Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: xui/STs9W0UbuOaOdM1HA5DkHxJ2m+EzG6sixOKT0rw=
Subject key identifier: 3A:AC:46:10:C5:CA:A0:A2:1C:E8:EC:69:3C:41:FA:E4:53:8E:1D:4D
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019CABD911518559976534273314EB1EEA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: FFjnuGRu3Y6zKw2Pa+Nqe5B5O+igoT9xGLZNEJCdIt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:11:51:85:59:97:65:34:27:33:14:eb:1e:ea:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=3aac4610c5caa0a21ce8ec693c41fae4538e1d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:f8:d0:9f:d3:4f:1f:74:9f:c8:87:11:1e:
aa:04:68:70:28:77:c7:9c:f9:29:a1:1e:f2:a8:72:
93:0b:4b:2d:6e:1e:db:23:2d:b7:38:87:d4:97:a2:
47:95:2d:20:11:24:70:4d:26:f5:ec:48:00:93:a3:
f2:ea:45:8a:6e:d9:5f:90:a6:08:65:16:18:d3:d1:
36:b9:fd:83:e3:fd:ad:24:b5:97:b9:56:2a:75:65:
e2:0c:c5:f3:8b:c0:e0:cf:d4:f8:50:9c:36:4d:6f:
6b:95:a4:49:a9:57:8b:06:36:84:20:d2:fe:12:22:
d1:00:ad:df:95:3b:94:3b:89:6f:a9:17:cb:52:9e:
f0:ee:42:cf:fb:bb:78:43:28:55:17:f2:2c:9b:2f:
53:94:68:e1:f9:c8:49:d7:5e:4f:91:40:e2:ea:82:
01:84:c8:99:d5:c3:ab:ce:22:52:b7:b4:2d:93:8f:
97:aa:a1:8f:df:e3:75:37:d8:a2:f2:25:11:32:f5:
29:fe:ee:e4:68:33:81:2c:35:ee:b8:7c:22:34:e6:
1e:99:50:72:40:1d:3e:3b:f9:38:f6:36:6f:3e:a2:
d7:0a:3d:2d:85:70:a8:68:27:10:e8:03:5c:04:9e:
7b:6d:8e:fa:fa:6e:c3:5a:b6:5e:3c:4d:da:9b:66:
3e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AC:46:10:C5:CA:A0:A2:1C:E8:EC:69:3C:41:FA:E4:53:8E:1D:4D
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0d:83:f0:fb:ea:1f:79:75:7b:19:dc:a2:76:86:df:26:eb:
45:dc:ad:fd:75:4d:e3:0b:17:de:75:09:39:8e:b7:57:c1:53:
0b:5c:7e:6d:2a:38:a8:39:8a:b2:d1:b1:ad:df:3f:bb:4d:d2:
1f:d2:5c:df:a6:ef:51:bb:6d:17:d9:0e:e1:d7:7d:97:4c:43:
ba:40:95:2a:00:c3:10:0f:ad:8a:af:19:b2:08:8a:9c:1b:99:
a8:5b:c4:7a:d8:93:74:cf:e5:38:c1:43:2b:9a:c0:3b:ec:91:
a6:a5:4c:83:0d:81:f2:38:79:0c:7b:4d:4b:8b:bd:23:fe:bc:
8e:8a:b3:23:4f:93:84:ac:3e:b2:f9:25:89:92:d5:a4:6a:45:
a6:c6:d5:c6:0b:60:68:56:e2:01:c4:0f:b4:9c:3a:6b:60:e9:
f7:c5:db:d7:f2:b1:70:ba:95:18:f9:57:93:5c:50:9f:50:c9:
08:27:45:6e:ce:02:62:bd:e4:1d:96:62:e0:6f:40:42:85:4d:
32:11:92:7f:bf:02:93:c5:a3:0f:f6:72:db:54:1a:73:21:08:
4d:1a:61:21:d1:9a:1d:2f:f6:c5:3c:4e:01:dc:65:56:37:4d:
3c:88:0a:ac:b7:51:92:af:d3:07:ed:e4:95:d4:f5:77:d8:bc:
bb:b1:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:39 2026 by rpki-client