Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: 0WB++AitxerrK32sHaNw6h8arcykD/ucVHnKKG3qcgg=
Subject key identifier: EB:EB:A4:CD:82:82:61:B9:69:72:BC:23:0E:E4:A1:2D:49:21:7C:F2
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019EB76A47B8A263FA036E7F15C01EF8CC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 0132
Signing time: Thu 11 Jun 2026 16:00:56 +0000
Manifest this update: Thu 11 Jun 2026 16:00:56 +0000
Manifest next update: Fri 12 Jun 2026 16:00:56 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: rGRXYFPYfJLissCWso/T7KKEZS7xhjPeCvGMdGK4dy8=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:47:b8:a2:63:fa:03:6e:7f:15:c0:1e:f8:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Jun 11 16:00:56 2026 GMT
Not After : Jun 12 16:00:56 2026 GMT
Subject: CN=ebeba4cd828261b96972bc230ee4a12d49217cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b4:3f:0a:e0:a9:c4:5c:7a:d4:fb:b8:89:97:
56:84:61:08:18:35:75:cd:e8:37:ad:09:19:74:90:
22:57:00:fc:47:8c:b1:df:92:18:94:f8:f8:78:d9:
0f:f9:3c:32:6c:a5:7d:00:e8:c1:9b:8c:c7:df:f3:
af:a3:62:76:45:46:7c:12:e6:f1:bc:84:70:d9:53:
1e:47:da:88:cf:9d:2c:6b:58:e1:77:27:da:78:02:
b2:47:fc:cb:26:0c:60:95:de:fb:9c:52:b9:e1:72:
fc:56:14:ba:2c:8b:11:2e:d8:34:45:7a:b9:16:b5:
87:a4:e8:08:26:57:4f:88:ac:40:9e:68:72:46:81:
85:e7:5f:98:92:1e:5a:3d:7f:9f:d6:9c:be:64:c2:
5b:9a:f0:e7:ac:23:58:55:d1:90:a5:eb:e2:8b:fc:
97:9d:59:66:2b:50:63:2b:fe:51:ad:6b:a3:c8:6f:
80:63:db:4f:78:45:bb:f6:5e:9e:f8:73:b4:c1:ed:
66:13:4b:58:11:b6:b1:46:fa:4e:2a:a4:03:02:a5:
31:73:50:05:48:76:fd:99:3d:96:3f:7e:de:bf:b6:
ee:d6:ea:86:4b:cd:c5:ec:83:b2:b8:2c:b5:92:c8:
31:0d:93:42:9f:f4:49:c2:4f:3e:fd:19:98:8d:00:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:A4:CD:82:82:61:B9:69:72:BC:23:0E:E4:A1:2D:49:21:7C:F2
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:65:ad:fd:73:de:5b:14:ec:a7:a2:b4:7b:69:ca:13:90:e9:
4c:0f:7b:30:a4:c1:70:d4:58:4c:20:f3:f3:a4:ed:18:91:c6:
df:58:09:fd:2f:83:a0:c4:69:bd:cb:2b:d9:7e:89:93:ed:db:
72:c3:8b:9e:fd:53:5b:9e:cb:ba:04:f3:29:e8:89:0d:b3:fd:
50:67:2d:78:7e:dd:56:ae:11:d2:15:06:c4:c6:cf:82:81:84:
d5:fa:3e:b0:1d:fd:c1:fb:b7:26:1e:e2:5d:b9:e5:1f:b2:0b:
ff:17:e8:11:cb:50:b0:9e:65:99:a6:ab:9d:37:a2:24:38:e4:
c0:af:6d:35:b5:64:ec:e9:ac:92:a1:44:6a:5b:d2:01:98:01:
c8:bb:d6:af:88:32:b8:91:18:30:2c:d2:db:d5:0b:49:33:d5:
46:6a:74:42:9e:0b:81:29:d0:48:80:10:d2:50:08:c6:50:82:
6c:1d:f8:65:fb:13:b6:67:bd:0f:a8:15:cf:4d:1f:9b:47:2c:
3d:c9:17:73:59:46:09:2c:79:e7:b9:05:45:63:90:65:2f:00:
73:78:bd:95:5f:7e:27:d4:07:0c:31:95:d7:39:96:8a:93:61:
e2:6e:a7:5e:39:c0:23:0a:25:e7:b0:7f:3d:e4:5c:54:15:66:
04:6b:86:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63ake4omP6A25/FcAe+MwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmNjOTVmMTkwZjZmYWRmZmEzOTM0MTMxYzc0Y2IzYTA2
ODhkNzIwHhcNMjYwNjExMTYwMDU2WhcNMjYwNjEyMTYwMDU2WjAzMTEwLwYDVQQD
EyhlYmViYTRjZDgyODI2MWI5Njk3MmJjMjMwZWU0YTEyZDQ5MjE3Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7Q/CuCpxFx61Pu4iZdWhGEIGDV1
zeg3rQkZdJAiVwD8R4yx35IYlPj4eNkP+TwybKV9AOjBm4zH3/Ovo2J2RUZ8Eubx
vIRw2VMeR9qIz50sa1jhdyfaeAKyR/zLJgxgld77nFK54XL8VhS6LIsRLtg0RXq5
FrWHpOgIJldPiKxAnmhyRoGF51+Ykh5aPX+f1py+ZMJbmvDnrCNYVdGQpevii/yX
nVlmK1BjK/5RrWujyG+AY9tPeEW79l6e+HO0we1mE0tYEbaxRvpOKqQDAqUxc1AF
SHb9mT2WP37ev7bu1uqGS83F7IOyuCy1ksgxDZNCn/RJwk8+/RmYjQBPoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvrpM2CgmG5aXK8Iw7koS1JIXzyMB8GA1UdIwQY
MBaAFCX8yV8ZD2+t/6OTQTHHTLOgaI1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTkt
YmExZTYwOWZjNDIxLzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMWMzOTktMzQxOC00MDcxLTg1YTktYmExZTYwOWZjNDIx
LzEvSmZ6Slh4a1BiNjNfbzVOQk1jZE1zNkJvalhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmWt/XPe
WxTsp6K0e2nKE5DpTA97MKTBcNRYTCDz86TtGJHG31gJ/S+DoMRpvcsr2X6Jk+3b
csOLnv1TW57LugTzKeiJDbP9UGcteH7dVq4R0hUGxMbPgoGE1fo+sB39wfu3Jh7i
XbnlH7IL/xfoEctQsJ5lmaarnTeiJDjkwK9tNbVk7OmskqFEalvSAZgByLvWr4gy
uJEYMCzS29ULSTPVRmp0Qp4LgSnQSIAQ0lAIxlCCbB34ZfsTtme9D6gVz00fm0cs
PckXc1lGCSx557kFRWOQZS8Ac3i9lV9+J9QHDDGV1zmWipNh4m6nXjnAIwol57B/
PeRcVBVmBGuGeg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:14 2026 by rpki-client