Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: yoqOTJPW4Q1yNebiGrxzVM0xujKNV3HcRZpgAzlhsDE=
Subject key identifier: 3B:6B:EE:C5:83:75:D9:EA:C8:02:AB:06:07:48:B5:0C:92:A0:9E:2F
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019D284D3D2B20D8789F4BD794321AEEA47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:00:43 +0000
Manifest this update: Thu 26 Mar 2026 04:00:43 +0000
Manifest next update: Fri 27 Mar 2026 04:00:43 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: 49hh15wxAU7qcqn3+dl6ZzIVhrZ8u3X4/ge2+JRo9V0=)
2: qaXfGqRy8REPCt5AS8O0mmZxMbQ.roa (hash: s2r/NmzprssiG6q7fm25EDu8EjVb4m0dpfMF/5RAabI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:3d:2b:20:d8:78:9f:4b:d7:94:32:1a:ee:a4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Mar 26 04:00:43 2026 GMT
Not After : Mar 27 04:00:43 2026 GMT
Subject: CN=3b6beec58375d9eac802ab060748b50c92a09e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:a0:ec:51:af:55:4f:c5:db:96:10:5b:02:
59:17:c7:2d:91:36:b3:e7:86:0e:3a:22:aa:83:4e:
b6:b8:ea:68:90:02:08:30:f8:78:fc:f6:ca:fb:9c:
2a:34:ed:ac:98:e9:8e:d0:d8:62:6d:0a:64:5c:a8:
6c:44:f6:d9:06:38:4f:8e:7b:67:e4:df:cc:7b:e1:
ea:c8:df:ae:4b:81:6e:8f:ca:97:28:a3:b4:dc:f6:
63:8e:f4:ac:e9:f8:66:06:ce:6b:8d:96:3e:cb:cc:
fd:b3:3d:8a:c1:84:d0:a4:9c:15:54:19:64:a7:a7:
b7:8e:a6:8d:25:47:d9:c9:69:73:01:29:14:89:9c:
86:72:e2:a0:87:a4:68:d0:1d:e7:f2:c7:3d:24:c3:
ed:9d:55:0e:1f:cc:f0:79:53:cd:1d:90:b1:a0:b0:
6e:a8:cd:33:18:05:35:f7:8a:d2:00:a2:15:21:92:
62:e8:88:91:9a:65:c5:5f:8b:6a:15:52:5a:e8:44:
d7:aa:45:a6:ee:6e:f7:24:21:bd:f6:b1:46:bd:b8:
d0:4c:5c:ab:1e:f9:f5:cb:33:a4:80:7e:cf:e9:7f:
d8:d5:07:49:9b:91:67:ab:8e:91:9c:08:30:8f:18:
6e:79:7f:02:bf:1b:a6:c0:7c:1b:2e:bd:42:51:02:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6B:EE:C5:83:75:D9:EA:C8:02:AB:06:07:48:B5:0C:92:A0:9E:2F
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:b9:5a:05:46:3b:37:a6:cc:57:6c:a9:36:2c:98:d5:71:
52:c3:82:ad:3d:68:17:7c:46:5a:7f:c1:e4:2c:7a:c1:f7:2f:
90:e5:37:2e:f1:a7:45:81:c9:0d:23:be:ad:9e:37:4a:f5:48:
d9:ef:c6:85:94:29:44:40:bc:82:5b:02:91:e7:c1:0f:f8:70:
6c:e4:00:a5:9d:4e:e4:7b:67:bc:6e:aa:68:c4:cd:94:c9:21:
11:77:77:8e:a7:bb:f9:57:bb:38:df:85:f3:b2:6c:ea:05:88:
8a:a1:c9:84:f7:4b:ca:04:d1:57:11:19:d2:d7:88:ff:21:c3:
96:29:7c:c8:c8:16:66:e0:5e:82:7a:b1:f1:c8:19:2e:51:06:
88:83:6a:44:80:7f:5f:fe:8f:87:8b:80:3e:d3:54:37:3b:9c:
de:d6:97:ee:67:47:8d:b2:98:2b:42:ea:b0:77:b2:de:2a:4a:
4e:93:65:f9:ca:0d:d9:9b:ad:52:53:a4:05:15:d6:5e:4c:b9:
c0:e9:96:2f:7c:39:db:66:27:7e:04:9e:47:8a:ca:32:bc:b2:
08:14:b7:ec:f4:e2:2a:8c:2f:cb:65:59:5b:f6:11:28:54:21:
cb:f7:1d:7a:c7:ea:a3:e6:73:df:b9:c7:39:02:2f:5f:32:88:
00:4c:37:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:54 2026 by rpki-client