Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: PTlCmWXTNBucorhb/Hi4sivr0m9FDbTRp9ZDDC2hA30=
Subject key identifier: 43:FD:BA:D8:46:22:BC:DC:BA:D1:9C:7B:B4:F9:29:04:13:C0:68:2C
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 019D98185BEC00C2792FB9980BFAE51FE54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 09C8
Signing time: Thu 16 Apr 2026 21:00:26 +0000
Manifest this update: Thu 16 Apr 2026 21:00:26 +0000
Manifest next update: Fri 17 Apr 2026 21:00:26 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: ezRmo2N58Hdyxpsh3J/slZ0gjdlvvWM6q5aQhXjvqTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:5b:ec:00:c2:79:2f:b9:98:0b:fa:e5:1f:e5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Apr 16 21:00:26 2026 GMT
Not After : Apr 17 21:00:26 2026 GMT
Subject: CN=43fdbad84622bcdcbad19c7bb4f9290413c0682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e2:10:a4:1c:c7:3d:df:03:7f:0e:87:38:d6:
b6:09:1f:38:9b:89:2b:05:1e:db:58:2c:47:2c:da:
a9:c6:04:fb:2c:cb:b3:bd:e2:c1:71:af:c9:a2:c1:
ee:57:24:71:08:fe:95:78:d5:9d:8a:af:42:78:b9:
27:9a:de:a2:0f:00:e0:25:b6:a1:eb:76:6c:66:a6:
79:55:14:42:48:a9:dd:d6:19:13:c1:11:07:1c:38:
04:6d:e0:00:af:dd:22:2e:3a:3a:c3:24:f1:b4:73:
76:8c:e7:08:57:da:68:62:e6:26:69:dc:8c:73:27:
d0:ca:ca:bb:0c:c6:dc:64:6d:c6:66:4f:fe:fc:d3:
fa:80:eb:c0:dc:e3:2f:dc:c6:1d:1f:9f:a9:81:4d:
db:bb:86:53:fa:b5:85:e7:84:c0:40:13:e9:5c:7a:
07:a6:8e:98:d9:d8:c2:a7:9e:94:ad:dc:5e:b8:4b:
4f:72:ed:c1:f9:ab:1d:f1:57:2b:53:a5:be:2c:1c:
3b:35:60:82:2d:bd:3e:2d:bc:b6:06:e5:7b:a2:c3:
e2:e6:81:95:27:be:a4:8f:ed:79:9e:7a:bf:1c:40:
99:4b:f4:6c:4d:35:b1:38:47:0e:3f:6e:31:ef:e5:
7a:45:24:81:c3:77:7b:7d:cd:97:3d:7c:b0:af:21:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FD:BA:D8:46:22:BC:DC:BA:D1:9C:7B:B4:F9:29:04:13:C0:68:2C
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8a:56:31:62:d9:fb:9c:6c:ca:1f:6e:84:3f:a3:09:27:06:
43:34:eb:8e:77:91:61:1b:ab:74:9f:42:8d:7a:9d:ae:d3:81:
a9:cd:c3:5a:44:68:ef:b6:be:fb:50:3d:7d:a7:18:41:44:b2:
67:3d:2d:b2:a6:4a:95:4e:5d:88:69:ec:31:b5:49:3e:d0:1f:
0b:bd:b6:49:7c:20:d0:ea:23:42:af:52:df:95:ae:82:b6:b3:
6e:8d:18:8e:02:41:c8:6d:26:c2:e4:00:77:6f:02:82:bc:bf:
c5:be:e0:b1:d9:40:66:24:34:62:34:58:bf:10:e6:44:46:19:
f5:52:a7:56:24:15:7e:b2:fc:d3:1d:37:cb:b5:bd:e6:e7:bf:
05:c3:de:fb:35:dd:aa:33:d8:29:3e:9c:57:ab:39:4a:24:92:
6e:06:b7:6d:29:ac:d8:2d:da:ec:2d:17:6b:79:4b:3e:0c:54:
cc:d3:9f:ea:7e:e5:50:6f:79:87:79:d9:90:7d:be:10:ad:7e:
b3:d1:2e:6d:4a:8a:d4:80:e4:f8:1f:d0:49:0d:58:c6:97:9c:
36:45:ae:93:0c:52:c4:20:60:ec:1e:c6:a7:25:90:d2:c2:ef:
72:0b:ae:ad:bd:36:52:e4:f5:ef:aa:07:4f:0b:cb:01:83:c7:
a3:b7:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:05 2026 by rpki-client