Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: YdUCl3ON/KkiGGH+NlN/XnuRtmCEwGCosSpKjL4JiDM=
Subject key identifier: 50:D3:82:24:29:FA:F1:D4:04:A7:D3:87:7A:0D:78:88:62:A8:24:EC
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019CE33582D32852A5A5FBAE242FFD7EEBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0699
Signing time: Thu 12 Mar 2026 18:01:00 +0000
Manifest this update: Thu 12 Mar 2026 18:01:00 +0000
Manifest next update: Fri 13 Mar 2026 18:01:00 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: K4GXcwRq9KwiE3Q4eDt+rJClnsdwG+L/YoNPjy8jdIw=)
2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:82:d3:28:52:a5:a5:fb:ae:24:2f:fd:7e:eb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Mar 12 18:01:00 2026 GMT
Not After : Mar 13 18:01:00 2026 GMT
Subject: CN=50d3822429faf1d404a7d3877a0d788862a824ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:42:ed:21:2a:49:32:7b:44:e5:d6:72:1a:
43:13:29:8c:7d:00:c7:d2:40:0f:68:64:dc:34:f6:
c0:63:a6:94:b5:7d:41:ab:53:f6:3e:22:ad:e6:49:
08:1b:0f:a5:ee:63:ab:9e:66:9c:da:ad:e3:e7:b3:
0f:5e:1c:99:e4:61:84:72:24:46:af:1b:52:41:78:
cb:eb:d8:d0:ee:63:80:02:be:c7:87:ae:33:0a:ba:
fe:b9:3c:10:e6:2d:0f:7d:ad:ba:1b:92:7d:9b:72:
ec:a5:22:fa:7a:06:dc:b7:be:7c:71:fc:b6:33:f2:
c1:fd:63:a4:89:41:76:dc:e4:c6:93:a1:0d:82:e1:
76:6f:1b:51:a5:9a:53:14:e6:91:84:df:5b:d9:4a:
c8:f0:92:4a:49:32:7d:26:7c:6a:74:31:cc:a1:46:
b1:ea:b9:fa:59:d8:7c:2c:f2:45:37:5d:59:78:90:
a2:37:d0:99:89:0d:d8:47:ba:ac:16:db:f6:5e:80:
9b:eb:18:33:cf:21:69:07:6e:b6:4b:84:20:f3:e3:
dd:55:f6:7a:99:8b:aa:23:cb:9d:2f:8f:39:e3:2b:
8e:c7:8d:5c:23:fb:bf:8e:a8:8d:0f:78:30:8f:34:
f6:92:b7:8d:4d:dd:50:f3:e8:71:9d:12:6b:00:e5:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:82:24:29:FA:F1:D4:04:A7:D3:87:7A:0D:78:88:62:A8:24:EC
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:70:e5:a2:0c:83:94:79:1c:98:f3:d1:bd:e2:e9:95:6a:31:
33:6e:3b:42:cc:bb:1c:52:52:5d:24:b5:99:9c:9a:56:45:30:
83:a6:9e:02:13:5c:80:3d:44:51:87:da:0b:e6:b8:83:b1:ad:
f0:9c:b9:b0:9f:49:6b:9d:fd:0b:20:c4:34:1b:23:8b:79:67:
d3:d0:ef:fe:b8:db:31:f0:6c:ab:da:51:d9:5d:98:1e:14:47:
fa:cc:0f:f7:46:42:cf:3c:97:3b:4d:00:0e:d2:b0:0d:97:4e:
af:c6:3d:4c:cd:62:34:cb:78:b4:1e:20:2c:4e:aa:a1:a8:e9:
9f:2f:d0:4a:e4:b8:80:2d:13:72:d8:73:ce:a1:72:02:25:45:
01:2b:94:7f:87:e8:25:e1:5d:31:72:fa:88:31:11:b9:cb:b3:
8a:6f:36:c5:73:64:ce:12:bf:51:12:2c:47:e1:09:61:50:0b:
78:2b:51:fb:1c:9c:4a:68:74:bd:bb:16:4f:12:b9:4f:55:85:
4b:b2:9d:8e:ef:3c:bf:ed:99:ec:b7:44:1b:3f:8d:96:0b:db:
7f:21:61:2c:ac:ab:cc:01:b1:18:f8:7b:fb:cc:6a:41:a9:d5:
87:51:ad:ff:cc:9b:6f:7f:7a:1e:0e:62:4f:62:4d:74:b1:2d:
a3:85:66:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjNYLTKFKlpfuuJC/9fuv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3
ZjFhYTcwHhcNMjYwMzEyMTgwMTAwWhcNMjYwMzEzMTgwMTAwWjAzMTEwLwYDVQQD
Eyg1MGQzODIyNDI5ZmFmMWQ0MDRhN2QzODc3YTBkNzg4ODYyYTgyNGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRlC7SEqSTJ7ROXWchpDEymMfQDH
0kAPaGTcNPbAY6aUtX1Bq1P2PiKt5kkIGw+l7mOrnmac2q3j57MPXhyZ5GGEciRG
rxtSQXjL69jQ7mOAAr7Hh64zCrr+uTwQ5i0Pfa26G5J9m3LspSL6egbct758cfy2
M/LB/WOkiUF23OTGk6ENguF2bxtRpZpTFOaRhN9b2UrI8JJKSTJ9JnxqdDHMoUax
6rn6Wdh8LPJFN11ZeJCiN9CZiQ3YR7qsFtv2XoCb6xgzzyFpB262S4Qg8+PdVfZ6
mYuqI8udL4854yuOx41cI/u/jqiND3gwjzT2kreNTd1Q8+hxnRJrAOX6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDTgiQp+vHUBKfTh3oNeIhiqCTsMB8GA1UdIwQY
MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct
NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3
LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnDlogyD
lHkcmPPRveLplWoxM247Qsy7HFJSXSS1mZyaVkUwg6aeAhNcgD1EUYfaC+a4g7Gt
8Jy5sJ9Ja539CyDENBsji3ln09Dv/rjbMfBsq9pR2V2YHhRH+swP90ZCzzyXO00A
DtKwDZdOr8Y9TM1iNMt4tB4gLE6qoajpny/QSuS4gC0TcthzzqFyAiVFASuUf4fo
JeFdMXL6iDERucuzim82xXNkzhK/URIsR+EJYVALeCtR+xycSmh0vbsWTxK5T1WF
S7Kdju88v+2Z7LdEGz+NlgvbfyFhLKyrzAGxGPh7+8xqQanVh1Gt/8ybb396Hg5i
T2JNdLEto4Vmog==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:14 2026 by rpki-client