Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: GW8HCmbt2Ov6f+ANZNDLkwwEv5Lain2T/t2lLc4q+1Y=
Subject key identifier: 8E:B4:42:8E:7F:7F:3F:3B:31:12:EA:92:35:FB:8E:ED:0F:18:0C:06
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019D26CD8074645335556B7CA86BAAE66CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 15E2
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: jxb3cQTQ/82fbUjDDO9QWRSvQOhO/gIqf9fi2djOebU=)
2: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (hash: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk=)
3: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (hash: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:80:74:64:53:35:55:6b:7c:a8:6b:aa:e6:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=8eb4428e7f7f3f3b3112ea9235fb8eed0f180c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:cc:87:75:ac:ce:cb:50:30:ef:f0:25:07:
82:e4:94:1b:5b:8b:1d:29:70:7a:94:f9:9a:1f:30:
55:80:ca:98:4e:de:eb:39:b8:85:99:2d:9d:e0:2e:
11:89:a2:c8:6a:56:59:bc:3a:c7:99:01:92:a3:64:
45:e7:85:bb:9d:5a:02:90:94:c1:59:2a:a5:85:c5:
93:79:82:df:45:f5:3f:9c:25:32:27:68:e4:c6:98:
eb:f4:fb:6c:d4:8c:93:da:35:10:17:6a:45:80:80:
4a:43:8e:75:e5:30:dd:82:ea:6c:e9:e2:78:b2:b1:
07:90:de:69:94:47:6d:ab:7b:42:84:fa:04:3a:c7:
9a:7e:a1:4b:92:60:cd:f3:9f:36:76:8e:18:f6:76:
ea:47:72:21:4c:bc:39:cb:ec:07:68:46:87:45:8e:
2b:e3:42:ac:a0:66:85:2d:7e:64:d7:1e:a3:93:3e:
82:3e:f3:4e:77:c9:3a:b2:6a:2a:b6:e1:7c:19:a8:
e5:c2:d2:60:ae:6d:a4:56:48:d7:bf:b1:25:53:ca:
a8:75:94:ea:e5:5d:e9:b9:f6:51:14:15:d4:90:45:
77:00:62:be:fc:ab:11:1a:5e:a8:42:53:7f:b7:d8:
0f:73:74:22:45:4d:60:0f:72:ac:07:c9:89:7f:0f:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B4:42:8E:7F:7F:3F:3B:31:12:EA:92:35:FB:8E:ED:0F:18:0C:06
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:57:53:95:01:00:46:18:36:8a:79:28:cd:a0:29:b7:a5:f7:
da:2e:fc:a1:5f:68:21:70:a1:b6:4b:95:f4:83:9a:08:63:1f:
47:f5:0b:27:2b:2e:6d:bb:dc:16:2c:63:db:ee:ad:c6:2b:28:
e7:c1:a8:3a:e9:2d:63:64:ec:e0:5f:b7:3f:37:9c:01:c8:bd:
31:5d:a5:74:92:89:14:fe:c0:fd:01:b0:59:c8:94:38:b3:8d:
51:f6:04:b9:a4:eb:ec:57:1f:9c:1d:09:36:9f:33:7f:90:9e:
64:ea:c9:d1:78:4c:0c:51:aa:a7:23:77:1d:96:b5:97:aa:39:
0e:54:e7:d2:48:29:0e:6c:df:3a:09:df:8f:99:6a:35:7e:be:
62:c4:c7:ac:e2:c9:f1:f9:b0:dd:e3:ca:97:11:09:65:3e:e4:
54:b5:7a:3d:9d:ef:d5:90:d9:2e:52:8b:7d:a0:12:80:f1:f5:
d5:6c:f2:4a:eb:2e:ef:01:93:35:d8:84:88:82:f1:80:a2:d6:
9d:9b:5a:d3:e9:41:37:0b:2d:83:e3:e7:42:59:f7:c6:e1:15:
94:b6:2b:3c:d3:f9:f2:d5:be:b3:f9:01:e0:06:58:20:f3:23:
14:1b:97:41:92:3e:60:c1:06:ea:99:d6:f1:88:ab:63:e6:4d:
60:ef:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:56 2026 by rpki-client