Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: e0xEkygNZMEcPiA0oElZQzXLlXHlywcMlmWKiDiBjkQ=
Subject key identifier: D9:A1:B6:70:1F:FF:9D:60:53:BE:F5:5A:9C:56:AB:58:5A:68:A6:D1
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 019D29CEC0C86EEBAB5B812B514A01D24F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0BCC
Signing time: Thu 26 Mar 2026 11:01:48 +0000
Manifest this update: Thu 26 Mar 2026 11:01:48 +0000
Manifest next update: Fri 27 Mar 2026 11:01:48 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: 2t3enoYLiU8LQsvrj5RaNCmafLaTEcNgPn2Kc7oJDQc=)
2: UUFkgDHnR-0F8lOxAZm-NLU67J4.roa (hash: rvVeUb9I1xFcpHYp5yi+r3b7sO0cyT/6JlEZ7q0j+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c0:c8:6e:eb:ab:5b:81:2b:51:4a:01:d2:4f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Mar 26 11:01:48 2026 GMT
Not After : Mar 27 11:01:48 2026 GMT
Subject: CN=d9a1b6701fff9d6053bef55a9c56ab585a68a6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:cb:80:6c:96:87:de:83:71:77:b0:ff:4e:
5a:22:aa:ce:84:fe:b7:81:33:50:99:25:8a:9d:8c:
9b:f2:78:00:71:4e:26:e5:8a:1c:79:e3:1c:01:2e:
19:35:38:03:01:15:01:2b:28:25:e9:aa:e9:06:d6:
7f:32:dd:a0:77:4a:04:87:6b:4b:2b:ea:b0:d2:42:
9f:94:43:82:41:bd:d6:5c:a8:0c:e7:b5:5c:3b:be:
d7:ff:7c:f9:b6:0e:ae:b4:57:e3:19:a7:81:07:1d:
a9:de:1a:56:2e:12:fb:a9:2d:28:2a:17:69:25:ae:
53:07:da:6e:62:ea:b1:3d:97:40:c2:25:48:26:3f:
8f:6c:6a:8c:cf:ba:5c:d7:ae:5c:5a:f9:62:03:94:
fd:e4:ec:98:b6:da:40:4e:1c:ca:ed:6c:31:f4:a2:
70:b7:29:de:19:c2:bb:6b:a4:ef:d6:ef:27:15:63:
91:4f:ea:06:b8:76:1c:15:e4:17:48:bb:de:8e:b1:
2d:de:18:2d:ba:d1:18:e3:ad:9b:82:02:eb:65:8e:
0f:83:34:6b:3a:c2:93:d7:cd:02:68:68:bc:78:94:
d5:fa:8e:88:c3:18:a8:5d:b6:12:13:42:6b:d3:0b:
2a:cb:60:8f:80:9a:b7:ab:a0:21:8f:7a:97:37:6c:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:B6:70:1F:FF:9D:60:53:BE:F5:5A:9C:56:AB:58:5A:68:A6:D1
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3c:a7:86:15:24:68:1f:06:24:7a:9f:04:2d:83:ea:42:f9:
44:c2:a4:e3:2d:45:42:33:37:ce:75:fd:42:0d:81:ec:88:c5:
8e:33:77:03:0e:67:8a:0c:21:76:35:40:16:04:b4:1f:ea:e5:
4a:95:a8:28:b0:e1:db:e7:68:c8:10:46:af:36:95:29:4b:fa:
e6:01:32:9d:77:38:f1:a3:c4:ed:8e:fd:39:bd:de:bf:6e:81:
d1:5a:32:6a:c1:55:4d:28:0d:30:4a:a5:35:63:37:a6:09:ea:
16:75:54:c4:e3:03:05:52:22:dd:a5:13:59:3b:1a:87:5f:2d:
ab:76:3f:74:c0:64:40:a8:4d:a9:e6:56:5e:5f:ba:06:af:a2:
01:d3:6c:f8:3c:fc:e9:a9:79:8e:a1:e8:51:97:aa:d8:20:b7:
75:f0:02:23:51:49:8a:7b:4b:f9:01:b0:43:64:09:d5:97:7e:
1b:4f:9c:aa:3d:f9:a3:4f:5c:41:97:37:45:a4:34:65:12:bd:
de:0a:6a:2f:c1:48:10:1f:f7:c3:3a:0c:1e:dc:cd:ec:96:d4:
8a:52:b6:48:4f:95:9d:82:7e:8e:8b:ad:27:fd:fc:af:73:7d:
a6:71:d3:4f:44:83:cd:48:bd:61:80:d8:ab:c0:01:91:8f:0a:
98:2e:2e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:34 2026 by rpki-client