
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: L7PVgJTMhIBi5+RWZZ1QJwW9sjeEycAK/lwfdNJhYCw=
Subject key identifier: BF:CE:5D:32:79:0D:E8:45:B9:FF:4F:5D:18:DB:95:67:7F:DF:77:AC
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019E1DFE818852F9001EE58A740BF2550691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 073C
Signing time: Tue 12 May 2026 21:01:18 +0000
Manifest this update: Tue 12 May 2026 21:01:18 +0000
Manifest next update: Wed 13 May 2026 21:01:18 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: 8JKkzkKQJg7jGzIAOj2OMSr4dOKlTpLIza9wWoZGVnA=)
2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:81:88:52:f9:00:1e:e5:8a:74:0b:f2:55:06:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: May 12 21:01:18 2026 GMT
Not After : May 13 21:01:18 2026 GMT
Subject: CN=bfce5d32790de845b9ff4f5d18db95677fdf77ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:e9:78:c5:5a:cf:6e:95:d5:d1:c7:6d:53:
48:2e:67:ba:af:53:ae:e0:2f:6e:de:52:44:28:ac:
21:82:dd:2a:d4:a3:4f:c6:d4:01:67:87:39:77:78:
85:4f:d2:ce:d2:e5:42:ff:eb:aa:2b:09:9e:42:8c:
73:3b:a7:f4:f9:6a:72:bb:5b:d8:3d:f6:2e:98:f7:
f4:04:7f:bc:f2:28:9f:b3:2f:49:42:a4:f0:79:5e:
64:41:d8:4d:f3:a8:d3:55:7c:20:b3:5b:ce:e2:8a:
c2:ed:70:6c:4f:03:c5:51:df:28:e2:fd:da:4f:a9:
30:92:6c:0c:28:0e:7d:50:3b:e4:01:9b:48:a8:cf:
d0:fe:96:63:60:6a:83:ab:15:1a:09:fa:8b:3b:b8:
01:eb:89:ed:34:65:d1:5c:72:3f:a4:c0:f5:15:8f:
67:50:11:fb:8a:e3:11:cd:12:ca:39:3d:5a:6f:07:
80:95:26:9c:4a:2c:7a:d3:d6:40:e3:5e:ff:77:8d:
b9:3d:96:52:26:76:d8:69:23:18:5f:90:a2:bb:ba:
75:32:0b:e7:b4:f5:31:13:e6:29:cf:67:c3:88:5d:
01:98:df:3a:1b:27:5c:bd:c1:dc:31:39:f5:55:d7:
a9:a9:1e:c6:83:7f:ac:00:10:e0:13:18:7c:26:ab:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:5D:32:79:0D:E8:45:B9:FF:4F:5D:18:DB:95:67:7F:DF:77:AC
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:2f:b1:38:c5:27:86:4e:6c:83:35:5e:73:4d:54:05:79:
36:25:1d:02:f2:85:64:aa:34:bd:d1:9f:69:00:ff:f5:7a:d3:
88:27:f2:3b:76:0b:9c:79:47:8b:41:45:ab:25:df:9f:30:4a:
0a:ce:3e:d7:da:f8:31:5e:74:e9:6b:e8:6e:be:b8:f6:dc:2f:
7f:31:86:07:62:32:7e:2b:41:f9:ba:d8:22:f3:94:f7:65:e2:
4b:b7:44:ff:c6:30:84:40:1b:48:f5:0e:e6:38:79:e8:c1:44:
62:9b:64:ed:e6:7d:9f:03:c1:e2:e6:53:a2:fe:d7:41:63:c2:
70:01:c8:24:4b:2b:3c:d9:04:c1:d0:d9:0e:13:19:a8:dd:53:
ce:db:c5:76:9e:d4:4d:0f:cf:1c:ef:5f:51:38:bc:49:5e:db:
9c:7e:52:1f:af:30:eb:fe:2a:56:45:eb:b3:06:71:26:dd:45:
d8:c4:56:f1:e1:64:4f:bc:65:22:e4:b1:5f:c6:33:c9:64:f4:
dc:68:42:d8:9e:14:91:5d:45:43:07:81:d3:61:79:38:40:8f:
c2:19:0a:65:14:90:5e:49:c7:b2:8b:56:92:a9:dc:c3:4d:15:
e9:10:aa:88:9c:ff:92:f1:fd:d6:79:c8:71:e6:ac:a6:1f:f5:
d9:8a:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:14 2026 by rpki-client