Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: gV8UxFBUu0+PuPXCRVx5DUPgTMrJoruJ40lQipGqTEk=
Subject key identifier: A5:39:50:C6:59:88:E7:BD:63:0F:7C:A7:21:4B:A0:43:61:8F:D6:0D
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019E1F4787A26689602BD86D549DE14D340E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 033B
Signing time: Wed 13 May 2026 03:00:41 +0000
Manifest this update: Wed 13 May 2026 03:00:41 +0000
Manifest next update: Thu 14 May 2026 03:00:41 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: NjEXNiCgY8vAedIl+xvNe2DmVKdhfTdnGu5xxp9FKfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:87:a2:66:89:60:2b:d8:6d:54:9d:e1:4d:34:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: May 13 03:00:41 2026 GMT
Not After : May 14 03:00:41 2026 GMT
Subject: CN=a53950c65988e7bd630f7ca7214ba043618fd60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:a6:e9:c6:6a:3b:1d:7c:47:ec:53:ec:7a:
de:39:78:9e:e8:ac:9f:5c:b5:84:c8:de:14:17:7a:
06:b3:21:ea:0b:b3:46:da:ce:87:6d:67:0e:3d:4a:
d8:83:e8:e1:f4:3c:4c:27:09:b4:5a:ba:0f:1f:7c:
19:37:0f:44:f5:68:f7:e1:2a:e0:73:ba:ed:30:35:
0b:95:7d:4b:b5:02:25:2d:cc:c9:1a:43:b7:d9:47:
e5:f8:05:59:0f:cf:c2:6a:d5:c3:de:c2:93:b4:06:
b4:39:74:fc:b4:1a:28:77:40:95:1d:c0:c5:2d:cf:
a9:3f:e9:31:6f:75:f8:81:3a:ed:c3:f1:3e:92:5d:
bb:80:2b:2e:ac:89:8b:3a:61:9e:8e:ca:f7:47:0d:
ee:cb:30:2f:d3:c5:09:e1:d5:c4:a9:b8:f4:e3:5e:
e3:60:43:79:76:52:22:51:94:7f:e9:3d:73:26:cc:
33:64:1d:82:4d:20:d8:bd:91:c0:92:1c:6a:60:39:
3f:6c:51:75:a9:93:29:8e:1f:94:6e:a9:87:51:19:
c2:ca:5b:15:36:f2:5a:ea:4f:15:d7:23:ac:7b:c0:
0b:08:9a:52:76:72:7f:4e:88:68:ce:7f:ee:e2:f6:
8f:0b:90:c6:21:d3:11:0d:a7:55:ce:30:10:bf:82:
f1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:50:C6:59:88:E7:BD:63:0F:7C:A7:21:4B:A0:43:61:8F:D6:0D
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:be:00:db:64:48:cb:21:34:c8:c7:62:a1:89:e3:91:4d:48:
7e:7a:a2:b1:bf:f3:ee:86:01:bd:a1:72:d2:45:6b:71:95:37:
d1:0c:87:65:78:bc:bf:01:22:2b:24:c6:e6:8d:44:7f:5c:1a:
e3:47:de:03:5b:f1:5c:ee:95:0d:c9:f2:eb:9b:8f:f3:df:29:
33:a5:76:98:d1:da:84:88:21:60:69:91:a6:da:c8:0a:f4:56:
a1:d7:e0:46:c2:1d:a3:f2:56:99:9e:15:04:9d:67:bb:9c:eb:
66:90:93:8f:f6:bc:1f:63:ef:61:07:87:27:f1:a8:bc:3d:bd:
3b:e6:59:a2:9a:04:ac:3d:5a:8e:6c:da:9d:97:a9:22:23:cb:
88:3a:68:27:84:89:10:00:cf:b5:ea:74:aa:3b:3e:de:73:59:
86:c1:b6:d2:e3:8f:96:b7:f6:93:c8:6a:22:6e:8f:c2:d6:39:
76:96:d9:8a:f8:0e:c5:de:be:b7:45:7b:0a:e3:96:68:28:45:
c0:ce:fa:cb:6c:73:f9:d3:8b:ac:6e:91:f2:ed:b9:a6:9d:fb:
87:36:e7:c2:f5:13:5b:c4:40:55:b8:21:21:a8:56:d1:71:03:
de:9c:0b:c3:de:0b:1a:0b:f5:21:8d:31:aa:c7:be:a4:66:f0:
56:b5:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:05 2026 by rpki-client