
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: cA8Mhmb2v6zK8A0/HGVEGc0CVEG5X2V/MH+DjFEB56w=
Subject key identifier: 11:8B:89:AD:C2:D7:DA:1B:12:44:B7:5F:76:79:D9:C8:B3:D0:3E:ED
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019D2B84DFB21322AC9B1E7651ECCC341761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 65
Signing time: Thu 26 Mar 2026 19:00:21 +0000
Manifest this update: Thu 26 Mar 2026 19:00:21 +0000
Manifest next update: Fri 27 Mar 2026 19:00:21 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: htiu/iYwCrVL5PGpaHUUAMsI5Zh6DJR46pd/8esCinc=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:84:df:b2:13:22:ac:9b:1e:76:51:ec:cc:34:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Mar 26 19:00:21 2026 GMT
Not After : Mar 27 19:00:21 2026 GMT
Subject: CN=118b89adc2d7da1b1244b75f7679d9c8b3d03eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:df:24:da:dd:53:ac:1a:3b:c7:7b:fd:b8:
21:1f:3c:6e:35:21:b7:bf:2f:35:8e:b9:57:af:cb:
96:25:e5:cc:c3:b3:ec:07:6e:46:fa:4b:30:a8:23:
d0:9f:ec:8f:a9:7a:68:98:73:ad:7d:63:b0:12:be:
0e:57:12:66:ad:81:fc:ab:1b:0b:6f:b4:9e:fc:8f:
95:65:1b:cb:33:c3:c5:1e:06:45:bd:c1:e1:c2:cd:
ac:a3:af:74:cb:0b:b1:14:9f:3d:f3:bd:3a:ff:d8:
28:29:f5:ba:37:89:a0:ed:ce:44:96:7c:86:8b:ad:
ed:82:0f:12:25:a7:c4:11:4c:2c:35:04:e4:87:0d:
68:2a:d6:83:11:6c:db:bf:0e:a9:2e:61:d0:6e:81:
0d:05:ea:32:e5:35:aa:89:ee:ed:e7:1f:4f:13:c9:
f3:c6:04:a9:02:29:6d:77:53:10:c6:13:f2:4c:b3:
94:bd:c6:d7:0c:4b:42:05:33:0b:63:d2:5e:38:13:
78:8e:39:49:66:71:a0:38:19:e3:8c:b2:9a:b9:93:
b9:23:28:6e:51:12:93:56:3f:a8:06:35:29:4d:49:
2e:c4:94:a8:47:6e:6f:4e:49:35:8b:8b:59:0a:a5:
9c:ee:b0:b2:de:bf:d8:a0:9b:90:ab:62:27:4d:f5:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:89:AD:C2:D7:DA:1B:12:44:B7:5F:76:79:D9:C8:B3:D0:3E:ED
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:32:dd:af:eb:13:ba:b4:39:22:13:56:18:56:ae:5e:50:00:
2e:14:ea:50:b9:1f:61:12:23:2f:b8:0a:9d:1f:c1:9e:23:5a:
a6:bc:c2:79:43:34:5a:6d:14:83:23:15:b8:6f:f9:26:e8:73:
28:e2:f9:0b:12:d8:dc:d8:d9:00:95:87:2e:72:b5:7d:79:a9:
25:1b:2e:cf:87:54:48:e5:1b:7a:28:f8:b6:c1:ae:38:52:ae:
3f:41:ca:dd:a3:93:da:cf:c7:8a:3a:a7:e2:31:5c:44:bb:c0:
08:90:ed:8f:b0:72:40:0c:d4:d5:7b:e6:b3:36:45:30:46:86:
2a:cf:ba:14:07:c4:c3:a8:01:58:9e:ac:51:ec:a3:ec:b2:e5:
aa:3d:18:d7:1c:47:84:05:f4:bf:0a:cc:41:82:f3:4d:2b:aa:
28:81:fb:d9:19:45:4e:3c:cc:b3:48:2d:09:ed:73:78:be:3b:
0b:fc:4f:aa:3f:3c:46:f4:bd:1f:5e:18:d4:5b:4e:42:f7:d2:
2d:ac:79:6c:9c:2b:cc:a2:60:2f:7e:39:62:fa:5a:c2:75:bc:
62:cc:79:1f:3a:83:ca:01:bc:84:8c:d6:2c:42:f1:53:67:4b:
a6:7c:59:8a:29:b6:81:fd:37:01:d7:46:f4:68:be:0d:06:6b:
aa:a1:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:28 2026 by rpki-client