Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File: J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier: 74i2pSmhRKucCb2b96qSiuzTl1fl8ur4PM19aL+NplI=
Subject key identifier: CB:BB:C9:99:74:20:6E:98:6B:03:D2:1C:3D:5B:2B:72:AC:91:BC:E4
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer: /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial: 019CAC7E2BDDDB80BB015AB6F8DCE9790162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number: 08A3
Signing time: Mon 02 Mar 2026 03:01:15 +0000
Manifest this update: Mon 02 Mar 2026 03:01:15 +0000
Manifest next update: Tue 03 Mar 2026 03:01:15 +0000
Files and hashes: 1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: 8JpQAxOPW1gbwIVyme4CibwLJ3WfPT1o93UFBleE2EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:2b:dd:db:80:bb:01:5a:b6:f8:dc:e9:79:01:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Validity
Not Before: Mar 2 03:01:15 2026 GMT
Not After : Mar 3 03:01:15 2026 GMT
Subject: CN=cbbbc99974206e986b03d21c3d5b2b72ac91bce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:fb:a3:f5:85:a7:d2:6d:6f:78:39:0c:32:
36:db:13:5e:f9:40:62:40:f9:41:94:8c:32:4c:4c:
1b:a1:94:22:1d:8f:6b:03:94:32:e9:55:9a:5d:cf:
c2:fd:74:de:e2:59:7a:1d:96:e1:ed:cd:64:17:76:
5b:d7:98:89:90:a1:f0:45:77:86:d8:a2:c7:fd:39:
f3:62:75:d0:23:db:3c:75:2f:2c:b5:c6:fa:da:ed:
7c:be:20:ab:b9:de:ec:12:03:79:ca:45:49:b5:a1:
70:49:85:0b:90:c3:f9:8a:92:dc:5a:f1:fb:36:5e:
c0:85:19:6c:05:7b:9c:74:34:e3:62:dc:d0:6c:b2:
35:c1:fb:cc:70:9e:2a:7a:81:8d:f3:57:7b:81:53:
af:01:a7:64:27:c5:f5:0d:46:8d:68:e8:3c:a8:c0:
df:25:89:fd:8e:30:f6:e9:a8:84:20:03:9c:80:d5:
b3:da:90:88:21:13:06:bf:ce:a2:13:5a:28:1f:a6:
88:5b:c5:b1:de:d8:64:70:f8:77:7f:91:05:6c:87:
c7:dd:5f:12:a2:80:7a:8b:f3:6b:3d:c5:1e:92:2a:
e2:97:15:8a:6d:81:c5:43:9f:4a:70:66:4a:0f:da:
89:e2:c4:62:91:ea:19:3c:15:0f:3e:f8:50:7e:c6:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BB:C9:99:74:20:6E:98:6B:03:D2:1C:3D:5B:2B:72:AC:91:BC:E4
X509v3 Authority Key Identifier:
keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:57:95:e6:44:4f:ff:e4:96:7a:64:b2:8a:4e:5d:19:9a:25:
00:c3:1c:39:f4:a8:c2:67:1e:d0:c7:39:9e:9c:37:3c:1c:ee:
c6:88:89:01:7c:3b:23:ed:be:c7:ef:cc:78:11:50:35:9f:25:
66:c5:a0:dc:a3:73:8e:03:2b:0a:60:8d:ca:8b:ff:ca:9d:3d:
14:67:a4:1c:78:5f:38:cc:8e:e0:a2:c5:c8:d1:ba:55:7c:b3:
bb:62:93:5e:f7:05:d4:22:2a:e0:e3:36:27:2c:e9:0b:ab:05:
20:2f:51:f1:22:77:ab:bd:15:20:b2:63:59:83:3a:ea:86:9d:
34:16:87:44:a2:9e:ea:74:d0:22:34:6f:5d:54:45:93:31:ce:
d1:da:11:68:fb:22:bc:26:bc:16:fe:4d:d9:2d:68:aa:4d:c1:
92:81:65:7b:53:5d:5b:6f:39:b5:b3:e0:86:e3:f0:de:2e:f1:
81:4a:ba:8b:a9:7c:3c:5b:a0:d5:56:b7:f7:9a:1b:24:f2:08:
e1:76:a8:7f:55:1f:8d:ad:43:ef:ac:21:c4:f7:9d:f4:af:f8:
11:a5:6a:9e:a9:29:46:c1:db:9d:91:17:45:9d:14:20:d5:aa:
24:44:58:dd:9e:ed:48:14:1f:82:d0:77:ff:53:57:0f:bc:fc:
f1:8d:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:49 2026 by rpki-client