Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File: rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier: +frWbXPKwHQwx79632RsOeVvz76KCWab108a9pBF8Lg=
Subject key identifier: B1:E0:D2:C2:BC:E9:00:9B:06:C6:9E:63:FE:EC:67:BE:7A:44:72:23
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer: /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial: 019CA9EB1962BDEBC77D2141D27825A8E484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number: 11C1
Signing time: Sun 01 Mar 2026 15:01:22 +0000
Manifest this update: Sun 01 Mar 2026 15:01:22 +0000
Manifest next update: Mon 02 Mar 2026 15:01:22 +0000
Files and hashes: 1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: STFp56bBcibRjidFOpL/Jp9cf/OEerawWVl5E4ui0CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:19:62:bd:eb:c7:7d:21:41:d2:78:25:a8:e4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Validity
Not Before: Mar 1 15:01:22 2026 GMT
Not After : Mar 2 15:01:22 2026 GMT
Subject: CN=b1e0d2c2bce9009b06c69e63feec67be7a447223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:2a:d1:68:51:a9:67:d2:a3:6e:a3:1b:5e:
58:fc:ab:08:83:5d:2e:57:1f:66:45:01:48:89:38:
c3:f6:7b:c6:46:0a:7e:bd:1b:92:38:16:8e:cd:82:
1f:4c:4b:8a:73:0d:18:dd:8f:48:9b:eb:6b:f6:89:
d2:46:19:b8:82:fa:db:da:a5:81:44:4a:40:90:7e:
93:17:48:31:a3:42:61:4c:54:d4:82:5e:c8:16:22:
6a:82:b4:73:c1:fc:da:33:59:d0:f7:fe:91:0d:bc:
e5:99:cf:bc:46:99:97:54:06:2f:2e:20:7e:07:b7:
00:10:27:1a:20:dd:af:f0:54:f1:6a:06:37:fc:be:
b3:d4:e1:44:a8:8b:ce:46:ea:0f:70:d5:a2:04:a9:
86:53:9e:27:e2:ca:07:4a:1a:ce:e4:62:5a:6c:af:
1e:3d:6f:64:e7:97:2f:d2:f0:f6:b2:0f:9c:ea:88:
59:ec:49:2c:9e:13:81:8b:68:f0:0e:bb:09:74:43:
ec:d9:1a:ee:12:39:09:22:fc:5b:12:a8:03:2d:d4:
05:29:dc:71:e2:dc:97:9a:10:8c:78:40:2b:3a:24:
8c:db:91:9b:d9:7d:66:1b:40:e9:6c:0c:ac:30:13:
fb:63:41:83:3d:7c:a0:01:1a:8c:30:e6:7d:3c:de:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E0:D2:C2:BC:E9:00:9B:06:C6:9E:63:FE:EC:67:BE:7A:44:72:23
X509v3 Authority Key Identifier:
keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:28:7c:46:95:f8:a9:79:1e:5d:d4:69:0f:66:6b:8f:d4:08:
ea:d8:d2:f3:07:ae:80:2e:b7:34:01:da:c7:24:df:3a:65:1b:
00:1a:5a:08:22:fc:af:2a:45:8c:6f:78:2d:6a:d8:07:01:33:
ed:7e:fa:06:59:3c:69:5d:79:c8:d2:c4:c3:76:3f:af:d7:66:
49:0f:68:69:c1:b4:e2:a7:90:cc:82:81:2d:a5:1c:54:7d:7d:
15:e6:de:5e:06:e7:48:c4:e4:4e:c3:16:4e:21:b7:5f:27:28:
46:70:87:19:7c:b9:95:1a:3e:e8:60:04:21:a3:02:83:9b:ec:
a6:b8:14:b5:45:a4:9a:7f:25:b4:a1:74:63:2d:43:8c:e0:48:
d6:4c:24:bb:9e:65:c9:b5:c4:3f:7c:33:96:e2:14:a9:bc:a4:
c9:f8:96:55:43:01:22:7f:a1:70:a5:c2:5f:a1:34:5a:3d:b6:
d4:00:64:ba:6d:fe:21:10:72:af:99:99:79:a6:9e:9b:75:cb:
46:6e:c3:59:bb:cd:0b:33:ab:58:c3:ca:f0:99:cf:36:11:b2:
b4:81:60:92:fe:41:ee:46:bd:0d:86:4e:14:e0:35:f3:c6:32:
fe:7e:cd:cb:6c:fa:4a:ff:18:cd:01:2f:5d:fa:ab:85:70:26:
7b:08:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:00 2026 by rpki-client