Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 66YzYITpIyqK5qRFEab0L/iMY1hAQKxZMliMPiiVJ4Q=
Subject key identifier: C3:99:C3:AB:D9:3F:3C:DA:12:1B:3C:CA:5E:09:2C:87:FC:16:99:7F
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 019E1F481DCD4909C6F559C07C89E6E9BDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 0706
Signing time: Wed 13 May 2026 03:01:20 +0000
Manifest this update: Wed 13 May 2026 03:01:20 +0000
Manifest next update: Thu 14 May 2026 03:01:20 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: S02xjHfGpSji80haxwIJoVQi4Z2jedFQwFP3utoW/Ks=)
2: of5fvbBOl_2ZOya6SQ0xsXlOVng.roa (hash: FlPfu4dwMoPwrHiBDoZEfb7scYNLSD/+Wl4U6dL0V+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:1d:cd:49:09:c6:f5:59:c0:7c:89:e6:e9:bd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: May 13 03:01:20 2026 GMT
Not After : May 14 03:01:20 2026 GMT
Subject: CN=c399c3abd93f3cda121b3cca5e092c87fc16997f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:70:51:46:e1:6a:d9:2a:dd:a0:39:f1:5a:
17:5f:f4:9b:91:e8:e9:85:4f:b5:81:3d:57:43:85:
a9:c1:74:73:7a:98:e3:db:70:98:ea:9b:e1:f6:9a:
d3:32:f4:9f:2a:7f:34:c6:84:1b:cb:29:46:c6:8f:
88:c4:11:a2:20:f2:d6:b3:15:74:c9:be:62:d6:db:
e9:0b:02:79:3a:e7:a5:59:04:9f:c4:ea:7e:5f:f4:
47:7d:72:43:6a:ab:aa:b9:45:24:4e:d7:48:01:8e:
59:76:82:74:3c:d8:b3:14:03:ec:ba:f6:f0:73:cc:
33:34:35:2a:17:9d:90:73:d8:e9:36:b4:33:b5:c1:
00:ae:6b:15:75:b4:53:5f:65:3b:d9:08:19:26:b3:
ff:ae:41:b7:5e:eb:8e:f9:e8:cc:54:a6:80:a4:af:
39:7a:d0:06:9a:2a:06:29:94:61:66:2c:43:51:75:
18:81:a6:f0:e3:31:da:94:88:38:35:b3:ba:2b:f4:
8e:11:d7:ff:66:df:d4:9d:80:2c:28:4b:5a:20:15:
89:29:24:b0:19:a1:fd:3f:8b:63:54:91:09:84:6e:
4a:5d:2d:9b:2e:99:dc:93:07:39:55:71:f5:c2:a6:
16:14:93:4e:84:af:b9:c0:48:bb:4f:7d:f4:89:2d:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:C3:AB:D9:3F:3C:DA:12:1B:3C:CA:5E:09:2C:87:FC:16:99:7F
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1e:9b:be:b9:85:c2:4c:bb:9c:d2:c1:ea:70:17:69:9b:7e:
a6:bc:7b:6c:ec:3d:e7:15:8f:0c:52:f9:6d:c2:6f:ac:19:4c:
12:8c:40:8a:10:61:82:27:c7:c6:b4:9a:95:49:3c:d2:17:24:
68:45:9f:6a:c9:88:d9:cb:6d:d7:e0:65:11:26:1a:3b:8f:4e:
c7:7b:35:ae:cc:db:74:9d:9c:ae:0d:54:29:4a:7e:0b:93:cc:
24:27:66:11:33:77:6c:e7:73:0b:ba:11:e8:00:ea:a4:7c:1d:
a1:9f:cb:d5:57:33:67:33:d8:51:5c:8a:94:fa:a4:f2:9d:57:
9f:17:04:0e:24:2a:19:47:97:39:2b:04:44:3e:dc:38:c6:69:
39:72:a1:32:5e:ee:c3:07:c8:4f:70:39:7e:c9:6e:96:3d:30:
b0:db:f8:90:1f:f4:42:6e:a9:2f:af:30:a1:d1:5e:2d:bf:bc:
dd:48:46:ea:8d:5e:c2:b4:65:19:81:87:e0:be:5c:0f:26:e3:
86:3e:b8:24:fd:b1:9d:4b:ad:34:d5:ad:8c:26:70:81:8a:f4:
ce:12:c3:6d:df:f4:08:98:ef:65:a3:99:ea:cc:85:06:c4:92:
90:a6:49:4c:76:6f:5b:48:7d:a1:6f:dd:a3:b5:cb:a1:64:70:
77:58:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:39 2026 by rpki-client