Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: Fmma3jCzbGPd790HtmZ4selr60U4ThJavOtCSIlm5Wc=
Subject key identifier: F7:EC:1A:D2:11:A4:EA:65:EC:44:F7:26:A8:07:93:88:9D:E7:F3:9A
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019D28F30B87CA92453B0AB8E82BFBB4DA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 13B4
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: e+iKl9Nqxx9rVVFpuij1QbUFC0YPZzOldiwTN0s7Sus=)
2: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (hash: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0b:87:ca:92:45:3b:0a:b8:e8:2b:fb:b4:da:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=f7ec1ad211a4ea65ec44f726a80793889de7f39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:00:a6:cc:6a:fd:8e:01:40:08:2e:81:ec:
b7:b2:bd:32:86:4a:e1:43:85:70:67:25:7b:42:a3:
92:be:a7:f8:b2:1b:37:54:fa:67:97:7d:89:5c:fa:
ab:73:17:0e:17:94:67:0e:a4:cf:be:6f:dd:ab:ea:
ea:ca:86:55:ce:dc:4c:73:b0:a1:43:82:6e:e0:8d:
7c:c7:b3:a7:1a:e2:63:f9:ac:2f:da:14:35:df:56:
a0:a8:ae:0a:f3:a6:dd:a5:c5:78:df:c3:3f:28:7f:
2f:94:6e:2d:dd:de:47:96:12:5c:d0:e6:a3:c2:f3:
76:99:5a:9d:59:4f:60:6f:82:aa:a2:2d:21:ca:30:
18:4f:a4:b6:70:14:11:bb:2f:72:a7:9f:18:77:a6:
93:07:73:0a:af:9e:76:95:8a:22:4b:17:58:bf:2c:
8d:25:fa:1e:4f:84:53:1d:5d:f7:9b:31:1b:21:71:
c2:a9:19:51:52:df:4b:a2:90:5a:8a:8e:8c:d0:3a:
52:95:88:d8:cb:6e:db:28:3a:e2:ef:40:f2:07:39:
f7:7e:8b:28:5d:c6:c4:9d:92:b9:ff:4b:48:91:aa:
87:8b:3d:a8:88:8a:18:99:7e:73:3c:6d:8b:2f:3f:
e1:f7:22:ea:62:e1:8c:5b:7e:52:cb:96:8a:dd:97:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:1A:D2:11:A4:EA:65:EC:44:F7:26:A8:07:93:88:9D:E7:F3:9A
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:b1:e8:cb:44:4b:94:5d:7f:0f:8e:e5:6e:90:b3:b3:0f:
c0:29:5d:e4:85:23:10:8f:63:29:0f:e3:2c:9c:e3:df:de:f5:
6d:1d:38:bd:90:db:b1:c8:36:83:60:01:f6:50:09:d7:46:c6:
83:03:6e:ee:c1:95:dd:3a:fb:bc:0e:3e:8a:83:ea:20:79:85:
ba:f9:be:32:4e:d3:02:00:54:b1:b2:e5:8b:6c:dd:59:0b:7f:
8f:6d:cd:ff:22:78:f2:52:69:60:5b:79:58:7e:b1:81:52:c5:
62:a2:b1:a6:79:4c:c1:ab:d4:e8:38:53:3d:bf:76:8a:08:3f:
ed:25:48:ba:f5:ba:25:45:6b:05:7e:79:79:90:6a:43:d9:b8:
6a:35:21:26:b2:9a:72:ec:63:ed:ac:d2:9a:f2:be:bf:92:29:
1e:cf:d6:ea:2e:eb:66:a7:0e:a3:20:87:91:4f:0c:da:a8:2a:
c3:0d:33:ca:c3:64:7f:a9:76:d7:e1:71:b9:36:60:18:5f:74:
f6:4b:54:9e:10:2b:2e:2d:70:74:00:61:54:a6:17:02:03:1e:
6f:34:d5:de:22:0f:c8:cc:15:05:9e:4c:35:ee:1f:91:73:69:
86:f4:5b:a0:a7:25:92:e5:fb:f2:50:d1:a1:9b:b8:88:4e:56:
dc:61:9b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8wuHypJFOwq46Cv7tNpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjYwMzI2MDcwMTQ5WhcNMjYwMzI3MDcwMTQ5WjAzMTEwLwYDVQQD
EyhmN2VjMWFkMjExYTRlYTY1ZWM0NGY3MjZhODA3OTM4ODlkZTdmMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NAApsxq/Y4BQAgugey3sr0yhkrh
Q4VwZyV7QqOSvqf4shs3VPpnl32JXPqrcxcOF5RnDqTPvm/dq+rqyoZVztxMc7Ch
Q4Ju4I18x7OnGuJj+awv2hQ131agqK4K86bdpcV438M/KH8vlG4t3d5HlhJc0Oaj
wvN2mVqdWU9gb4Kqoi0hyjAYT6S2cBQRuy9yp58Yd6aTB3MKr552lYoiSxdYvyyN
JfoeT4RTHV33mzEbIXHCqRlRUt9LopBaio6M0DpSlYjYy27bKDri70DyBzn3foso
XcbEnZK5/0tIkaqHiz2oiIoYmX5zPG2LLz/h9yLqYuGMW35Sy5aK3ZcfBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfsGtIRpOpl7ET3JqgHk4id5/OaMB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgix6MtE
S5Rdfw+O5W6Qs7MPwCld5IUjEI9jKQ/jLJzj3971bR04vZDbscg2g2AB9lAJ10bG
gwNu7sGV3Tr7vA4+ioPqIHmFuvm+Mk7TAgBUsbLli2zdWQt/j23N/yJ48lJpYFt5
WH6xgVLFYqKxpnlMwavU6DhTPb92igg/7SVIuvW6JUVrBX55eZBqQ9m4ajUhJrKa
cuxj7azSmvK+v5IpHs/W6i7rZqcOoyCHkU8M2qgqww0zysNkf6l21+FxuTZgGF90
9ktUnhArLi1wdABhVKYXAgMebzTV3iIPyMwVBZ5MNe4fkXNphvRboKclkuX78lDR
oZu4iE5W3GGbmg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:27 2026 by rpki-client