Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: xXjwNvn7LhF+ZowFILg3XCRTTV5uFNWD0TwEkQhpjf4=
Subject key identifier: BC:7B:7F:6E:3D:9D:48:EE:D5:77:F3:66:D4:DA:AD:EB:15:FE:3A:0D
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019D2816598D9E7C5098C3B10823DD37A86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 02BB
Signing time: Thu 26 Mar 2026 03:00:46 +0000
Manifest this update: Thu 26 Mar 2026 03:00:46 +0000
Manifest next update: Fri 27 Mar 2026 03:00:46 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: FT1vy2Gr0jX2wbSX/YKGj/YWJ12jbfgszPRRj1E83FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:59:8d:9e:7c:50:98:c3:b1:08:23:dd:37:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Mar 26 03:00:46 2026 GMT
Not After : Mar 27 03:00:46 2026 GMT
Subject: CN=bc7b7f6e3d9d48eed577f366d4daadeb15fe3a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:63:e1:a2:73:18:7d:c9:68:d6:ca:c6:db:
92:d3:be:7b:f4:65:af:b8:fb:4d:5c:de:2f:6a:63:
d4:0c:c2:9a:90:a7:a8:c0:4a:85:71:55:bc:7d:25:
aa:20:25:74:2d:a4:68:03:99:30:21:a5:d4:50:83:
07:91:73:22:74:df:bf:76:5a:65:b9:a4:38:a7:47:
99:09:d3:ed:68:47:82:c0:eb:a1:52:e3:c2:71:92:
7f:eb:14:92:f4:1c:4e:c1:92:de:0c:03:2c:fe:80:
8b:db:46:3c:df:3d:99:dc:c9:6f:c2:e3:6d:b0:fa:
8e:68:6d:d7:e7:4a:c4:6c:68:70:37:cb:98:3c:3b:
e9:8b:32:c1:36:40:b9:05:46:6a:6d:37:ab:ec:78:
60:b0:3b:d0:01:9c:e1:8f:59:33:6d:67:5f:55:96:
fb:9f:3d:2d:69:c7:aa:3f:08:1c:30:90:91:d1:d4:
3f:90:e2:a7:ab:2f:dc:94:29:1f:af:f3:d3:20:99:
3e:a5:7b:94:8f:55:fe:15:96:ab:e4:c4:c9:7c:21:
2d:23:fb:5c:3e:99:cf:0b:7d:fa:69:0d:57:5b:d1:
45:f4:ad:e8:c2:02:97:ca:85:40:ed:50:59:57:93:
8d:3b:af:29:3f:42:ab:66:bd:dc:49:98:6a:eb:48:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:7F:6E:3D:9D:48:EE:D5:77:F3:66:D4:DA:AD:EB:15:FE:3A:0D
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:25:62:0c:f2:71:42:19:9a:85:bc:fa:f2:96:a9:02:7e:
1c:56:99:90:6e:0d:5a:d8:ce:00:ef:93:f8:ed:5a:9f:4c:61:
9b:80:b2:e5:37:d8:d5:17:a0:2e:0a:0e:54:d1:dd:86:d1:bf:
2e:92:da:d5:ae:a7:84:e1:93:08:4f:b5:55:82:22:2d:d8:a8:
88:fd:31:b7:6b:44:a8:55:61:1e:d7:d7:38:e7:04:50:cd:23:
9d:7b:49:c3:f1:63:65:0b:31:45:75:95:7d:53:84:57:2f:e7:
2e:8d:1f:e7:bc:89:63:69:50:c1:cc:34:a3:9d:86:64:09:8a:
c0:18:4b:1d:7b:85:9b:4a:d4:36:08:86:d1:b4:c5:e4:4a:0f:
1c:6d:81:a9:e4:27:63:f5:d3:88:79:64:1e:0e:ab:1a:94:3a:
22:31:3d:5c:b9:b7:3d:94:ed:42:4a:27:e6:f3:3e:e8:51:6f:
d5:56:20:e3:53:6c:64:a3:74:fb:27:85:97:d8:2e:59:16:9b:
03:3f:45:15:6d:58:64:86:21:51:7b:b6:46:91:d0:48:4e:3f:
e9:8b:60:a8:76:77:93:41:b2:82:a6:58:1a:63:09:24:86:13:
e6:44:15:24:d9:07:20:36:c8:52:d8:88:9b:79:fc:f2:d2:f4:
ad:60:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:34 2026 by rpki-client