Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: kRgAm4duln0NNxXOgcuxFzqjQdL1qI6ttBlFjnjJdz8=
Subject key identifier: 39:A6:07:E3:6B:F4:7B:5D:1B:D2:2B:CB:35:7E:50:08:87:C0:30:EB
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019D265FA58FEE39F7BAAC0672BC0B737258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0BA1
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: 0W7koZy5BE7PGwWBignaWVai/KSpbat4tRfs/WBVBOo=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a5:8f:ee:39:f7:ba:ac:06:72:bc:0b:73:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=39a607e36bf47b5d1bd22bcb357e500887c030eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:70:19:1c:b3:4a:37:75:01:b6:14:7c:21:50:
73:da:c5:a3:82:47:db:c3:8d:6e:83:14:70:fd:b3:
4a:15:bc:f4:2e:86:aa:6b:67:55:2d:f0:f6:39:aa:
8b:c1:3c:68:23:35:a1:3a:58:38:5b:0d:70:77:d1:
74:24:b6:0c:05:b9:91:47:c0:93:25:76:30:82:89:
c4:22:14:7b:b4:e1:ca:53:2c:cb:18:b6:b7:be:63:
95:e1:29:13:7e:39:03:82:d9:34:bf:c7:84:64:8c:
ba:b2:25:31:0b:be:ad:c5:7e:a4:34:b8:9b:c6:e6:
23:0a:47:d7:9c:fe:75:21:95:2f:b7:7d:f2:97:19:
91:99:71:88:18:f9:4e:a5:dd:6b:4b:5c:31:e3:d7:
29:e0:79:05:96:2d:8f:3f:0a:b0:8d:37:c9:46:86:
8a:e5:f6:8f:85:af:ab:56:34:bb:57:64:45:1d:c6:
8a:46:7e:b2:84:4b:48:b2:2c:e8:1b:5e:3e:53:1f:
fc:e7:47:de:fa:6b:08:f1:20:fb:df:66:dc:0b:11:
1d:f4:47:d1:a6:92:f2:8b:3b:cd:bc:6b:e4:29:bd:
aa:2b:a1:fb:03:1f:e3:ec:12:6c:18:59:d8:a7:7a:
49:af:ae:4e:2b:4c:f2:3a:f8:83:d0:9b:a6:ef:6f:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:07:E3:6B:F4:7B:5D:1B:D2:2B:CB:35:7E:50:08:87:C0:30:EB
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:ff:99:f7:6d:a0:36:10:85:9e:13:d2:3f:dd:71:0d:08:
02:53:24:25:c3:47:8d:9b:bb:e3:c7:4d:b6:f4:d0:d5:aa:06:
4f:24:60:b5:bd:a0:13:ac:4f:71:71:ee:45:bc:2d:f7:82:3b:
90:e9:2f:fe:d1:61:17:f7:a4:d4:81:2c:8d:fa:99:23:e3:22:
cf:57:5a:35:e6:e1:a5:73:81:e0:08:86:7f:99:df:b2:e5:9a:
6c:a1:76:b4:75:42:cb:a8:7a:1b:ba:b9:9a:27:d8:db:c6:be:
79:2b:36:a7:1e:3d:7c:c5:42:74:3f:f6:fa:1d:38:1f:9f:10:
c6:ec:e0:42:2c:29:dd:06:1c:3e:01:eb:a3:a4:61:7d:e7:ac:
ea:ba:91:a1:6f:b1:ff:29:d8:f7:dc:3b:bb:00:02:04:5f:3c:
26:d8:9c:5f:45:d0:b3:f3:56:46:65:89:25:bb:23:b2:cc:1e:
0a:71:21:87:05:35:df:d5:36:3e:cf:a7:36:46:1e:1b:b1:6f:
63:4c:74:87:f2:59:68:ba:c6:83:7e:77:a4:b9:95:24:42:38:
30:9c:62:91:8e:5a:ea:e3:09:82:43:dc:68:03:a3:c0:5c:9c:
5a:e4:fe:a6:a2:0b:06:72:8e:09:e3:39:79:99:cd:6e:12:af:
87:4f:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:31:50 2026 by rpki-client