Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: UOXGoJPPFx0gHCljalzqQFKAlWollhiKIg/pd9BHtgA=
Subject key identifier: 81:A2:79:24:83:F4:3A:CF:21:C2:3B:47:40:FB:C9:A9:D0:90:81:73
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019D3909FA8034204156455795EDCE56E268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0F24
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: nMaRYoNNzJIzr/eRTiLWG6tI4SHDUK2z3Cz2EZUO51U=)
2: qPgFOiKxJLDpdTilhYgZPrKGHjw.roa (hash: m7UK15QpMiMYw7CRC6ZOxg/sICx/UBTV4BV3vXeXMv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fa:80:34:20:41:56:45:57:95:ed:ce:56:e2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=81a2792483f43acf21c23b4740fbc9a9d0908173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:50:5e:60:96:5a:d2:e7:70:16:d4:6e:17:
eb:b8:b9:d9:7d:94:8b:6a:e6:c0:83:1e:06:1e:fc:
49:43:56:16:48:cd:e4:8a:76:41:81:9d:3e:8f:29:
f2:7e:3a:e8:5d:e8:79:94:36:3d:4a:3b:74:6a:39:
39:f3:90:8f:96:82:eb:a7:ab:8f:81:fa:f5:16:8f:
62:ee:d2:7c:f0:46:33:0b:2a:23:8e:fa:3a:48:82:
34:ed:c0:ec:a5:44:5b:ba:ac:4a:46:a8:01:cd:4f:
30:18:fa:fe:a0:b6:83:3c:91:f4:d8:64:80:bb:c0:
b6:f4:d6:82:e8:2e:67:c3:da:94:42:e8:e1:6c:34:
ac:1a:21:c8:b6:9e:7c:ba:68:c4:6a:43:9a:f8:f5:
b3:50:34:37:0a:e9:58:82:7c:6f:2d:4f:f2:10:68:
a6:72:1f:80:d1:67:51:f9:6b:36:f7:4f:f7:2f:1e:
58:d7:d3:8c:e8:f1:f4:79:dc:55:53:28:eb:d8:62:
8f:75:98:fa:41:3a:55:c8:a1:8e:60:a6:27:22:d0:
48:fb:7d:9f:7c:dc:7a:93:bf:88:a3:29:bd:cc:30:
37:87:b5:91:b4:09:60:bb:21:85:0c:8e:a5:8d:8a:
1f:eb:c7:36:f1:b1:e8:6d:fb:dc:e2:f7:1f:86:d1:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:79:24:83:F4:3A:CF:21:C2:3B:47:40:FB:C9:A9:D0:90:81:73
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:42:42:a9:fb:72:27:c5:2a:9d:ba:ef:bd:be:9e:1d:8f:
70:80:80:fe:bd:22:f6:aa:32:57:01:c2:02:35:31:cc:0c:88:
83:8b:a5:d0:42:93:52:9b:97:d5:da:0e:d9:14:65:0c:8a:fd:
8d:f2:dc:15:94:8d:86:ed:e8:85:29:fd:52:bd:9f:d6:68:4b:
b2:29:0b:25:2a:c8:0b:6b:df:11:dd:15:53:12:a8:6d:e9:49:
06:20:63:df:c0:24:89:c4:3e:42:b1:61:30:ab:3b:b8:4b:28:
20:58:ff:79:f8:8d:ef:13:55:bd:60:1c:26:2b:d3:16:93:25:
9f:5e:c5:f8:ae:2a:2d:43:af:fd:8d:0e:c2:64:a1:43:a2:4e:
db:15:e9:07:d5:09:21:0c:1a:8b:de:0c:28:66:cc:c4:c3:50:
ca:aa:25:ad:17:9d:00:d1:35:d0:66:86:d6:00:a1:40:52:fc:
25:36:98:0e:1b:d1:eb:8a:52:58:e2:8e:c8:bc:46:f5:a7:41:
ca:d7:66:54:91:49:fe:a1:a3:d3:0e:2e:77:8d:d5:c9:06:fc:
40:6f:b9:bf:ad:38:2e:b4:21:77:c0:0f:30:07:66:00:00:cd:
21:67:ab:02:8f:eb:c5:0c:0d:3f:26:b1:0a:75:97:b2:9d:5a:
68:9a:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:51 2026 by rpki-client