Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: nGkomycI8FIUFCnw7fFt1tQLBwMD0gAz8SuSILOOYPw=
Subject key identifier: B2:A4:7E:EC:37:CD:A8:22:D7:F4:F2:DA:2A:85:D4:1B:D3:1A:42:9A
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019F9248A645971DC14BE04CAACB9CBB4EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0CE2
Signing time: Fri 24 Jul 2026 04:01:02 +0000
Manifest this update: Fri 24 Jul 2026 04:01:02 +0000
Manifest next update: Sat 25 Jul 2026 04:01:02 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: oZ9K/auHRLnJl+zRDVO4Ef/LQaoPkAA26KC+A7sBnvU=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:a6:45:97:1d:c1:4b:e0:4c:aa:cb:9c:bb:4e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jul 24 04:01:02 2026 GMT
Not After : Jul 25 04:01:02 2026 GMT
Subject: CN=b2a47eec37cda822d7f4f2da2a85d41bd31a429a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:e1:67:2b:89:7f:ea:1e:c8:bb:79:23:2d:
14:fd:79:89:1d:7c:dd:85:ca:00:ee:ca:ef:92:1b:
14:ef:f9:49:f6:3d:73:9d:3e:8e:2a:59:d1:15:e8:
95:18:7b:ac:57:e0:74:40:82:65:ac:b3:a2:a3:3e:
ba:75:a3:f9:b2:55:8a:11:b7:35:a1:65:24:e7:30:
b2:b7:41:75:5a:40:61:9a:0f:aa:18:e8:e8:95:b6:
4b:26:92:9f:48:f3:2e:66:b3:01:00:70:cb:2b:4f:
e4:fb:04:7a:4f:d2:27:20:46:3f:ce:ae:7d:ac:ae:
2f:06:81:77:19:e3:e4:6b:5f:4b:5e:82:1f:69:45:
21:c6:f4:64:9b:bb:de:20:e9:fb:12:73:14:47:26:
b6:49:11:0f:44:2a:84:37:08:cd:b6:fc:0b:6f:57:
33:d5:f3:9a:15:12:ba:ff:ab:8e:24:99:69:a1:8f:
d6:15:b4:28:80:be:de:1d:9e:74:7c:03:c7:62:9c:
89:54:b7:6e:60:d7:d4:50:0f:6f:17:8d:1b:e0:9e:
96:78:50:bd:33:5e:6c:f1:a6:fe:63:d1:86:4b:da:
74:a7:b2:f7:2b:0a:a1:dc:f5:3a:5e:d0:77:c5:b6:
65:53:c7:f4:21:ef:4f:2f:37:03:31:82:32:06:b9:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:7E:EC:37:CD:A8:22:D7:F4:F2:DA:2A:85:D4:1B:D3:1A:42:9A
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:9b:6f:98:21:e8:a7:20:e3:78:5e:77:cd:73:8c:f8:97:
8c:00:b8:70:bb:81:44:8e:7e:05:0c:86:65:8d:09:af:99:14:
fe:66:8e:f5:70:96:32:27:74:de:35:1b:8f:46:4e:5b:65:e7:
78:a7:08:84:c1:b4:d8:4d:fd:e1:dc:d0:bc:f5:97:1b:8d:68:
28:fa:5f:12:ad:88:ef:db:8d:aa:54:85:f8:59:ce:38:52:33:
da:fd:b2:1d:e9:fa:a8:34:77:11:7f:32:50:22:2d:00:ab:82:
8c:a2:ae:bb:bf:f0:31:87:28:07:31:60:3f:64:7a:ca:ed:73:
c5:1f:8c:27:b0:b1:9a:48:2f:7b:33:82:26:fd:19:93:38:f5:
24:69:82:33:ba:9a:26:a2:93:3d:fa:86:16:36:bf:36:c2:29:
7b:8a:26:15:3a:15:da:71:0e:58:13:59:37:43:cd:b9:f5:58:
df:16:0f:34:76:b0:2a:28:d6:3e:f0:f0:65:83:ac:13:ef:e2:
1a:c7:7e:21:fa:43:54:06:0b:16:c2:94:26:8c:24:b2:ea:28:
83:ce:ae:41:5b:f9:a8:6a:c4:c4:7e:50:e2:8c:4b:fd:ae:70:
18:58:7b:f0:90:ca:46:67:26:bc:e1:d1:6b:ad:23:58:dd:fe:
31:70:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:19 2026 by rpki-client