Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: 8UN4uAbeSAPgikEPG+oldCTiuC1CqFgKFwTVsjFVUNw=
Subject key identifier: 75:5B:CD:FE:1E:AB:80:B5:37:1C:09:A8:4F:A7:23:98:78:CE:CE:2A
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 019D375343BC7ACCA52FE4B44AFBD39AB9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0BD3
Signing time: Sun 29 Mar 2026 02:01:36 +0000
Manifest this update: Sun 29 Mar 2026 02:01:36 +0000
Manifest next update: Mon 30 Mar 2026 02:01:36 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: P7ZnNDHIJzXcze9lQUe7ChPYa8d70vmK7g/WEbNPsSw=)
2: UUFkgDHnR-0F8lOxAZm-NLU67J4.roa (hash: rvVeUb9I1xFcpHYp5yi+r3b7sO0cyT/6JlEZ7q0j+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:43:bc:7a:cc:a5:2f:e4:b4:4a:fb:d3:9a:b9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Mar 29 02:01:36 2026 GMT
Not After : Mar 30 02:01:36 2026 GMT
Subject: CN=755bcdfe1eab80b5371c09a84fa7239878cece2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:75:d6:78:8f:eb:61:1e:b7:75:14:5f:47:
15:a5:46:3d:f1:ee:d3:82:3a:ce:8c:30:d8:e6:6e:
7e:54:84:54:34:6d:c1:97:cf:a7:b9:f3:f9:37:a7:
98:bb:08:bd:99:77:9f:ee:7b:b1:b2:14:29:94:8f:
c5:77:23:36:70:f0:b0:33:71:c8:4b:45:92:52:1e:
59:25:fd:c2:3c:97:94:43:bf:07:88:38:73:d2:cc:
9c:46:9e:e1:08:76:70:ce:65:e8:19:ef:ea:12:fa:
26:ec:5e:1e:47:22:5d:ab:f6:18:74:69:c0:f8:7d:
69:0d:c1:21:a1:1b:71:7d:cd:51:28:b7:9d:f5:58:
f1:43:84:04:71:0d:22:b2:a1:1d:ca:dc:db:f7:ce:
b5:da:8c:32:2a:0e:5e:5f:93:c3:8b:fb:5d:9d:49:
b8:c3:2f:65:ce:48:71:c8:3d:73:9c:77:c7:2d:10:
96:b6:ea:e2:8e:67:14:d1:ce:95:ea:45:27:45:9f:
7e:28:fe:a8:79:03:c9:a5:9a:6e:1b:59:7e:61:79:
8c:a1:8f:95:df:05:10:a1:11:2c:61:94:ee:93:83:
c6:55:f7:78:d7:80:3d:50:94:16:be:61:d1:33:b1:
75:89:1f:cd:a8:16:76:55:8a:9e:b2:66:b9:95:04:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5B:CD:FE:1E:AB:80:B5:37:1C:09:A8:4F:A7:23:98:78:CE:CE:2A
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:81:7c:83:de:ca:c4:0d:b2:e4:bc:ea:92:af:df:f9:ad:
28:05:4a:28:8a:55:ca:88:bb:9f:64:40:0e:bc:06:40:e5:bb:
32:62:92:da:43:21:b3:e3:3d:cb:f3:c8:88:4a:34:e1:c6:11:
5c:83:56:80:b9:36:8e:06:f8:92:10:fe:84:12:30:d2:86:43:
b9:fc:0a:b1:c3:e5:74:9e:53:f9:9b:b4:54:54:0e:5f:8a:d8:
c6:9b:c4:20:42:0e:7c:3f:32:7e:d0:4a:73:74:0a:3b:73:c7:
23:f9:43:5a:b8:9f:43:d4:6b:5a:bd:5e:9f:bb:19:64:dd:68:
fb:e8:f5:de:c5:b7:92:2d:9c:9e:63:c8:15:c8:dd:63:2a:08:
8f:fd:40:2e:bd:79:bf:c8:85:07:40:5a:96:84:2e:8d:14:92:
f9:64:ab:15:92:20:91:97:07:7d:bb:0e:6f:1d:d0:e2:bc:f7:
ff:9f:94:90:79:88:bf:9a:4e:d3:50:5f:49:8b:21:4b:2a:8f:
5c:7f:c3:8c:9e:20:e2:ab:5b:e2:90:d9:5e:89:b4:4e:94:17:
f1:07:41:93:93:14:f0:9f:1a:90:2d:37:22:5d:fb:07:9b:5a:
de:81:d8:48:b2:d2:e4:c7:43:8d:9a:cc:ba:e9:19:59:8c:ea:
71:73:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:00 2026 by rpki-client