Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: R3waOabiFUceDbaQ/uKGGw9x7QQMDAdZL4S01Hns2po=
Subject key identifier: 21:6B:FD:AF:23:A7:2E:7C:29:4F:44:AF:4C:71:99:BA:F5:1C:5F:7A
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 019E1D22ED83DA87479BC4FEA720DC3CE9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 07AE
Signing time: Tue 12 May 2026 17:01:28 +0000
Manifest this update: Tue 12 May 2026 17:01:28 +0000
Manifest next update: Wed 13 May 2026 17:01:28 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: m/agNdy+ojozrLWcNdFA/XQWuR4z0GqgPYTWUFgU/TE=)
2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ed:83:da:87:47:9b:c4:fe:a7:20:dc:3c:e9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: May 12 17:01:28 2026 GMT
Not After : May 13 17:01:28 2026 GMT
Subject: CN=216bfdaf23a72e7c294f44af4c7199baf51c5f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:df:04:53:1b:80:5b:7b:9e:40:d2:fd:99:
1f:e1:93:49:5b:76:3c:40:46:51:a9:bc:80:c2:d6:
8d:7d:0e:99:b9:92:a8:5a:85:70:70:17:a2:b2:e9:
ee:5f:04:1e:b2:9f:32:e4:f9:d9:d2:78:2e:77:b2:
40:97:83:05:c6:83:9f:32:cc:26:a2:87:74:3e:d8:
bf:db:ea:46:ab:11:17:c9:0c:b1:27:e0:f5:8b:10:
2a:eb:40:fb:1d:c2:c5:c2:4f:10:f4:c3:11:fd:ba:
db:2e:d4:6e:f9:78:d4:39:76:9e:03:85:c2:16:44:
7c:47:60:7b:ac:6f:d1:ce:67:19:97:75:d7:16:37:
f5:6e:38:c2:b2:72:e9:d1:a4:02:e5:4e:d0:b6:40:
9a:6f:ee:dc:2a:b8:e4:6e:7c:68:92:59:49:2a:fd:
d3:3b:5a:dc:c5:8d:3f:66:e9:64:d0:e0:3a:2d:a3:
0d:9b:55:a1:00:d0:dc:04:01:54:89:b7:1c:50:ab:
33:7f:94:45:5a:58:b3:1c:ab:81:58:f2:12:64:60:
5e:91:83:1d:57:21:9e:8b:ff:10:84:68:12:16:1b:
e2:80:28:c2:8c:d9:f6:53:e8:c4:31:10:12:14:f9:
8e:79:55:c9:30:59:f2:ef:bd:21:87:8d:c5:57:b5:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:FD:AF:23:A7:2E:7C:29:4F:44:AF:4C:71:99:BA:F5:1C:5F:7A
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0d:ea:32:b4:62:4e:32:29:55:52:c3:61:fc:bf:4e:84:dc:
bc:df:98:09:b3:dd:27:fb:a6:bb:1a:2c:a5:fd:61:64:30:00:
79:f3:c8:e9:af:a7:f9:c3:4f:fb:0b:3b:39:1a:e8:d3:f8:f7:
4d:dd:3c:9f:83:09:67:c7:d4:31:22:58:08:30:61:8c:9f:e0:
69:e6:f2:bb:15:4b:d6:3f:db:f8:ca:d5:d0:fb:b3:9c:d1:7c:
89:c6:c8:d9:27:e9:d0:8b:4d:fc:e1:a3:6b:9a:8e:f9:0d:dc:
d0:ba:b3:fa:6d:0c:3e:fc:ea:14:44:c5:84:3a:5a:54:42:11:
81:57:01:34:e0:f3:5e:b1:ce:93:6a:46:c0:b1:ce:8d:0d:b5:
be:1f:1b:76:8f:62:96:a5:f0:3b:47:38:59:be:16:c7:ac:64:
87:1b:4a:ca:f3:47:3b:52:71:54:79:97:d8:bf:1b:72:53:98:
cc:8a:6f:72:9a:98:d3:63:7f:e7:2e:de:a1:1e:25:a7:47:37:
6e:6b:c8:ad:5f:25:5b:f1:b3:51:72:a5:4c:ed:fb:80:4a:e8:
c7:00:16:eb:cc:0b:80:bb:4a:18:11:70:39:19:40:a9:f2:6a:
0f:fe:71:05:f0:66:84:ad:5a:24:28:eb:36:9b:43:a8:3f:33:
03:ce:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:42 2026 by rpki-client