Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: tQcA3PBDA0jGP+XoA89tQPWsvK/cJFi/UnKHpxRzDYU=
Subject key identifier: 7E:26:E1:93:C4:B2:63:D4:BC:5A:55:D8:89:A4:F8:18:A0:1B:5D:11
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019D68400729CEF9F7388BAD41C605D82E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 070C
Signing time: Tue 07 Apr 2026 14:01:59 +0000
Manifest this update: Tue 07 Apr 2026 14:01:59 +0000
Manifest next update: Wed 08 Apr 2026 14:01:59 +0000
Files and hashes: 1: 8mlX01dUhb6-6rm4Tg_A6iylZK8.roa (hash: aWWMzk3BVnWIBBzTyM865wpiSTi7X2ELFihppDyLczk=)
2: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 0Bhtj8t0xv/CfH3X4rbHrjh8wWmc/Y5uzVo9UZ3k+x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 14:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:40:07:29:ce:f9:f7:38:8b:ad:41:c6:05:d8:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Apr 7 14:01:59 2026 GMT
Not After : Apr 8 14:01:59 2026 GMT
Subject: CN=7e26e193c4b263d4bc5a55d889a4f818a01b5d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:73:0d:7b:44:05:f6:5d:f4:ab:af:f0:df:
5d:79:81:92:2e:55:16:b2:d0:40:dc:c0:60:3e:f6:
a4:e9:1d:e7:89:96:e7:1f:16:ee:2d:16:73:32:7e:
95:e6:c5:87:34:08:01:72:4e:71:8f:a6:88:9a:35:
28:4c:22:e6:f1:b3:e7:e4:55:43:de:fc:34:43:41:
aa:2b:49:33:c5:34:f2:6c:dd:25:a8:fa:27:18:70:
79:cf:8a:7a:b3:90:2f:7e:f9:80:00:11:41:bd:05:
17:57:d7:46:05:55:72:9a:ad:5a:ec:c9:cb:a6:da:
60:cb:9c:be:4f:21:7b:6c:8d:9d:07:73:5a:a0:a6:
9d:cd:9b:5f:74:f0:ce:95:e2:e2:53:73:5b:bf:2a:
c2:ff:ce:4f:e1:0b:6b:66:07:d4:d2:1a:ff:c2:fd:
af:04:35:a5:a1:ac:ce:4b:53:d6:e9:18:24:f4:28:
3d:6a:f8:b1:17:9f:0f:79:58:49:06:4e:6b:12:46:
3d:b2:60:23:47:9a:89:db:6f:93:47:1b:c1:89:9f:
05:16:54:e5:8d:d1:4f:ef:66:97:12:15:89:3a:90:
db:f1:e4:82:13:fc:0e:ce:78:4e:7e:3c:98:4c:d3:
53:02:4c:29:31:66:db:a1:fe:d9:9d:5c:bf:a5:f6:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:26:E1:93:C4:B2:63:D4:BC:5A:55:D8:89:A4:F8:18:A0:1B:5D:11
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:61:22:bc:1a:ba:82:37:ae:0f:65:c9:ad:68:47:a3:8a:
e3:37:4c:44:a2:4e:05:a1:5f:7a:ac:a0:f8:8f:36:eb:29:0b:
04:9b:09:97:23:c0:41:bd:6f:ce:a4:47:28:26:66:70:0b:65:
48:60:f9:b1:32:ba:99:3c:95:cd:a1:b0:f1:c2:a8:a4:95:ff:
b5:9c:8a:ea:bb:40:ce:ba:f2:ec:5a:c8:ec:da:28:2e:36:70:
52:9b:67:5b:9c:b0:aa:62:37:b2:b6:86:6d:af:0e:4d:84:df:
f4:dd:90:2d:11:52:6c:eb:1a:f0:70:89:bb:0f:30:6a:6c:1a:
03:10:68:02:c8:e4:d9:42:3d:38:b8:e4:8d:98:33:4b:30:51:
fe:a6:47:1e:a0:7e:a4:ab:d1:5d:70:f2:af:01:94:84:1a:58:
d9:24:a0:68:85:f0:42:f7:3f:05:41:cd:d7:ca:06:81:59:d4:
9d:eb:37:01:bd:1b:55:d7:40:f4:56:18:60:7a:60:8b:55:47:
62:19:07:3e:ef:7c:db:00:d3:4d:a7:a7:02:e6:61:38:d5:a2:
d3:c9:6c:07:81:76:cc:be:14:76:de:d7:cd:77:e7:99:64:ea:
6c:8b:4f:95:22:86:f3:23:7d:3b:76:39:95:a8:5b:8d:d2:4b:
27:e0:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:06:38 2026 by rpki-client