ce:b2:2d:4e:75:b4:9c:
67:0b:1d:b1:7c:31:18:ca:d8:45:ac:4f:51:e2:60:
77:a4:ad:83:71:35:c7:a8:17:59:5d:77:df:df:38:
8b:80:17:ce:99:be:e8:0a:ec:1c:7a:e1:12:fc:20:
b1:2a:91:88:e9:4f:06:c7:cf:de:a3:ed:51:49:d7:
b6:82:2a:9e:52:9b:da:7e:f8:fe:c3:aa:6a:78:0c:
74:6d:a8:6a:39:60:9d:93:02:b4:90:80:17:59:27:
4b:25:3c:76:e0:6d:b0:5c:0e:a6:45:0b:01:8e:be:
3a:28:04:d1:22:1a:85:da:0d:21:a4:64:fa:bf:f3:
ac:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:48:8C:8C:D2:A7:53:15:F6:6B:53:52:9D:42:51:F7:30:49:DF:2A
X509v3 Authority Key Identifier:
keyid:8D:71:6C:5A:3F:85:34:E6:A2:7D:30:4D:88:30:BC:03:11:9A:4C:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXFsWj-FNOaifTBNiDC8AxGaTF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/67c4e8-9c6d-4083-9b97-210e38da0b4e/1/jXFsWj-FNOaifTBNiDC8AxGaTF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:17:a8:28:8e:8f:1b:9b:e1:db:f1:44:ba:48:95:70:43:bd:
c3:b8:0c:19:d8:6b:8e:23:de:20:b5:66:7e:dd:14:b2:06:22:
34:28:b0:2b:5e:d5:14:a4:17:b0:61:8b:8f:4b:da:c7:c9:0c:
2f:13:77:35:0e:90:5d:6c:c4:23:4b:cc:d7:04:7a:3d:25:ad:
c3:7f:0e:da:5f:99:f2:68:28:ce:d6:e8:da:f7:5a:f3:bf:2a:
16:75:d3:83:4e:4c:ee:72:54:aa:fc:17:3b:e5:05:75:ed:6c:
51:cd:02:f9:30:48:99:51:80:ac:c2:90:00:03:09:c3:47:9c:
6e:94:36:b7:0e:df:8e:19:98:8c:79:83:6c:14:a3:44:86:10:
03:1a:32:69:08:2f:7a:12:ee:da:f9:b1:0e:7d:95:2c:d6:86:
1c:2f:a4:74:90:0d:f0:df:ed:23:1d:27:99:22:db:08:01:1f:
72:c9:bd:cf:32:54:22:a6:6f:37:73:52:96:cb:f5:88:7e:a3:
26:82:44:d4:3e:07:89:13:ab:ed:0c:3c:86:cf:13:0f:f9:73:
45:13:45:5e:d9:e5:8b:1a:f8:63:93:3a:d2:e0:56:1d:04:50:
b4:7a:79:42:7b:c7:30:a7:dc:02:9c:8d:13:37:86:98:91:84:
52:b2:5b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWYLTe1+8cnuyZf7Bb3rIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzE2YzVhM2Y4NTM0ZTZhMjdkMzA0ZDg4MzBiYzAzMTE5
YTRjNWQwHhcNMjYwMzAyMDcwMDUwWhcNMjYwMzAzMDcwMDUwWjAzMTEwLwYDVQQD
EyhlZDQ4OGM4Y2QyYTc1MzE1ZjY2YjUzNTI5ZDQyNTFmNzMwNDlkZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3peWCmiy8e0VJUhQ0tjZaPFdCYiZ
1Id+XEWUJMajgbXUPuPwwAHioBQ88Ue1P6sk40teMiQNyL02RVugNY6uV+E5wC8Q
7GMAISMVPU3d0Ma+wGfk7GsjyrTKbFb8wl6WkmNx6vpl+7sRRp4foNviQyRzjqNj
G68mU/CDGZ97Rc6yLU51tJxnCx2xfDEYythFrE9R4mB3pK2DcTXHqBdZXXff3ziL
gBfOmb7oCuwceuES/CCxKpGI6U8Gx8/eo+1RSde2giqeUpvafvj+w6pqeAx0bahq
OWCdkwK0kIAXWSdLJTx24G2wXA6mRQsBjr46KATRIhqF2g0hpGT6v/OslwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1IjIzSp1MV9mtTUp1CUfcwSd8qMB8GA1UdIwQY
MBaAFI1xbFo/hTTmon0wTYgwvAMRmkxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTct
MjEwZTM4ZGEwYjRlLzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82N2M0ZTgtOWM2ZC00MDgzLTliOTctMjEwZTM4ZGEwYjRl
LzEvalhGc1dqLUZOT2FpZlRCTmlEQzhBeEdhVEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARReoKI6P
G5vh2/FEukiVcEO9w7gMGdhrjiPeILVmft0UsgYiNCiwK17VFKQXsGGLj0vax8kM
LxN3NQ6QXWzEI0vM1wR6PSWtw38O2l+Z8mgoztbo2vda878qFnXTg05M7nJUqvwX
O+UFde1sUc0C+TBImVGArMKQAAMJw0ecbpQ2tw7fjhmYjHmDbBSjRIYQAxoyaQgv
ehLu2vmxDn2VLNaGHC+kdJAN8N/tIx0nmSLbCAEfcsm9zzJUIqZvN3NSlsv1iH6j
JoJE1D4HiROr7Qw8hs8TD/lzRRNFXtnlixr4Y5M60uBWHQRQtHp5QnvHMKfcApyN
EzeGmJGEUrJbwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:31 2026 by rpki-client