Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: vnEOQgZElmFYTyIgYixtYGAxC7+uhqkGvlwoPnu1fWc=
Subject key identifier: 28:4D:28:9C:4D:9D:F5:3C:61:E0:AC:81:46:A6:A4:D4:71:7C:19:7A
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 01A08AC3809AEF352AD69A67DDA4D98645CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 0224
Signing time: Thu 10 Sep 2026 10:01:03 +0000
Manifest this update: Thu 10 Sep 2026 10:01:03 +0000
Manifest next update: Fri 11 Sep 2026 10:01:03 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: L08iPqjlvAsAgdvn+6VnW3nOEQyHQcsJ1xTkwlfDF9s=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:80:9a:ef:35:2a:d6:9a:67:dd:a4:d9:86:45:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Sep 10 10:01:03 2026 GMT
Not After : Sep 11 10:01:03 2026 GMT
Subject: CN=284d289c4d9df53c61e0ac8146a6a4d4717c197a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:ee:3b:26:d9:8f:46:38:c1:53:d0:28:bf:
11:72:04:af:af:27:f5:d0:a7:40:76:97:e6:03:4d:
79:2d:cd:2a:2c:56:93:01:3b:5c:91:ac:c2:c2:e4:
55:d7:ee:0c:4b:1c:44:a0:fe:ac:ee:28:f3:37:cd:
c8:5c:6b:b1:2a:f9:2f:cd:96:8a:f7:8a:69:b1:f4:
17:6a:b7:3e:45:cc:fb:e8:a0:a9:8e:95:dd:8f:ed:
85:78:73:d7:d0:a2:0a:5f:5e:ed:d9:f6:a8:bf:22:
77:42:8a:db:29:b9:58:e4:f4:91:a6:8a:79:f2:a6:
0d:5c:2f:55:33:e0:c5:7d:e7:40:66:22:64:ce:64:
67:dc:b6:23:20:a7:b2:37:39:4f:03:7f:f7:f5:09:
c9:89:e1:cd:76:5d:84:b0:80:9d:e2:1b:35:67:2b:
c5:54:4f:65:2c:1c:6f:8e:66:8c:d0:88:c6:bb:fa:
72:54:d5:d5:0d:93:2d:88:5f:4d:e2:ad:8c:11:7c:
71:2b:bf:11:0f:0e:9f:45:32:87:94:14:0a:52:c2:
5d:56:72:20:ef:93:d9:13:78:19:2f:bd:36:b4:51:
44:c8:92:0e:6e:67:0e:b5:10:f4:24:de:88:c0:bd:
c5:69:d8:18:c2:c9:0d:ed:99:5c:82:26:3e:98:c9:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4D:28:9C:4D:9D:F5:3C:61:E0:AC:81:46:A6:A4:D4:71:7C:19:7A
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ed:e0:c1:97:81:4f:f1:ec:3f:0c:96:be:f6:64:d6:fb:93:
49:54:99:e2:5c:2a:83:f1:c6:cb:37:11:96:e9:ad:91:08:00:
fc:e3:40:c4:b8:e2:f8:1d:a1:af:20:47:f1:12:41:9d:ed:d2:
8b:7b:1b:c3:af:d8:f3:8a:61:0c:f8:20:eb:72:04:3e:e8:e4:
46:a0:04:08:bd:e5:3b:54:14:c4:d8:70:de:31:fc:fd:aa:95:
7f:06:ca:f5:38:05:af:90:e7:94:0f:74:c4:d8:16:7b:b4:67:
a4:85:0d:d8:a6:66:2d:eb:f0:04:bd:ea:53:45:31:27:d5:d8:
eb:70:32:74:6f:25:92:20:be:d4:7a:78:41:40:78:80:af:8a:
09:77:99:91:9e:3e:df:ff:4a:3f:a0:8a:35:81:c4:31:38:ab:
0b:85:2c:e2:b6:59:0e:3c:76:ee:44:af:3d:84:ba:13:83:f3:
13:a6:95:3c:1f:9e:0d:a9:af:82:4a:31:e8:d7:c6:a2:b7:37:
27:7d:53:9e:05:f9:1d:30:ac:ec:e3:ba:fc:b1:b0:97:b6:13:
8e:0d:08:c6:44:83:55:1a:77:2d:b0:40:91:55:6d:70:00:a5:
37:3c:f6:55:6b:01:53:2d:bc:33:f2:24:5c:b6:b6:7b:61:78:
76:c4:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:40 2026 by rpki-client