Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: IMRzzBFJ/3glYMe1y9xxht0g8N9CcueSLxb5nGlgODk=
Subject key identifier: 42:4B:20:50:C7:D5:41:09:5A:87:F3:8C:D6:2C:B8:37:F1:BE:76:26
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019E1D90B55E8E735567EFD5EEB5893717DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0C21
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: alFkCRzkWeZUiSP6110dOC5BknonH/OreXNDahX7Ss8=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b5:5e:8e:73:55:67:ef:d5:ee:b5:89:37:17:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=424b2050c7d541095a87f38cd62cb837f1be7626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:ca:37:30:29:36:a9:97:9c:63:ef:1f:9f:
b3:f2:35:3f:23:82:0f:56:2f:c1:2f:a3:e3:4b:39:
96:f8:c0:b1:2c:37:b0:48:77:9f:72:30:9c:4e:8a:
4e:a1:6f:df:ca:22:6c:54:12:5e:d3:01:36:7d:f0:
c2:ad:10:2b:b2:00:d7:c4:76:5e:2e:d2:e6:b3:fc:
12:bd:9c:88:3d:5e:33:d6:17:bc:ac:31:2c:05:dc:
e2:b4:3d:7a:2e:43:f0:31:e6:1d:42:3d:be:b2:65:
b7:f1:24:cd:a3:f5:1e:df:dc:ab:5d:a5:ca:6e:f7:
4b:f7:ba:af:33:99:99:ef:20:fe:6a:2d:fa:ef:cc:
cb:bf:83:76:e3:e7:53:d8:85:0b:b2:9d:66:a6:65:
49:58:35:a1:44:27:ce:fa:0c:36:9a:b4:36:9c:19:
86:5f:7f:39:1b:5c:23:53:b5:a1:79:d3:7b:1a:b0:
43:c4:7a:14:9e:2e:98:00:94:41:64:f8:6c:54:26:
44:19:0f:3f:78:b6:65:fc:be:58:ee:9f:a8:36:69:
f4:75:f8:e0:95:7f:46:dd:2d:45:c7:50:db:f7:be:
ad:81:6a:81:f5:c5:60:ce:b5:99:b3:09:a6:91:9f:
53:44:06:f6:71:00:a2:3e:0a:03:43:12:31:8f:a8:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:20:50:C7:D5:41:09:5A:87:F3:8C:D6:2C:B8:37:F1:BE:76:26
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:61:99:14:15:37:cb:f3:b7:0c:64:69:5b:b4:5c:c2:23:
16:a3:43:dc:e0:9a:19:90:3c:42:ea:d7:ab:d6:f5:78:f3:84:
76:be:72:54:5f:d3:d4:8c:1d:3e:c6:56:00:08:d5:6b:ae:57:
5d:a4:34:70:02:09:18:52:ab:2a:86:6c:8f:14:d3:58:72:a2:
cb:21:99:29:c8:0b:66:48:4a:9c:44:9c:4f:5f:9e:c4:0e:06:
85:e7:d9:18:f6:8e:92:23:df:a2:28:40:f1:4b:74:d6:fc:c5:
18:2a:ef:b6:37:f6:6b:78:35:d0:8d:7a:b9:04:97:d8:9d:7a:
44:4b:c7:0e:73:4b:5e:73:b8:92:91:89:02:97:54:c8:a3:d4:
b5:7b:6f:a1:42:c0:2c:1e:d2:b0:83:bf:83:54:80:51:13:e4:
56:22:bb:85:79:eb:a6:2f:2c:5e:d0:24:ba:d6:ec:9f:e1:49:
af:ac:ab:bf:be:85:d4:66:2a:49:00:02:15:48:0f:30:9f:46:
a9:0b:40:61:dd:99:e2:0d:05:58:33:8c:9b:d9:1a:b7:46:8c:
24:86:d6:48:ef:9d:b0:e8:48:70:6b:8c:0c:e4:8a:2a:09:78:
f7:72:02:7a:01:0a:0c:ae:68:11:fa:81:e2:33:9d:cf:b1:4a:
c3:f4:36:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLVejnNVZ+/V7rWJNxfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjYwNTEyMTkwMTIzWhcNMjYwNTEzMTkwMTIzWjAzMTEwLwYDVQQD
Eyg0MjRiMjA1MGM3ZDU0MTA5NWE4N2YzOGNkNjJjYjgzN2YxYmU3NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra7KNzApNqmXnGPvH5+z8jU/I4IP
Vi/BL6PjSzmW+MCxLDewSHefcjCcTopOoW/fyiJsVBJe0wE2ffDCrRArsgDXxHZe
LtLms/wSvZyIPV4z1he8rDEsBdzitD16LkPwMeYdQj2+smW38STNo/Ue39yrXaXK
bvdL97qvM5mZ7yD+ai3678zLv4N24+dT2IULsp1mpmVJWDWhRCfO+gw2mrQ2nBmG
X385G1wjU7WhedN7GrBDxHoUni6YAJRBZPhsVCZEGQ8/eLZl/L5Y7p+oNmn0dfjg
lX9G3S1Fx1Db976tgWqB9cVgzrWZswmmkZ9TRAb2cQCiPgoDQxIxj6gQFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJLIFDH1UEJWofzjNYsuDfxvnYmMB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqdhmRQV
N8vztwxkaVu0XMIjFqND3OCaGZA8QurXq9b1ePOEdr5yVF/T1IwdPsZWAAjVa65X
XaQ0cAIJGFKrKoZsjxTTWHKiyyGZKcgLZkhKnEScT1+exA4GhefZGPaOkiPfoihA
8Ut01vzFGCrvtjf2a3g10I16uQSX2J16REvHDnNLXnO4kpGJApdUyKPUtXtvoULA
LB7SsIO/g1SAURPkViK7hXnrpi8sXtAkutbsn+FJr6yrv76F1GYqSQACFUgPMJ9G
qQtAYd2Z4g0FWDOMm9kat0aMJIbWSO+dsOhIcGuMDOSKKgl493ICegEKDK5oEfqB
4jOdz7FKw/Q22A==
-----END CERTIFICATE-----
Generated at Tue May 12 23:05:17 2026 by rpki-client