Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: +jSdxp0lEvYKf7wFqhsh0vA2qWl6d8Bib9LOCwNy3aE=
Subject key identifier: B4:56:0C:B2:7C:90:28:A4:D2:30:34:F5:1D:F5:C2:CF:F4:DB:FE:12
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019F84C3EDFE75FD950D7BF1D6DA80EFD9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0CDB
Signing time: Tue 21 Jul 2026 13:01:00 +0000
Manifest this update: Tue 21 Jul 2026 13:01:00 +0000
Manifest next update: Wed 22 Jul 2026 13:01:00 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: dllun9+wXLXN50MDrbPOLayCc81PgwsDwrjJZcYGi68=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:ed:fe:75:fd:95:0d:7b:f1:d6:da:80:ef:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jul 21 13:01:00 2026 GMT
Not After : Jul 22 13:01:00 2026 GMT
Subject: CN=b4560cb27c9028a4d23034f51df5c2cff4dbfe12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:47:0b:24:5c:80:0e:2e:23:f7:f8:84:e1:
bd:6d:76:1a:fc:25:70:f1:ff:47:19:5e:9b:c9:3f:
bd:f7:a3:77:45:fa:e4:b1:50:d5:17:36:e9:bb:9c:
e9:ae:1f:28:75:bb:7e:5a:b5:b3:b7:ed:0f:16:0a:
e1:a7:18:d6:eb:96:34:59:4d:5b:ef:77:49:8d:c4:
0b:e6:4e:3c:b6:6d:3f:b0:df:12:99:dc:f8:66:c5:
b3:b8:87:e2:14:28:76:bc:92:68:cf:e6:94:80:1a:
83:7d:a6:e2:3e:49:f7:86:c3:c7:0c:87:ea:c8:ea:
5e:0d:77:12:ed:d7:f6:cf:cf:21:67:81:39:3e:a7:
0a:30:53:b3:c5:df:b1:36:9f:58:da:ce:e5:35:69:
b0:63:81:ec:d4:ee:ec:52:28:e2:ac:b8:41:dc:19:
92:86:a9:71:a6:97:63:29:ad:e3:c6:7e:16:7d:21:
a2:26:9d:4a:28:7c:08:60:65:27:38:41:ac:d9:63:
52:5f:f5:8b:00:ff:e3:db:1c:3c:4f:2e:12:94:36:
64:38:20:a6:12:99:c1:5b:e9:8a:57:14:52:32:90:
ca:1d:af:58:51:bd:4b:b2:c5:b3:b0:63:33:42:5e:
6d:c3:5a:cc:7f:b3:4a:58:6e:79:f1:e9:f5:d2:84:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:56:0C:B2:7C:90:28:A4:D2:30:34:F5:1D:F5:C2:CF:F4:DB:FE:12
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ac:a1:45:bb:9a:0c:08:fe:24:7c:ac:59:a7:5d:09:56:bc:
10:58:fc:72:db:05:f9:5f:26:0f:78:d9:37:83:40:c6:fc:b6:
df:34:8f:7c:08:b2:79:19:cd:4f:ae:49:3b:9b:25:4d:f6:e5:
dd:88:d8:22:95:61:7e:b4:a8:33:6d:a1:1e:75:3e:6f:ad:09:
00:88:58:e2:dd:3f:47:67:40:aa:03:36:6f:36:d6:5f:e3:b6:
83:fd:0b:3b:6c:7c:4e:15:84:de:d2:5b:ba:4f:b4:0a:5b:86:
0b:55:44:7e:e2:fe:07:6e:cd:13:c9:67:27:1b:29:53:df:3f:
fd:7b:28:40:df:0b:24:9a:ea:51:c2:59:2c:e8:bd:30:c0:b8:
85:76:49:6f:76:9f:54:64:1a:ad:67:5c:6d:84:a4:8d:22:ac:
bb:a6:90:67:2a:ac:f1:48:95:cd:9b:f5:f2:ea:33:22:a3:fa:
d6:04:5b:7c:5d:27:c0:85:ca:65:e9:25:1f:4c:ae:5b:21:ff:
c0:ea:a2:b3:47:b2:1e:23:04:14:7b:b0:7b:89:11:3a:29:cb:
7b:b5:e0:9a:2c:9d:55:90:4f:ed:5c:d6:80:b1:07:94:23:00:
52:03:32:87:f2:4e:f3:c9:33:6c:b4:19:bb:03:1b:b4:61:84:
d9:14:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:48 2026 by rpki-client