Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
File: jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft (raw, json)
Hash identifier: MHJOh0G1yHvTups4kWXtK6qPJ+9ybjuToBTXjfpBDUs=
Subject key identifier: FD:F3:D1:82:B8:52:9D:C7:DA:66:99:3A:5A:44:36:FF:7F:C7:FA:0D
Authority key identifier: 8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
Certificate issuer: /CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Certificate serial: 019D9AE331C29394064A295ABE56CA3033F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
Manifest number: 109F
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl (hash: gWjEVLfSv8cInOZ7/FykcIqbBnatgT2y7T3vk5lQzHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:31:c2:93:94:06:4a:29:5a:be:56:ca:30:33:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc297ef1859ca33759706bdc6ee7925cfa5141d
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=fdf3d182b8529dc7da66993a5a4436ff7fc7fa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:8f:55:b2:19:fb:5f:5f:d5:9d:94:5d:92:
ca:32:e8:43:52:63:f5:ba:6a:e8:b9:03:b2:8f:ab:
23:b5:f6:93:4a:0d:27:11:a5:75:04:59:8e:ca:f6:
8c:37:42:99:f1:9d:82:3b:44:ec:ca:91:72:2b:eb:
50:8e:ec:fe:70:cb:4d:6c:04:fb:52:1a:83:80:d0:
e0:05:5d:5c:bd:3d:fb:3f:db:b9:44:df:69:e2:de:
9e:c6:76:43:f9:7b:d7:d2:26:78:2a:68:ab:25:1f:
65:9a:9f:77:1f:3d:c1:f7:52:20:0d:c0:10:d8:03:
12:28:47:f7:0b:fd:e4:db:03:1b:2a:7c:91:9d:5a:
6d:3a:1c:3e:9e:50:18:34:1e:d6:af:7e:59:41:b5:
63:48:8d:8a:9c:d8:91:70:db:18:68:78:b8:d8:61:
87:ba:d1:4f:aa:67:d5:e8:b9:49:dd:1c:77:66:19:
94:84:49:e1:2c:a1:72:da:8f:ed:a7:e1:0c:b9:ea:
b6:5a:a9:62:7f:cd:9a:83:ed:c1:af:02:d2:9f:fe:
31:da:8b:fa:cd:5e:b1:61:11:b0:75:d9:89:25:2a:
d3:c5:d9:60:06:0b:0f:8d:37:92:3c:d0:aa:34:5c:
b7:d6:5f:c6:44:b5:0b:79:4d:61:02:64:5f:af:a9:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:D1:82:B8:52:9D:C7:DA:66:99:3A:5A:44:36:FF:7F:C7:FA:0D
X509v3 Authority Key Identifier:
keyid:8D:C2:97:EF:18:59:CA:33:75:97:06:BD:C6:EE:79:25:CF:A5:14:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcKX7xhZyjN1lwa9xu55Jc-lFB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aaaf99-b1c5-4bb5-8928-b5bc74caa402/1/jcKX7xhZyjN1lwa9xu55Jc-lFB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cc:11:a2:4f:60:3a:b5:e5:20:86:bd:d4:75:31:38:b1:50:
8e:13:bc:96:76:4a:b0:b0:70:9a:ce:8a:3f:f9:b1:59:02:81:
dd:fd:67:2f:df:02:39:4e:d1:b9:c5:57:3b:60:62:5b:39:23:
ac:b9:d6:3d:a6:3f:7e:b7:cc:f9:40:98:09:8f:1d:07:b5:67:
96:40:ce:f3:9b:48:1d:ce:c5:99:6a:e7:85:f4:8f:bd:87:08:
2c:a4:e7:84:51:44:64:21:f2:ad:2f:5e:3f:de:93:b6:96:39:
30:2e:50:57:f4:39:fc:81:8b:64:aa:e5:e5:d8:8b:df:48:88:
9b:24:3c:d2:31:72:28:44:fe:00:72:aa:df:bc:68:d7:63:10:
b3:b4:7a:62:93:eb:c2:91:05:43:1e:a2:80:49:97:b2:ed:2e:
7b:c6:29:89:29:de:20:8b:3d:5c:80:70:09:0e:4c:fd:95:9f:
64:17:9d:59:e9:60:06:d1:1e:5a:64:14:21:ab:5d:43:0b:cb:
b0:05:7f:ff:e9:b7:5a:ee:e7:68:2e:95:f5:a0:60:68:04:15:
36:80:ef:26:82:4d:95:c8:ed:3e:dc:f4:14:23:f3:2c:26:64:
ae:9d:70:15:b4:51:c5:50:2a:02:a5:cf:3c:fb:bb:3d:33:28:
cc:01:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:01 2026 by rpki-client