Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
File: jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft (raw, json)
Hash identifier: PpLQRHu5dEDqeC/OAkeUjKyeUqm83GSk5To+vA60GdU=
Subject key identifier: CA:2B:AD:17:36:3C:08:F3:D1:0F:70:A1:3D:E5:C7:DD:6D:CB:5C:62
Authority key identifier: 8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
Certificate issuer: /CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Certificate serial: 019CAD59F6256059EB0A3E12C861F4BCC04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
Manifest number: 07F1
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl (hash: NIvAYnZsffHmiGu9PDE9qMe/++aC7R9SrrOOoi0T5aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f6:25:60:59:eb:0a:3e:12:c8:61:f4:bc:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d320c5ff0cdbe2d51b08b8f601e4f0a44550f32
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=ca2bad17363c08f3d10f70a13de5c7dd6dcb5c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:2b:d2:9d:30:a1:be:49:e0:d3:b9:f0:a8:
9d:af:a5:de:80:d4:75:03:a6:f4:df:8f:99:24:9e:
c1:5a:77:fb:9d:94:f5:2e:73:6d:a8:76:99:20:48:
46:36:44:d1:13:f3:98:36:49:b9:95:83:4f:13:ae:
7e:1a:09:14:48:46:c6:ae:08:0c:37:2a:e3:e3:f9:
19:84:fb:75:8a:22:0e:a5:6f:e4:0b:13:12:24:c0:
53:60:16:66:5f:09:3b:65:0b:6a:7e:fd:e3:da:2a:
e6:9c:43:20:46:4d:58:2d:47:61:63:aa:5a:8c:44:
28:f9:b2:07:15:36:74:a7:a2:14:e1:85:69:96:2d:
b0:ae:98:da:33:46:56:ad:50:5f:38:d8:91:3c:c9:
7b:18:1a:33:e0:52:f4:f5:90:da:50:25:69:3d:d9:
24:fc:b3:ed:b8:4a:66:37:86:d7:5b:d0:d6:30:99:
fd:a2:76:a7:f0:f3:2d:0f:7e:99:99:23:0a:97:cd:
fe:fb:d5:a7:6f:4e:12:de:01:e7:32:af:71:29:bb:
4c:6d:00:8b:a4:ac:af:11:4c:4e:91:6a:d5:46:96:
fe:2c:45:d8:90:6e:5b:4d:ae:a3:66:71:8b:31:12:
3f:ca:18:aa:db:a6:b8:af:ca:c4:be:fc:64:51:c0:
e7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:AD:17:36:3C:08:F3:D1:0F:70:A1:3D:E5:C7:DD:6D:CB:5C:62
X509v3 Authority Key Identifier:
keyid:8D:32:0C:5F:F0:CD:BE:2D:51:B0:8B:8F:60:1E:4F:0A:44:55:0F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTIMX_DNvi1RsIuPYB5PCkRVDzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/49c2e9-49df-41c7-bdd4-1b513ebd4330/1/jTIMX_DNvi1RsIuPYB5PCkRVDzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:a3:57:cc:96:4d:e1:bd:d8:d3:3b:f4:2a:63:af:84:74:
8c:b3:c0:f1:c0:61:b0:8a:22:bc:10:ef:9d:ed:17:f3:9f:b9:
2e:38:8f:65:10:99:00:c9:b0:ac:c3:d8:cf:ec:fa:58:de:68:
64:d6:29:0a:4d:85:ee:af:8f:2a:19:49:12:c9:fa:de:4d:0f:
4c:7b:43:76:46:69:58:91:87:13:ec:c6:f9:75:29:9c:cb:01:
75:1a:a9:68:b0:5c:f6:04:bc:b7:30:35:ed:19:5a:46:e1:67:
10:f9:6c:9c:7d:ba:5f:b1:38:97:e1:c9:27:f9:b0:af:f4:37:
ce:e6:6a:80:6d:1b:13:cc:6a:63:7a:b7:27:36:90:fd:40:a9:
26:8d:14:93:5d:22:30:be:60:29:d9:39:6c:d1:e0:78:fa:ad:
cc:05:be:88:a7:5c:74:56:02:f5:6f:df:1f:b4:a4:c1:81:4b:
49:87:3a:c2:b6:12:1f:5f:f0:2b:e4:26:36:cd:f9:ff:3f:28:
87:73:ae:bb:18:bd:a3:39:79:7e:78:4c:64:9e:d3:57:0d:72:
2c:6b:43:00:d7:d4:e1:c5:d2:19:01:20:78:5f:15:ca:a8:6b:
b2:b3:8e:e5:43:58:b3:c2:2e:49:eb:b3:ad:84:38:c4:b8:c8:
d9:12:ee:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfYlYFnrCj4SyGH0vMBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzIwYzVmZjBjZGJlMmQ1MWIwOGI4ZjYwMWU0ZjBhNDQ1
NTBmMzIwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhjYTJiYWQxNzM2M2MwOGYzZDEwZjcwYTEzZGU1YzdkZDZkY2I1YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwgr0p0wob5J4NO58Kidr6XegNR1
A6b034+ZJJ7BWnf7nZT1LnNtqHaZIEhGNkTRE/OYNkm5lYNPE65+GgkUSEbGrggM
Nyrj4/kZhPt1iiIOpW/kCxMSJMBTYBZmXwk7ZQtqfv3j2irmnEMgRk1YLUdhY6pa
jEQo+bIHFTZ0p6IU4YVpli2wrpjaM0ZWrVBfONiRPMl7GBoz4FL09ZDaUCVpPdkk
/LPtuEpmN4bXW9DWMJn9onan8PMtD36ZmSMKl83++9Wnb04S3gHnMq9xKbtMbQCL
pKyvEUxOkWrVRpb+LEXYkG5bTa6jZnGLMRI/yhiq26a4r8rEvvxkUcDnYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMorrRc2PAjz0Q9woT3lx91ty1xiMB8GA1UdIwQY
MBaAFI0yDF/wzb4tUbCLj2AeTwpEVQ8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQt
MWI1MTNlYmQ0MzMwLzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80OWMyZTktNDlkZi00MWM3LWJkZDQtMWI1MTNlYmQ0MzMw
LzEvalRJTVhfRE52aTFSc0l1UFlCNVBDa1JWRHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoKjV8yW
TeG92NM79Cpjr4R0jLPA8cBhsIoivBDvne0X85+5LjiPZRCZAMmwrMPYz+z6WN5o
ZNYpCk2F7q+PKhlJEsn63k0PTHtDdkZpWJGHE+zG+XUpnMsBdRqpaLBc9gS8tzA1
7RlaRuFnEPlsnH26X7E4l+HJJ/mwr/Q3zuZqgG0bE8xqY3q3JzaQ/UCpJo0Uk10i
ML5gKdk5bNHgePqtzAW+iKdcdFYC9W/fH7SkwYFLSYc6wrYSH1/wK+QmNs35/z8o
h3Ouuxi9ozl5fnhMZJ7TVw1yLGtDANfU4cXSGQEgeF8VyqhrsrOO5UNYs8IuSeuz
rYQ4xLjI2RLuCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:49 2026 by rpki-client