Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: MPH/TLHs+OsEozazvvEc0I35Njq6PzNDMNsnBMLwpTM=
Subject key identifier: FE:99:84:10:AE:45:E6:DD:06:04:9A:32:D8:3B:05:DC:EE:B0:16:F1
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 019D25F192D2F08FCD5EEA5D90F340D4081D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 072E
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: ohoty8t7DOilGCILIv8YcbICuHZn2ZpqjQa288ACheg=)
2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:92:d2:f0:8f:cd:5e:ea:5d:90:f3:40:d4:08:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=fe998410ae45e6dd06049a32d83b05dceeb016f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:ea:21:1b:1b:66:7a:1e:ea:8b:2d:fc:7f:
a8:0e:1e:32:96:e3:9f:9c:c5:ca:e9:93:bb:22:83:
96:31:6e:00:0e:48:ea:10:22:ec:6d:f7:10:ff:a1:
11:1b:80:22:96:2f:ce:b2:bb:c4:c4:68:e3:97:18:
69:62:bc:f9:bb:ab:48:cd:56:37:34:38:cb:15:2d:
17:de:4c:32:3c:28:10:5b:69:fb:8d:ef:13:60:a3:
26:6e:45:32:c6:b8:75:ed:be:b6:f0:04:52:93:0a:
11:4f:a3:13:a1:fc:5d:be:79:bc:7d:d0:24:b1:60:
17:99:cc:85:63:b0:d8:e5:b1:c8:88:4b:6e:02:7a:
29:42:d7:8b:5d:25:27:a8:85:5e:46:fb:9c:66:05:
44:9c:26:a9:2c:34:02:80:36:fb:0c:4d:05:23:d6:
2a:4c:7b:70:fe:0b:d2:6f:5a:03:72:b9:98:78:8a:
f7:40:ff:e7:f3:c9:42:0e:68:31:11:f4:76:61:23:
29:e7:28:d3:fb:f1:6b:d5:a7:8a:4a:40:47:04:63:
83:4e:39:51:43:7f:c5:b3:e3:cb:5c:1d:0e:80:3b:
a5:3b:be:e9:43:d7:9c:dd:4c:05:15:33:e2:a8:74:
32:61:67:29:85:68:31:45:d5:9d:fa:03:a5:e8:b3:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:99:84:10:AE:45:E6:DD:06:04:9A:32:D8:3B:05:DC:EE:B0:16:F1
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fa:3b:b5:aa:43:4e:12:22:36:36:c0:31:03:79:52:2b:ed:
81:35:eb:2d:7c:e9:e4:ef:80:2e:58:00:6b:bd:95:a5:05:31:
26:8b:74:8e:aa:8b:ed:f6:67:a7:67:fb:a4:80:e7:6c:cd:43:
3b:94:61:19:58:5b:8a:55:53:71:bf:ce:09:a7:51:fc:3e:b8:
23:c2:bd:79:1d:fc:bd:64:76:dd:50:ce:db:7b:33:f8:91:b8:
e4:18:6c:29:cd:1e:c7:af:8c:9c:5e:6a:47:37:2c:29:7b:e4:
df:59:4b:c9:80:0c:17:0a:38:1a:14:db:1c:94:93:5e:8e:c7:
c8:0c:45:b8:86:5c:7e:18:00:3b:d3:89:de:3b:39:00:69:f8:
45:e9:10:a5:0c:3f:b8:f0:d9:84:f8:0d:a3:55:cc:8d:9f:50:
83:50:81:53:cc:65:af:16:a7:89:10:9f:db:9d:01:d4:c1:38:
06:56:31:0d:c5:a7:10:de:a8:e7:e6:6d:68:a5:45:35:91:7f:
39:07:0b:61:fd:06:ee:6e:35:36:5e:82:96:0f:3f:07:cf:05:
21:98:1b:b7:47:c9:d5:a7:a3:06:a7:e4:06:27:e6:03:c4:6b:
97:60:cf:f8:9c:81:85:a2:e9:fa:25:da:e9:e7:15:93:11:57:
8b:98:26:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8ZLS8I/NXupdkPNA1AgdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZWE5NzQ3YmQwMWE0NTdmYTJiYjAyZmNjMGFjODIzMTQw
YjUxOGYwHhcNMjYwMzI1MTcwMTIxWhcNMjYwMzI2MTcwMTIxWjAzMTEwLwYDVQQD
EyhmZTk5ODQxMGFlNDVlNmRkMDYwNDlhMzJkODNiMDVkY2VlYjAxNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNPqIRsbZnoe6ost/H+oDh4yluOf
nMXK6ZO7IoOWMW4ADkjqECLsbfcQ/6ERG4Aili/OsrvExGjjlxhpYrz5u6tIzVY3
NDjLFS0X3kwyPCgQW2n7je8TYKMmbkUyxrh17b628ARSkwoRT6MTofxdvnm8fdAk
sWAXmcyFY7DY5bHIiEtuAnopQteLXSUnqIVeRvucZgVEnCapLDQCgDb7DE0FI9Yq
THtw/gvSb1oDcrmYeIr3QP/n88lCDmgxEfR2YSMp5yjT+/Fr1aeKSkBHBGODTjlR
Q3/Fs+PLXB0OgDulO77pQ9ec3UwFFTPiqHQyYWcphWgxRdWd+gOl6LNpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6ZhBCuRebdBgSaMtg7BdzusBbxMB8GA1UdIwQY
MBaAFCXql0e9AaRX+iuwL8wKyCMUC1GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjIt
MDE2ZDZkY2ZhZDgxLzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80ZmVmMDAtOTA4ZS00NDNjLTlmZjItMDE2ZDZkY2ZhZDgx
LzEvSmVxWFI3MEJwRmY2SzdBdnpBcklJeFFMVVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePo7tapD
ThIiNjbAMQN5UivtgTXrLXzp5O+ALlgAa72VpQUxJot0jqqL7fZnp2f7pIDnbM1D
O5RhGVhbilVTcb/OCadR/D64I8K9eR38vWR23VDO23sz+JG45BhsKc0ex6+MnF5q
RzcsKXvk31lLyYAMFwo4GhTbHJSTXo7HyAxFuIZcfhgAO9OJ3js5AGn4RekQpQw/
uPDZhPgNo1XMjZ9Qg1CBU8xlrxaniRCf250B1ME4BlYxDcWnEN6o5+ZtaKVFNZF/
OQcLYf0G7m41Nl6Clg8/B88FIZgbt0fJ1aejBqfkBifmA8Rrl2DP+JyBhaLp+iXa
6ecVkxFXi5gmiA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:43 2026 by rpki-client