Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: Oc6GwmUWNkqC700/XTqLHayw/1M7/cgjHVH9MnnE80Q=
Subject key identifier: FD:05:D4:76:83:D9:04:E9:FC:B5:D1:95:DE:A5:6E:64:F8:1C:05:18
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019EFACB8E9CDD5A63308CB94661CF58B350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 18FB
Signing time: Wed 24 Jun 2026 18:01:44 +0000
Manifest this update: Wed 24 Jun 2026 18:01:44 +0000
Manifest next update: Thu 25 Jun 2026 18:01:44 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: +PhxmmquuQuM7303f/ZVW4mEwc8xFoEvN7dYORPBh7g=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cb:8e:9c:dd:5a:63:30:8c:b9:46:61:cf:58:b3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jun 24 18:01:44 2026 GMT
Not After : Jun 25 18:01:44 2026 GMT
Subject: CN=fd05d47683d904e9fcb5d195dea56e64f81c0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:a6:38:b4:1b:9b:bb:fc:ba:39:5c:83:98:
63:a0:90:c4:13:3c:3c:96:ed:46:43:9f:60:be:d6:
62:84:b6:f5:44:c7:aa:de:1a:5d:f6:62:5b:93:3a:
d3:c6:b9:f4:95:6a:0b:1c:03:a4:3e:ad:ea:96:03:
6a:f6:bd:88:59:d7:72:57:60:67:85:e7:3a:ca:8f:
46:90:30:45:82:51:67:dd:47:53:a7:d6:2f:d7:be:
ff:f4:f9:37:9c:7a:70:ed:90:40:62:4e:c3:6e:24:
86:33:d5:57:58:4e:7d:2c:3c:d1:a3:d1:6e:2f:c2:
97:58:b9:d3:af:4b:66:9d:70:63:31:4f:7b:f5:39:
d1:af:24:05:66:5c:5f:17:29:5d:2f:fe:0c:61:73:
8c:b9:57:b7:90:57:4e:d5:9f:27:5f:e3:83:c0:bb:
31:0f:d7:19:18:60:d6:84:b0:89:95:de:92:8d:a6:
46:1a:86:54:38:d3:39:4c:c5:dc:02:97:4a:4e:cc:
81:85:f0:78:99:4e:ea:5f:e8:02:2b:85:41:eb:d7:
de:bb:d3:9e:db:e3:8e:dd:dc:7f:e4:12:5c:64:04:
55:a7:7f:79:82:13:59:d0:c5:ce:0a:c6:33:38:4f:
d2:b3:9a:c2:88:be:ec:ab:71:63:2d:76:47:fd:5b:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:D4:76:83:D9:04:E9:FC:B5:D1:95:DE:A5:6E:64:F8:1C:05:18
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4f:78:8b:03:6b:55:0d:65:54:f2:44:80:a8:76:6c:2e:ef:
2d:84:8c:44:9a:d2:17:22:db:46:00:16:ab:ea:c1:5a:f4:01:
05:d0:8a:a6:2b:dc:01:a6:39:d9:fb:d4:3c:b6:69:6e:f5:aa:
0c:2f:59:50:4f:ae:9d:84:e3:9c:b5:e6:5a:94:5c:a1:7e:f7:
b4:c5:64:4c:a9:1e:8b:44:71:f0:f9:b0:81:96:3c:e0:d5:dd:
79:c2:38:cc:c0:b5:29:22:b6:54:0a:65:5f:1d:a5:bc:31:0a:
62:8e:7a:7d:ad:54:19:41:6e:6b:52:39:9e:c3:3e:e4:56:c1:
24:60:d0:1e:ed:33:47:7e:80:fe:fd:d5:ee:85:b3:fc:18:ae:
6d:ff:7d:08:30:3f:86:cc:65:a4:ae:25:5e:58:d9:49:a6:52:
2e:75:21:72:37:c2:7b:8b:04:02:2a:33:e2:a9:d3:dd:64:e1:
5f:2a:dc:94:e9:7d:91:9a:c0:f8:88:f9:ca:d8:71:18:b6:cf:
30:bc:9e:5e:5d:5c:b3:5d:5d:fb:bd:e9:37:3f:dc:60:4e:31:
5d:09:eb:7c:7c:b9:b2:bd:a7:aa:07:97:7e:8e:60:4f:fd:e2:
9e:c8:d6:3b:d0:7d:b9:75:df:7b:c3:83:f1:4a:4b:96:f3:ed:
88:3e:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:26 2026 by rpki-client