Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: QtXkJNM/lPPGK+KoYY0Jckq9sAkgTgF8nJHIc3bv2mQ=
Subject key identifier: CD:0B:7A:3D:CE:57:F7:DC:52:BA:43:B9:49:E9:07:06:8A:73:30:D9
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019DCCE1AEB6638E679C5FDB35727728632B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0712
Signing time: Mon 27 Apr 2026 03:00:35 +0000
Manifest this update: Mon 27 Apr 2026 03:00:35 +0000
Manifest next update: Tue 28 Apr 2026 03:00:35 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: S4JrrxAc5HLX1rhBoD2B0esTxA/n9B3c34sJzG7i3GI=)
2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:ae:b6:63:8e:67:9c:5f:db:35:72:77:28:63:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Apr 27 03:00:35 2026 GMT
Not After : Apr 28 03:00:35 2026 GMT
Subject: CN=cd0b7a3dce57f7dc52ba43b949e907068a7330d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:1f:f6:3e:31:7a:4b:d3:26:2e:55:b0:c4:
24:68:a1:2a:e9:dc:73:83:59:fe:da:ac:3f:60:1f:
e7:2e:78:28:a6:cc:b0:24:5d:15:e8:70:1d:1f:62:
c9:8e:5a:60:9c:9f:34:e2:4c:2f:94:47:ba:fa:ad:
ac:30:a8:91:52:79:47:8f:a6:4c:3a:50:a7:1c:c6:
ce:b3:8b:30:55:1a:97:8c:c2:70:9d:b5:d9:95:74:
1f:af:b3:94:d1:95:cf:0f:94:26:6b:dd:f6:9a:ad:
c4:c6:82:c5:c3:be:d1:79:87:46:ac:7c:82:4f:76:
df:6b:17:2c:c6:ab:7b:01:d3:25:11:79:2c:e4:b0:
3e:28:25:af:a1:e3:0e:f2:a7:ce:a7:40:4b:e1:76:
e2:6c:67:e7:5f:97:ae:c8:6e:ec:5d:62:8c:db:e9:
8b:08:99:4e:9c:0c:ec:6d:d5:67:33:88:d2:f2:19:
1c:3f:97:71:16:b2:54:40:5c:ea:8f:51:2c:8e:25:
9a:b7:ab:ec:cf:03:97:ee:b9:e6:db:d6:ad:10:08:
6a:44:45:c7:09:a0:92:49:86:92:78:e0:8b:38:9b:
a0:e6:48:93:49:1a:1c:8e:f1:a9:14:c6:41:31:a8:
01:cb:e2:f1:47:3c:52:c9:18:4b:21:64:fc:07:61:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:7A:3D:CE:57:F7:DC:52:BA:43:B9:49:E9:07:06:8A:73:30:D9
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:79:67:84:4e:c3:87:15:21:5c:85:3c:14:29:5d:4c:5d:
db:21:3e:50:88:ed:2b:7e:c7:85:10:71:22:7a:d0:09:85:bf:
85:34:b5:2e:1c:86:a4:13:d7:76:79:5e:53:b1:c3:a3:4f:88:
80:08:39:cc:8f:18:39:2b:d4:93:7e:88:5f:12:bd:cc:bc:d3:
a1:97:f8:0e:55:63:da:1a:80:e5:37:27:bd:27:3e:3b:4d:11:
8f:c7:fc:a8:8f:c4:17:8b:19:32:ce:8a:cd:58:9b:87:b3:86:
e9:94:2d:0e:87:7b:c2:31:65:9e:63:af:0a:4c:cd:10:53:7b:
d1:5a:55:c3:77:6c:8d:31:11:03:a9:ab:a7:41:11:83:e6:19:
06:3e:46:9f:e3:72:ff:08:dc:b1:0e:06:44:36:7f:ec:a2:ce:
0f:2b:84:0c:8f:8c:35:aa:20:da:0b:89:fa:d3:56:1a:27:1f:
b3:d3:ef:77:d1:e6:3a:76:33:73:2c:7b:d9:f6:cc:7c:4f:a7:
4b:ba:7b:22:75:47:49:5c:28:14:58:20:d0:fc:ee:17:56:b5:
29:55:7e:da:f8:5b:24:0a:30:9a:9b:01:b0:ca:6f:08:1e:20:
96:2a:36:0a:76:1f:53:05:09:76:f3:67:ca:4f:be:44:40:70:
b1:8d:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:43:58 2026 by rpki-client