Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: hCJh4A+ROEC9Yezlu/uUTxlb0azz/CtE8TeJzHdUW20=
Subject key identifier: 4A:8A:55:A8:7D:CF:58:7B:33:2E:B1:06:34:A2:82:5D:44:B2:FD:82
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 019D27A92E64787EEE8091D9B02C2E297AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 0FEB
Signing time: Thu 26 Mar 2026 01:01:32 +0000
Manifest this update: Thu 26 Mar 2026 01:01:32 +0000
Manifest next update: Fri 27 Mar 2026 01:01:32 +0000
Files and hashes: 1: BmTt_K_BLwv-pJIWhVhf0HoNBHI.roa (hash: 7LYJkFKH+ULhI+BQpkEXahBALgXPwOMMlmmdsz27u58=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: 7pfEXxAdRg8KfB+X5Dho5lV4eXjipX7hk4DURyGzVXw=)
3: Vgo75o1byZ75srMc1A2hc4DB5JM.roa (hash: qe0LN4rfy4gZig75QZhjlSmuXCiHXIfLzzagGqaLMRA=)
4: z3jiOX0l8XrsI6phSwPZ5D4UGqs.roa (hash: CcVgaMQKxvkfawhUGWzE3K5Xi3BSkw5Z4uMhoNWWbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2e:64:78:7e:ee:80:91:d9:b0:2c:2e:29:7a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Mar 26 01:01:32 2026 GMT
Not After : Mar 27 01:01:32 2026 GMT
Subject: CN=4a8a55a87dcf587b332eb10634a2825d44b2fd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:e8:3b:af:74:79:30:7f:4f:69:eb:aa:4d:
ed:e3:03:03:53:0d:86:ee:6a:ba:5e:0e:5e:ea:ed:
87:24:da:f0:16:90:5d:6b:b3:15:31:cf:4f:0f:5c:
af:73:eb:f3:63:78:33:d9:e5:e6:11:2f:af:b4:95:
dd:3e:2d:3c:08:ca:20:5d:0d:63:c7:a3:7b:97:91:
d2:2b:99:67:50:d1:30:e1:a3:2e:74:ad:3d:fc:f0:
e7:24:00:05:b8:08:a7:de:e3:97:8c:a5:64:24:21:
37:f0:7f:c1:69:2a:64:6d:66:c8:55:3f:35:e3:f9:
9b:1c:ca:c3:7c:f2:3b:cf:55:7f:d1:b2:d0:cd:d0:
d5:03:fb:f1:94:ea:e7:9a:a1:3d:a0:f3:a9:fc:0c:
f3:c5:b7:b6:d2:c0:45:b9:7d:e1:c7:b5:74:16:24:
48:3d:7f:18:c3:48:a9:52:b0:f5:bf:2c:39:3d:49:
2f:28:88:2d:a7:6f:d6:6b:7c:e4:a0:12:1f:17:68:
1c:0c:89:34:24:76:21:71:01:fe:b2:89:53:f2:4f:
45:40:a4:12:4b:af:5d:6e:43:a5:45:34:c0:90:8c:
55:b6:ef:7d:65:75:3c:b1:17:c3:0d:e9:a1:75:ce:
5c:1d:c9:07:1b:0d:44:2a:22:48:72:20:34:df:fc:
47:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:55:A8:7D:CF:58:7B:33:2E:B1:06:34:A2:82:5D:44:B2:FD:82
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b9:10:b1:f8:35:0f:40:fd:29:cd:53:1b:9b:0f:30:10:e6:
59:21:d0:2a:5a:26:41:b1:c9:7b:07:0f:3a:28:95:2a:9b:39:
3d:8e:b7:ba:b6:9e:f6:9d:a1:c2:10:f0:3c:7b:b2:64:ac:58:
e6:10:ca:68:2d:86:98:62:44:b9:14:d3:1c:e9:12:9b:a6:ac:
f8:77:72:7b:14:2f:9e:72:ae:2a:5c:d4:21:06:6b:77:8e:70:
32:fd:d6:8f:79:5b:6a:ac:17:cb:f4:23:dd:aa:f7:8e:63:f6:
d7:46:fe:b2:47:1e:92:7c:38:7f:ba:de:ab:19:d0:bf:ab:1c:
41:d6:0b:b3:87:0c:1c:a1:ed:3e:7f:69:be:cb:a6:65:bb:62:
bb:dd:d4:0e:76:44:10:a6:63:54:04:19:32:6e:ad:37:52:5a:
3f:d0:57:d0:d2:dc:dd:e6:96:89:91:32:7b:bf:3d:8b:f7:cf:
59:ff:db:df:dd:24:7d:0b:f8:fb:a2:e7:15:f6:76:e2:2d:1b:
9a:e2:2a:e4:fa:e1:ee:7a:3a:1e:1f:23:b3:f3:4a:81:3b:7d:
ab:21:19:b7:c0:aa:6e:19:0e:fa:93:43:f5:7c:b7:cb:d3:f1:
93:f9:d1:33:67:b1:31:92:d1:a6:e1:c0:a9:ca:87:41:da:1a:
a1:24:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:56 2026 by rpki-client