Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: BGfMk+KVikq//jGBOtNmAYF9aZKtFYGEFF3umArPQCo=
Subject key identifier: B6:5D:8F:37:76:72:91:55:48:27:54:8E:ED:0D:2F:1E:E9:5C:37:A4
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01A1DF4C29B010E3A12E1D68B1222F9C65FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0E13
Signing time: Sun 15 Nov 2026 13:01:12 +0000
Manifest this update: Sun 15 Nov 2026 13:01:12 +0000
Manifest next update: Mon 16 Nov 2026 13:01:12 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: I/NWkJQBbXHJqp/u0uxRX/dx02p2fXZT1YDN3Dd456A=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:29:b0:10:e3:a1:2e:1d:68:b1:22:2f:9c:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Nov 15 13:01:12 2026 GMT
Not After : Nov 16 13:01:12 2026 GMT
Subject: CN=b65d8f37767291554827548eed0d2f1ee95c37a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:b8:1d:aa:fe:0c:8b:0c:03:ff:46:eb:71:
98:89:90:2f:fa:7b:f6:76:6c:a9:6e:cc:d8:7e:53:
c6:6f:12:97:00:60:ec:2b:a2:31:86:89:35:61:e8:
40:ea:7d:2f:7f:49:18:47:be:c9:ed:fe:a9:d8:a1:
a3:0c:ed:fb:6e:fa:cb:c8:2b:dd:02:d9:40:97:0e:
ef:84:ea:91:80:db:17:1f:4c:dc:d7:67:f4:b2:1c:
fd:71:cd:06:72:8c:5a:cd:d9:1f:7b:ad:c5:41:d4:
64:5c:0e:be:f9:1e:2f:f2:27:d4:79:dc:63:90:77:
51:78:5d:33:f6:42:60:bd:56:bd:30:ce:f0:1b:36:
90:ef:64:f1:be:66:06:78:e6:3f:50:8b:98:4d:7a:
b5:d6:0c:15:65:8c:d7:39:3b:c0:cf:ab:e9:fb:f8:
1a:11:56:f7:9b:ba:80:3a:e1:6d:1d:3f:63:cc:59:
0f:fe:a9:44:54:ce:47:6d:cc:dc:c9:2a:b2:6a:01:
e0:b7:2b:cd:e0:d0:49:10:c7:c0:5a:4a:5e:ba:13:
93:e4:18:f8:a5:01:a4:35:53:28:9d:82:b1:3f:67:
61:0e:7b:a4:85:30:fe:55:76:6c:fd:48:f5:25:38:
ed:2c:7e:9e:be:41:5d:96:7d:1d:98:67:8a:98:e2:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:8F:37:76:72:91:55:48:27:54:8E:ED:0D:2F:1E:E9:5C:37:A4
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8f:ed:99:14:41:92:81:60:67:24:5f:b3:c8:ae:24:bf:37:
1f:10:96:d4:40:9c:84:ed:d9:56:fe:70:eb:4f:c4:27:a1:6a:
ed:c1:16:43:5e:04:69:0d:c5:ea:ca:7a:df:13:d1:80:c4:7f:
6e:ac:6a:c5:cf:db:63:6c:2f:5c:c1:9e:4e:5b:3e:0a:23:af:
99:e3:02:61:79:b9:39:26:1f:6f:75:46:ba:0d:a3:85:70:8e:
75:b1:8f:18:30:6e:df:7d:cf:88:11:3d:c6:44:eb:be:69:89:
da:63:86:a8:ba:6a:7b:6e:5d:90:cd:0e:41:02:4d:d2:8d:0e:
67:63:77:8c:87:61:f1:49:b1:c0:82:b7:bb:3e:f0:9d:1c:37:
1d:1e:99:81:b3:aa:80:2d:5a:95:68:4c:bd:da:2b:81:96:38:
0b:c3:91:b2:bf:e0:77:ce:26:b6:b5:88:55:1a:57:c6:6d:16:
1a:c9:89:3c:5f:a1:ae:17:e0:8b:81:b9:a4:c3:7a:42:0d:b2:
b0:05:c9:fd:9b:7f:bc:91:42:e0:68:62:32:01:9c:e1:77:a3:
c6:ec:ea:e2:70:f5:e8:e5:ac:8b:c5:a4:4e:39:f9:ed:9c:95:
c5:f7:43:65:2f:3c:9c:e0:5d:71:5f:89:73:79:72:0f:12:33:
3b:a0:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:25:32 2026 by rpki-client