
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: 8rExDj4JOTyk9zSf9LDujarGTjjmEJ6vUu7O8YsvPsk=
Subject key identifier: 55:60:50:BF:B2:5D:EC:CB:54:06:2A:D9:00:59:86:89:FE:95:BA:C0
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019CAA21960AFD678E5122B93C00D39FFAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:00:53 +0000
Manifest this update: Sun 01 Mar 2026 16:00:53 +0000
Manifest next update: Mon 02 Mar 2026 16:00:53 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: 5A3aEMfQ25+wXcCyE4+TTNDiuCyXXs5PA62sBQb0m6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:96:0a:fd:67:8e:51:22:b9:3c:00:d3:9f:fa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Mar 1 16:00:53 2026 GMT
Not After : Mar 2 16:00:53 2026 GMT
Subject: CN=556050bfb25deccb54062ad900598689fe95bac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:7e:ba:62:e7:b3:91:90:bc:02:cc:06:22:
bb:df:99:19:85:f4:09:b5:11:4a:98:e7:da:e2:5f:
df:91:c2:6a:e6:cc:4f:3f:33:f4:e0:df:df:e4:3e:
8b:ca:23:52:48:c2:23:73:d4:31:02:a1:71:21:c0:
37:29:08:23:97:39:e4:e3:12:82:c6:22:c3:0a:03:
7f:d9:3b:bb:5b:f3:86:eb:4b:c4:bc:f6:4a:c2:af:
5e:8f:cf:09:24:df:51:02:95:da:98:ba:c0:eb:fc:
5c:ec:ee:a8:47:38:40:c2:40:5f:01:53:11:3e:14:
cb:e6:48:62:5a:94:f1:b9:9f:5d:7d:16:16:eb:19:
8c:d8:89:e1:44:30:3c:42:95:7c:b3:f5:56:b2:ce:
90:d4:6e:0f:c3:f5:d7:b8:31:59:ee:7a:b9:78:69:
3a:09:1d:6d:7e:6f:50:2f:c9:49:61:79:cd:7b:9c:
9d:75:8c:29:e9:da:86:7a:76:58:a3:12:54:44:f2:
78:49:c1:e0:ee:9f:0e:82:e6:ac:1b:e5:89:07:c1:
51:11:68:25:25:c7:38:3e:01:2b:a1:45:08:f1:ee:
86:dd:50:f0:1d:96:22:f0:b2:b3:7c:a4:fe:d6:07:
06:1b:81:11:9e:11:55:81:d7:a6:86:53:13:f4:f0:
a1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:60:50:BF:B2:5D:EC:CB:54:06:2A:D9:00:59:86:89:FE:95:BA:C0
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:32:7a:94:cc:d0:95:a1:84:45:90:bc:c5:e1:11:a0:54:ec:
6b:1c:f9:2b:0b:79:c9:d0:d0:bd:c7:6f:4c:fc:f4:07:e2:4c:
27:49:08:13:a3:e9:44:45:a9:7e:f2:84:f4:99:75:29:58:07:
da:d7:61:48:1f:1e:df:af:ac:0e:7a:29:b8:e8:92:92:d3:7e:
23:95:6b:c1:24:6a:6d:57:e6:c7:9b:a4:86:88:12:67:3b:3c:
80:ed:90:e4:1c:15:45:7b:09:8a:63:96:ae:8e:04:44:2b:7f:
32:2e:df:c5:f5:94:b3:44:2f:89:d4:24:73:39:1c:0d:02:c9:
47:f3:e0:00:9e:3f:eb:8d:03:09:f2:3a:e9:0b:3b:ff:08:f9:
dc:54:38:f0:be:05:ed:11:91:d0:fa:30:94:da:37:e8:35:63:
3d:70:75:da:8b:99:80:c1:18:2e:86:d6:ee:0a:92:03:b4:a4:
eb:56:07:46:40:bf:2f:a8:9c:71:d6:6f:14:69:3d:f6:61:2f:
01:5d:fb:41:ea:03:72:08:56:81:1e:8d:20:ec:36:72:f8:80:
9f:24:5d:90:24:9a:6b:e3:6f:d0:a9:71:66:05:f7:75:84:a6:
36:cc:a5:58:07:72:ac:0a:b1:db:bc:b1:be:19:79:a7:b2:93:
58:c9:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:55 2026 by rpki-client