Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: wf6VSVjkJJyZgua8vtcBB1kLB78iUsKFReQazycSqdY=
Subject key identifier: 7F:9F:23:6B:7A:48:2E:D9:5D:F2:9A:9E:94:7C:F6:AE:16:04:1E:B7
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019D29608C343F865402288FD3D40E169246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: Jx2x7lAmjCvLzNbZC3QClagTu2ecscWKpZRlPIpKGbA=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8c:34:3f:86:54:02:28:8f:d3:d4:0e:16:92:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=7f9f236b7a482ed95df29a9e947cf6ae16041eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:04:10:49:d7:54:09:39:eb:79:7e:7f:0a:
65:3a:c3:10:d8:e4:08:c4:d4:b8:d5:5c:69:ba:d1:
64:31:6e:79:17:ff:54:78:10:f2:6e:a4:d8:4f:6a:
ce:e4:8d:88:f2:6b:8c:76:21:98:2e:e2:c3:a6:6b:
f2:1b:08:b9:e9:2d:ab:bd:47:47:fa:bf:a3:6a:49:
93:73:3b:67:94:94:6d:69:9d:1f:d3:93:21:be:cf:
ba:b5:26:4c:b9:bf:0a:9c:66:ff:b1:ff:df:bf:08:
18:45:8a:93:ef:94:08:13:bc:da:e0:01:60:8e:2b:
13:5c:0f:39:64:34:b4:4a:68:10:27:f4:62:4a:0c:
1e:40:3e:de:34:2e:57:ec:f3:03:27:46:f0:01:a4:
c0:b4:cd:96:61:f1:f6:84:1c:60:ed:3a:45:1a:46:
80:b9:2b:4c:5e:2a:d0:7d:77:fc:a8:62:f2:13:9f:
10:42:98:4f:36:c1:63:0d:ab:53:29:68:a5:2c:42:
a6:a5:a1:34:e1:4b:9d:af:59:0d:9a:bf:a6:85:00:
34:18:32:41:79:42:63:f3:9b:58:51:1c:4c:d1:66:
93:63:d1:6e:1b:a2:35:f8:83:cf:74:97:f6:88:c5:
7b:13:c6:60:66:b7:97:d4:2f:da:31:4f:94:44:8d:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9F:23:6B:7A:48:2E:D9:5D:F2:9A:9E:94:7C:F6:AE:16:04:1E:B7
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:29:fd:06:79:ae:4c:df:91:a4:ab:4d:11:38:90:40:2e:
b0:d0:f1:e0:64:45:a1:8c:09:19:69:94:21:32:ca:96:51:bb:
45:4f:f1:b4:ed:f8:90:83:88:cf:4e:58:00:e8:df:05:ef:02:
93:a3:fb:9c:2f:36:69:06:79:e8:9b:b2:01:85:3b:40:7a:57:
64:c7:0e:dc:98:34:cc:39:ed:c2:e6:ca:9b:12:4d:c9:2b:98:
53:8f:e8:ec:53:8e:c3:9c:31:55:f9:f0:88:08:b3:49:bb:1b:
3a:49:65:04:f5:f6:34:62:d3:20:05:09:2c:33:8f:44:86:32:
c6:1d:e7:d7:dc:a4:a4:51:7a:18:f1:b6:18:ad:3d:81:9d:34:
e9:93:83:bc:57:15:28:76:96:55:4c:30:ce:56:1b:94:79:72:
7e:17:bc:e4:18:01:f9:04:0d:4a:c7:71:27:e2:a2:f2:73:5e:
18:47:b0:46:0b:c6:2b:31:15:d9:6c:94:6d:30:58:a1:98:80:
2e:0a:5c:45:d9:c6:9f:fe:90:25:4d:68:d6:ea:7d:28:70:1e:
11:b0:a3:aa:91:82:ce:c5:a8:23:3d:eb:e4:b0:b3:e3:0e:f4:
64:a9:39:9e:d2:d8:84:dd:d2:35:fe:a1:7c:e2:7f:c7:a7:e0:
22:91:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:26:43 2026 by rpki-client