Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: SFN7YF9mFBfvcbiyrTPO0UmLb3E0lbVjVILGDH62ni4=
Subject key identifier: 15:E8:26:B2:67:BF:C2:FC:B7:D3:49:27:62:10:D5:8C:89:23:8E:EA
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019D296107BD961CAC4F7D6E52D665E611AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 180A
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 40zhC6wvYqvRP4EJazaggsFZ3EJGHhy+8Hj4iQXiasI=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:07:bd:96:1c:ac:4f:7d:6e:52:d6:65:e6:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=15e826b267bfc2fcb7d349276210d58c89238eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:cc:5f:92:35:7c:ae:a1:1f:49:6d:39:47:
41:25:27:e6:8e:7f:15:16:cb:35:10:5f:01:e3:82:
18:de:ea:fc:75:53:6d:29:bd:1d:bb:12:c8:dd:41:
da:7b:60:5b:1d:ba:81:73:45:30:57:d1:ae:33:5d:
b8:8b:d1:f4:86:f9:9f:2e:4b:84:e5:fb:54:8a:b1:
c8:66:d4:cf:28:f4:3d:f8:a8:3f:eb:85:ca:b9:a8:
6a:cc:0a:9e:38:c8:ee:93:78:29:34:19:44:fb:00:
d2:ef:87:7a:42:3f:2b:1f:52:f6:82:40:61:42:7a:
36:5e:4c:c4:0d:a5:c5:67:fa:25:f3:1e:fd:f4:df:
d3:98:8f:2a:77:3f:9a:7e:1c:ff:78:58:92:ad:c4:
8c:37:df:85:93:09:ce:c2:ac:8c:63:fc:06:3a:5e:
ad:20:a2:8b:06:66:cd:e6:b6:b0:93:b6:78:b5:9f:
7e:2c:de:30:81:44:00:a4:28:27:76:09:8e:6f:de:
63:cf:15:48:29:04:cd:78:9c:a2:22:85:48:a7:56:
8f:7a:12:9a:07:0f:08:02:d8:e2:9a:b1:20:c0:9c:
a8:9e:09:fc:89:97:e8:d3:a1:3a:7e:e1:38:e4:e0:
15:e9:fe:9c:74:d4:fb:a1:d3:14:07:af:6a:46:f5:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:26:B2:67:BF:C2:FC:B7:D3:49:27:62:10:D5:8C:89:23:8E:EA
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a9:39:06:ce:54:b8:3d:b7:0f:13:35:c6:4f:97:a9:6a:ff:
1b:d7:a1:c7:57:ea:71:39:7a:d7:4b:be:b1:7c:e2:60:6b:21:
74:9e:58:df:a7:3c:17:e8:cc:c7:ea:cf:7e:b1:9f:6a:16:04:
1b:56:bb:11:f7:4a:8d:cb:22:64:80:8f:a8:f2:33:bc:e8:5f:
cf:dc:b2:76:70:4f:3a:4f:50:dd:cf:60:de:a5:f1:3c:6e:55:
e7:8a:34:1c:7d:37:0a:43:60:b5:f1:8f:45:22:03:5f:8b:a3:
47:30:5b:be:c4:30:e8:ed:fd:8b:98:1b:40:af:87:71:7f:87:
71:5e:30:d3:82:90:fb:8c:6f:75:53:2d:40:30:b7:55:05:c7:
fb:dc:2b:5b:81:c5:6a:a6:39:47:7e:8c:fa:f1:41:21:e5:c7:
15:00:d8:08:39:d2:e9:37:dd:88:f2:33:66:83:e9:89:ec:01:
f9:38:62:d9:8a:c9:96:86:27:24:be:b3:fd:a2:70:7e:69:79:
9f:2e:a3:b7:2b:93:e0:87:df:42:4a:88:46:b7:3f:8c:b6:b5:
66:cf:dd:b4:1c:db:01:a0:c8:9f:f5:34:d1:e6:c1:2b:1c:f9:
30:bb:65:fa:22:b2:26:a7:41:f2:77:9f:2a:36:c3:2b:e4:26:
5c:d3:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:17 2026 by rpki-client