Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: uek+A1NFJUTx3JWKm/zR4pdp9pubKY113sMOmNbHOx0=
Subject key identifier: 23:3F:DB:59:EA:11:97:49:47:34:C8:53:30:7F:15:19:3C:93:73:19
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 019CAD5A2DF631651212D01DBCD417B0B81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 1024
Signing time: Mon 02 Mar 2026 07:01:34 +0000
Manifest this update: Mon 02 Mar 2026 07:01:34 +0000
Manifest next update: Tue 03 Mar 2026 07:01:34 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: 6pmjthC213iRm60x/fgh11AnTkPPtWwnZw393reNNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:2d:f6:31:65:12:12:d0:1d:bc:d4:17:b0:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Mar 2 07:01:34 2026 GMT
Not After : Mar 3 07:01:34 2026 GMT
Subject: CN=233fdb59ea1197494734c853307f15193c937319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:bc:34:34:0a:b0:dd:fa:87:ff:fb:e0:6e:
88:a9:a6:59:41:74:8c:bd:2a:c4:75:bc:9f:52:af:
1c:08:8d:0f:62:68:d2:b7:35:1c:b1:18:a8:b6:39:
2a:8f:19:d5:5a:9e:3d:44:b7:cd:86:7d:eb:64:c7:
4b:65:df:52:30:4d:a1:65:a6:e1:51:e2:5f:93:df:
6c:63:34:2c:99:94:ed:73:5d:81:52:f9:f1:ee:d0:
60:94:a2:98:74:cf:82:11:49:45:54:2f:cc:56:a8:
6a:3c:1d:a9:7a:28:c7:7d:67:06:bf:ff:67:1b:7a:
ca:08:4c:14:94:3f:7f:90:5a:9b:86:42:33:e8:cb:
56:ef:71:b5:70:ac:02:5f:a3:b7:11:b4:eb:29:b5:
31:d7:fc:80:b6:36:79:ea:56:69:f0:cd:ab:a7:1f:
7a:e8:75:ec:bf:0a:c2:0d:3d:0b:12:9a:8a:ad:bb:
25:81:a1:7b:6f:13:7c:53:f4:c0:90:07:1f:dc:4f:
09:72:3c:f7:86:36:2b:fc:c0:64:a5:48:c5:a4:61:
14:e4:c1:aa:ad:d9:33:af:8a:44:64:b8:8f:b8:de:
5e:ed:9b:e3:8c:e5:7b:13:9a:0d:5b:a6:84:04:cd:
70:4d:b2:ca:74:c0:8f:d2:da:b2:4c:47:fc:ce:78:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3F:DB:59:EA:11:97:49:47:34:C8:53:30:7F:15:19:3C:93:73:19
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:6c:69:73:d3:3a:f0:8e:42:5d:f0:19:5f:8b:98:8e:80:a5:
73:55:9a:23:18:ed:e2:6c:f1:21:06:5e:0e:fa:06:9b:09:d4:
33:e1:95:e7:6f:10:2e:a1:39:0c:e6:f1:dd:f5:53:8f:67:1d:
48:21:47:d9:8e:e0:85:c0:ed:38:5e:29:c1:7e:0d:f3:23:9d:
c6:9e:35:47:4b:85:9a:16:9c:29:71:19:e7:1e:7c:79:27:65:
23:24:55:9c:2e:68:d0:1b:1b:87:ee:be:9b:26:04:11:03:0b:
35:0d:9d:03:a7:93:c7:69:2f:7f:4d:65:e0:10:36:ea:b5:69:
43:89:d7:20:0a:5c:06:b7:ed:f0:23:e8:44:65:d8:ce:99:b2:
a2:a3:91:af:81:2a:01:67:b3:59:4c:fc:ee:12:98:e4:52:85:
03:ce:f4:73:11:2e:5b:ab:0b:f7:3f:12:93:f7:04:b1:01:59:
aa:72:e3:ee:55:32:b5:ed:10:f4:fa:bf:25:e8:72:10:49:d2:
ab:c7:b2:66:69:4a:a8:56:34:1f:0e:99:b9:22:e6:8d:11:f6:
a6:06:67:0b:5c:33:0f:10:bc:e3:12:49:58:ee:e3:4c:e9:50:
ec:6c:cf:7e:60:37:b5:70:5f:e8:ac:8a:18:87:9b:d8:82:63:
d8:a5:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:33 2026 by rpki-client