Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: JMwagsg1s1lCsOqpiHZ/B0sM2oJnq9huzlGqtpwQBiA=
Subject key identifier: C2:95:7B:35:35:4F:EB:09:58:E5:4F:A6:F7:D9:63:4B:4A:CA:13:29
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019D2AE0D943597F1A7B4B47309656A5F987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 12A5
Signing time: Thu 26 Mar 2026 16:01:11 +0000
Manifest this update: Thu 26 Mar 2026 16:01:11 +0000
Manifest next update: Fri 27 Mar 2026 16:01:11 +0000
Files and hashes: 1: 8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa (hash: E0JF7X9/XHoU7PiFgFPjp+o209rtD/x1WqRQ5NKbHU0=)
2: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: WhTVo1nObCXg2KzE5wLVPFbZ3/q6MgE8umd62so5Qe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:d9:43:59:7f:1a:7b:4b:47:30:96:56:a5:f9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Mar 26 16:01:11 2026 GMT
Not After : Mar 27 16:01:11 2026 GMT
Subject: CN=c2957b35354feb0958e54fa6f7d9634b4aca1329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:20:b0:d9:5c:3f:21:f2:69:e7:ee:79:ec:
e1:3c:3b:49:45:53:b5:e0:2a:36:18:9f:bc:cb:46:
8e:e2:ac:e5:c8:38:4f:00:46:bb:16:7f:e2:90:98:
c0:fb:5f:d5:0c:3a:df:97:7c:59:1d:b2:d0:a7:f9:
3e:e1:f6:d1:7d:01:cf:44:86:81:5f:8f:69:13:c9:
0d:6e:d5:3f:fb:65:fe:e4:61:1c:b9:42:4a:36:69:
88:08:6b:5d:3e:11:59:1c:c3:2a:d7:7a:17:8f:1b:
e1:d2:21:35:77:db:1f:c3:d4:00:48:e5:16:20:06:
44:f7:e5:e8:3d:9b:f4:db:3a:7e:61:b0:0f:3c:d7:
f5:29:39:93:22:7c:e2:3f:88:e2:4a:cf:fb:f1:1c:
d4:07:38:9f:62:df:5a:7a:89:0b:00:76:60:55:0c:
77:26:e9:50:bc:b4:8e:3e:6f:5e:dc:84:4c:35:c7:
68:c9:4e:70:55:16:b7:18:c4:28:e4:4c:4f:93:d7:
06:5c:f6:39:3e:8f:7e:55:7d:3f:f6:22:d8:70:da:
fb:3d:81:ab:25:8d:0b:c5:08:2a:9e:d5:fd:dd:06:
98:ce:a4:17:c7:62:e2:7b:d7:ff:eb:53:e8:33:ac:
5c:9d:47:f8:d3:88:65:95:7e:d6:a1:ac:33:ad:82:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:7B:35:35:4F:EB:09:58:E5:4F:A6:F7:D9:63:4B:4A:CA:13:29
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:b1:de:10:6b:af:57:fa:ac:19:15:26:a3:99:77:b7:16:
6b:99:17:82:d3:9d:c8:77:88:67:67:17:82:83:4c:29:48:54:
fb:51:67:68:9a:73:55:4c:d7:5c:b4:18:7a:02:cf:7e:f9:a6:
d8:0e:6c:d5:f0:12:ac:7f:39:ce:ec:b1:b9:f6:28:c8:0c:56:
60:ae:cd:56:4d:86:1f:cb:44:d6:0a:7e:9a:df:89:c1:76:c1:
a4:82:6c:b0:39:d0:e7:4a:f7:03:23:26:8c:d0:f6:60:08:df:
d0:bf:83:b2:9d:c5:d7:7f:16:ba:70:83:75:b9:7e:6f:8b:d5:
a4:08:e7:45:21:c0:3b:47:64:26:b1:e5:2f:1a:e7:56:fa:06:
92:ef:5c:82:40:f1:f8:63:27:61:06:18:97:9d:a9:31:ce:a8:
3e:1f:4c:9b:82:7b:53:c2:93:49:6f:49:bb:2e:f1:a0:67:0a:
f7:39:95:74:9d:59:4f:7b:33:3a:a5:c8:56:47:8b:8d:8b:53:
42:4d:3e:cd:94:4f:f7:06:2a:3a:1e:e2:61:71:ec:ed:ad:5d:
67:46:71:09:57:76:be:1e:bb:79:b5:ce:d6:3f:aa:30:c7:51:
7d:75:7b:b2:17:d9:56:ab:6e:ae:fa:69:5b:64:73:2f:86:54:
04:4f:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:47 2026 by rpki-client