Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: lUmtLAquaOePUbdtIMJijwxb/Fd3y6+3Nt+MsCtcAS0=
Subject key identifier: A1:69:1F:15:47:71:25:82:2C:58:7B:22:ED:DE:4A:91:5D:55:AD:A8
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019DEE5B5622A795234506AE0D6535CC8DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1870
Signing time: Sun 03 May 2026 15:00:56 +0000
Manifest this update: Sun 03 May 2026 15:00:56 +0000
Manifest next update: Mon 04 May 2026 15:00:56 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: t6QrE5/v9lYijeisj6Az2fIHJUDbC/mY8ae3AJ7jkkA=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:5b:56:22:a7:95:23:45:06:ae:0d:65:35:cc:8d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: May 3 15:00:56 2026 GMT
Not After : May 4 15:00:56 2026 GMT
Subject: CN=a1691f15477125822c587b22edde4a915d55ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:a5:c3:f9:ff:50:48:bd:e1:0f:8c:60:07:
74:4a:24:c5:1e:ae:ed:24:9d:83:a6:9c:55:8c:47:
71:77:f6:d7:1a:df:1e:15:11:00:80:fc:cb:b9:d2:
ca:1e:d5:86:ed:49:30:3c:02:eb:94:d4:71:68:ae:
9c:50:77:80:7c:96:3f:76:a0:5d:b8:ef:8c:83:33:
58:ce:9d:a5:d6:d5:33:a3:3b:05:c7:6a:e3:15:86:
e8:5d:fb:98:05:a6:b0:dd:d7:94:12:50:70:a2:da:
d8:2b:0f:fd:e3:cd:51:87:9b:42:31:fc:45:52:7d:
b9:0b:e7:2a:2a:aa:a8:a3:10:af:06:a3:9b:a1:04:
22:3e:f3:c7:35:29:f0:b3:d4:4b:16:13:a9:f6:1a:
b7:82:fc:85:29:f1:e7:c9:90:5b:db:1a:10:88:f6:
5b:74:a9:6d:e3:15:4f:fb:66:0d:81:52:a7:03:bc:
a0:09:8f:0f:b4:2e:9e:f2:45:d2:16:2a:cf:00:1e:
88:58:d6:13:b7:7a:f4:b7:ef:bc:da:cc:fd:44:d2:
c3:da:ca:66:f7:d3:b4:fa:d7:6a:d7:73:f6:eb:f6:
f1:80:e1:a5:cd:3a:1f:8e:58:c5:3a:33:9d:82:83:
52:0d:5e:5e:b8:98:dd:05:f6:a8:74:ae:40:eb:28:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:1F:15:47:71:25:82:2C:58:7B:22:ED:DE:4A:91:5D:55:AD:A8
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1a:0c:09:34:b6:7c:05:19:01:a6:9d:bf:a9:c3:ee:5c:bd:
d4:53:11:af:75:12:fa:4e:00:36:0b:be:1c:0b:4d:48:14:68:
43:cb:a9:80:f3:a8:93:4f:12:a6:d1:8b:7f:aa:ad:7b:44:d2:
68:1b:59:27:44:f1:e5:ac:99:6e:4f:67:6c:6c:53:8d:0e:e7:
ce:fc:d1:c6:60:85:52:b1:02:8f:4f:44:2a:d4:b5:c3:4d:27:
3f:b0:30:86:0d:b9:e3:f1:d5:5b:2a:51:12:53:90:61:87:72:
4c:ab:98:fa:f0:5b:e2:d5:31:0a:37:c2:03:e9:86:1e:b3:8c:
61:0b:c8:76:6f:df:3f:e6:05:d4:82:1e:eb:46:aa:7a:28:d4:
47:8d:73:58:44:03:97:52:67:1d:90:28:a9:d4:05:77:c0:f5:
d7:17:3c:89:39:5c:c3:88:2c:62:d8:f5:51:d4:c4:9a:02:68:
90:df:97:f7:c2:62:c7:0c:4c:ca:74:b0:c8:af:be:39:37:18:
9a:2b:95:b1:df:47:30:5c:de:65:b2:f3:69:7e:1b:60:a5:1f:
b1:98:dd:f1:b8:4f:f0:20:2d:0c:46:0f:26:91:c3:22:d6:63:
b5:0d:e0:1b:d9:40:bb:ba:09:02:ff:25:21:a9:e6:6f:c5:e8:
a0:71:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:50:55 2026 by rpki-client