Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: v+4+Ip2ESjkdMkQjNfjz+YcJJK0f3K/f1rVY3LD+oG8=
Subject key identifier: F2:96:1F:BA:35:42:31:DA:9F:D0:09:EF:4D:EB:97:C3:10:5F:97:5D
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019D3866397AD3A85BCD50F14BC54E1EBDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 13BC
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: lj9VAVQwK+JXXP5DRQP1mN/yTgQjd7amc9UwyCRz0KM=)
2: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (hash: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:39:7a:d3:a8:5b:cd:50:f1:4b:c5:4e:1e:bd:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=f2961fba354231da9fd009ef4deb97c3105f975d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:fc:b3:17:9d:88:47:e3:26:9d:0b:48:2a:
ca:b0:ce:65:19:30:a1:8c:71:50:be:6e:89:0c:f1:
c1:8b:22:73:6d:23:7e:86:04:2e:21:b9:84:37:a9:
dc:0b:70:3c:50:1f:cc:27:10:78:a2:98:7d:7e:fe:
63:36:eb:c8:42:9f:4b:58:0a:f5:22:75:5a:61:e2:
39:96:a1:dd:10:39:83:04:76:74:23:8b:1a:bf:06:
76:ea:3a:da:64:38:01:c8:e5:5d:53:00:c1:ba:50:
ea:a7:0d:57:ee:30:cb:4a:99:9c:1c:f9:16:11:2f:
ba:bc:4a:3a:84:b7:2d:41:20:a6:83:c1:7e:d6:ad:
08:fc:b7:f6:fc:37:52:e8:d5:a6:96:7c:0a:17:77:
80:c9:4c:1a:ac:51:32:d1:bf:2b:7f:74:67:c5:16:
28:41:c1:45:5e:9d:33:5a:48:c9:16:68:63:c9:bd:
42:31:3c:06:e1:36:11:0d:6e:bc:f4:2b:4c:07:ce:
1b:f2:20:e6:90:6c:1f:15:a0:83:9e:ec:49:bd:0e:
c1:51:63:64:29:fa:72:db:7c:f6:53:7d:0e:d3:8b:
d8:2e:29:7a:12:ae:55:f6:da:46:93:ac:83:7d:bc:
b2:38:92:8c:f7:3c:43:a6:c6:41:27:ba:07:b0:61:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:96:1F:BA:35:42:31:DA:9F:D0:09:EF:4D:EB:97:C3:10:5F:97:5D
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:91:a9:8c:58:9f:16:04:03:8a:5c:5e:92:f1:f0:99:5a:e1:
db:c0:7a:a5:47:a8:bb:c0:4f:31:8e:1a:7d:ee:fc:79:ce:34:
cb:07:61:06:1c:ef:ca:9d:aa:63:7b:79:74:c6:b3:1b:e2:84:
0d:20:6b:cf:e9:4d:49:f1:d4:6b:ef:42:5a:7d:50:55:9a:bd:
dc:0b:ce:26:3c:52:ca:14:d2:c1:f0:60:1c:5e:af:a9:f5:52:
a2:e4:27:2d:5e:4b:64:4f:eb:84:e8:e8:a0:67:e7:1d:cc:61:
25:97:df:c3:43:66:7d:81:51:6d:72:14:be:c6:21:b2:1c:89:
6f:2a:0b:1c:9e:01:6a:a5:b1:1d:ef:80:45:71:db:8d:7b:88:
6b:88:ef:cb:22:39:02:f1:12:49:36:8e:59:43:08:6f:6c:6a:
13:c2:0a:af:d7:36:7c:da:1b:8d:01:59:57:68:a1:13:cf:70:
ca:3f:0e:d3:21:17:cb:4d:5d:7c:54:13:cc:c1:48:c4:8b:01:
9a:b2:13:78:bd:89:0e:45:8b:68:a6:f0:d6:71:23:b0:9e:d6:
3e:eb:ad:13:d4:a9:91:55:d6:69:31:4b:ed:02:a6:81:80:62:
69:a8:39:fe:db:9b:87:b4:31:60:b7:62:ba:74:5e:8f:8d:e2:
3b:b4:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client