Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: yDR00day1IqLATuFMDn5aqhbgvx4kW/qR4RBSMxRS6A=
Subject key identifier: 65:D8:20:71:C5:EE:12:20:64:58:C6:C3:4E:E8:32:B3:AB:0C:EF:D7
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 01A18B9CABA168245ED65887271A86DD24DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 02A9
Signing time: Fri 30 Oct 2026 07:01:02 +0000
Manifest this update: Fri 30 Oct 2026 07:01:02 +0000
Manifest next update: Sat 31 Oct 2026 07:01:02 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: RZus6Qmpk2b6UfnxR6Xb3Gn/tozSVD18rxyG7Om4Org=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:ab:a1:68:24:5e:d6:58:87:27:1a:86:dd:24:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Oct 30 07:01:02 2026 GMT
Not After : Oct 31 07:01:02 2026 GMT
Subject: CN=65d82071c5ee12206458c6c34ee832b3ab0cefd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:dc:c2:0e:90:5b:70:ac:0d:c7:74:21:c3:
1a:72:82:f1:bd:8e:73:7e:1f:79:5b:39:8b:10:f9:
91:4f:64:4c:4a:f9:9a:e4:7e:d7:71:4a:73:06:45:
01:52:0b:e3:e1:62:9b:2f:87:14:80:63:ce:34:89:
8a:69:87:63:d2:b3:74:20:0c:d4:65:3a:c2:73:84:
8d:16:1b:6f:13:49:9e:09:ef:03:30:04:b8:79:0c:
12:e7:9c:7b:9f:4d:87:8e:13:9b:5b:ce:f8:18:60:
ef:71:b9:ac:bd:f5:c3:ae:de:b8:c3:c6:dc:2e:11:
2d:4b:48:91:43:cd:6e:12:b2:e0:e6:18:c7:ae:65:
21:66:ff:e9:d4:20:ff:0a:91:82:02:8c:44:73:e4:
ce:0e:87:36:c3:96:bf:be:f2:5b:ff:bb:41:1f:58:
4e:17:4c:0d:34:ad:fc:03:d9:e1:49:8d:40:8c:47:
84:a8:e0:af:13:de:9a:63:34:50:bc:80:1b:a5:f9:
9c:78:64:7f:cf:2d:89:76:0d:f6:b3:27:3b:ee:4a:
ba:48:3d:af:f4:bd:be:f2:43:98:54:b2:e9:58:04:
cc:a7:4e:18:ac:29:ce:e6:0f:03:00:44:89:eb:67:
d1:b5:a2:d9:b6:fa:bc:82:9b:99:e5:f3:c9:65:ca:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D8:20:71:C5:EE:12:20:64:58:C6:C3:4E:E8:32:B3:AB:0C:EF:D7
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0b:d2:87:a9:6b:e8:8e:78:77:4b:59:1c:b4:11:cd:09:b6:
f9:4b:3f:d6:8f:78:9c:af:32:e6:ac:76:f5:cb:8a:40:eb:1f:
1c:d8:76:02:cd:f9:cb:0d:a6:ee:3e:77:a6:b7:48:93:ef:b5:
ac:19:38:57:71:d8:50:08:6b:e1:70:cf:d7:c0:37:6f:34:4a:
f5:07:86:90:bf:75:85:44:b6:d5:e0:65:87:f1:cb:cb:f6:f4:
00:a6:fb:7f:21:c6:50:6e:9b:51:50:e8:27:1e:6f:6f:ef:13:
ac:ce:2d:1a:d9:13:d7:42:64:b6:8f:04:68:08:05:0c:65:39:
9b:aa:4d:f5:6c:1b:fa:4a:be:c7:d3:d6:0c:ea:db:94:d6:17:
13:1d:8e:6e:3b:71:d2:3a:6a:58:42:3d:8b:96:8a:b6:62:d0:
da:22:20:66:56:f1:ef:6c:9f:2f:55:f3:ef:3c:c4:9c:ec:09:
15:f2:da:c6:15:a4:19:04:9e:c4:f4:87:20:ed:9a:76:db:d9:
7a:10:03:8b:20:a4:ea:bd:99:9b:f0:cd:f0:1e:97:2f:5f:43:
87:87:f9:4c:54:80:01:fa:9d:f3:07:a2:4c:fb:0d:5c:53:d4:
b6:27:18:4c:eb:48:32:73:55:6c:4e:11:41:2f:8a:f5:80:43:
38:02:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:24:22 2026 by rpki-client