Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: LcqWbRODCbDCJ7hC3bjk+jFWGlSdOTkfQa5eTBldjnA=
Subject key identifier: 41:7E:A2:3F:EC:CA:95:48:B7:E8:96:00:DB:82:65:96:8E:7C:CA:CC
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019F9391AAC5A8048840BC3020C58BB42E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 01A4
Signing time: Fri 24 Jul 2026 10:00:24 +0000
Manifest this update: Fri 24 Jul 2026 10:00:24 +0000
Manifest next update: Sat 25 Jul 2026 10:00:24 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: mM3IWvRFq/ZKK6YE9FDlXXEAkHFhZsc23jrr+m0ykX4=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:aa:c5:a8:04:88:40:bc:30:20:c5:8b:b4:2e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Jul 24 10:00:24 2026 GMT
Not After : Jul 25 10:00:24 2026 GMT
Subject: CN=417ea23fecca9548b7e89600db8265968e7ccacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:4f:9b:0a:53:07:b7:c5:24:bf:05:65:cd:
0d:7c:b1:a8:52:a3:e2:10:33:17:ef:e6:ef:9d:e1:
af:25:b3:58:e5:10:8e:19:ac:f2:14:89:67:13:c5:
dd:de:79:e1:d2:f0:19:0b:9d:24:a2:b4:6b:4f:70:
18:e8:0a:93:cb:43:d2:61:0a:78:ed:0e:72:a1:87:
25:85:ce:09:44:8d:7e:49:85:19:52:99:d2:65:78:
5d:1d:b1:fe:85:0e:10:d4:59:58:84:7b:c2:67:6c:
7f:72:a4:f2:1c:5c:db:89:64:c6:8f:75:7e:3d:2c:
b2:61:36:cc:22:8f:a9:2d:5e:21:53:4e:78:6e:9e:
12:64:fb:3b:c4:6a:20:c8:f8:29:5b:74:ba:a8:85:
2c:31:6f:6e:e0:ca:88:51:c4:7e:77:e4:42:6b:af:
36:e2:dc:8d:7a:f8:3e:32:e4:ba:9d:d0:ba:49:05:
77:06:ec:88:ac:fd:c3:3c:75:70:2c:ab:a5:40:d1:
bf:23:4c:91:18:75:58:94:d7:34:7a:c3:d4:26:9b:
6f:7c:ee:7e:22:01:90:ae:10:12:66:67:70:43:bf:
11:bb:ad:10:73:88:bf:18:55:10:c1:25:c1:e0:96:
25:fc:b6:cc:5a:ac:fd:4c:c9:ca:ba:7b:fd:c6:8e:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7E:A2:3F:EC:CA:95:48:B7:E8:96:00:DB:82:65:96:8E:7C:CA:CC
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:eb:a4:f7:71:82:80:64:a0:bb:4c:0b:2a:b4:95:b0:2e:f0:
b6:d5:9c:cd:d8:1f:32:b5:01:8b:c5:cc:1c:6f:9e:d2:2e:08:
81:0a:a7:71:3b:17:54:37:c4:91:20:59:a7:e9:e6:65:f3:fc:
dc:a0:a2:43:d3:dc:cf:9e:f9:88:d4:79:f3:38:0c:d5:38:4f:
86:8e:73:4c:18:d4:2f:40:16:8d:a1:de:fd:37:cd:86:54:0f:
39:1b:6c:a6:c7:57:40:7c:2f:28:ce:c4:2e:a1:c6:af:4c:f1:
ed:88:1c:e4:e5:1a:cf:07:fa:4c:2a:f1:6e:49:75:0e:c9:5d:
f9:7d:50:2d:77:b6:4b:63:1a:85:4b:fa:f2:b8:ab:37:bb:76:
51:6b:c5:87:2d:cc:48:04:ea:00:d2:ec:86:f1:86:17:f9:2a:
69:40:76:53:a6:60:c6:1e:61:c0:e9:be:60:e1:64:96:d6:41:
70:34:d2:2c:01:48:72:25:b4:1f:70:98:a3:7f:dc:b7:aa:54:
89:97:57:0f:ba:39:a1:be:e6:b1:b7:d9:de:7e:5b:ed:e3:a3:
44:aa:50:46:1c:f4:8b:a7:ae:ae:99:d1:72:eb:1c:43:3f:fd:
4a:19:a5:84:4d:22:e7:84:04:62:09:3b:cc:75:14:c2:6f:27:
9d:3a:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:32 2026 by rpki-client