Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
File: JfzJXxkPb63_o5NBMcdMs6BojXI.mft (raw, json)
Hash identifier: jEKjENQ4OpYWa92uj4fPQtiePLlplF8LzvuTr2P8Sh8=
Subject key identifier: 2B:0C:29:94:D1:5F:8C:0B:65:BB:EB:1B:6A:E1:94:A4:AA:0A:B8:17
Authority key identifier: 25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
Certificate issuer: /CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Certificate serial: 019CE222B5BF907960C1DF7E82FD283E29A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
Manifest number: 3F
Signing time: Thu 12 Mar 2026 13:00:51 +0000
Manifest this update: Thu 12 Mar 2026 13:00:51 +0000
Manifest next update: Fri 13 Mar 2026 13:00:51 +0000
Files and hashes: 1: JfzJXxkPb63_o5NBMcdMs6BojXI.crl (hash: PRYGgpVvvQGXjXSlVIaTJr9GWhlOP3OrGDRmhLL4Fqs=)
2: g4SpKvZLDrCSSEc4j2eY2sgyR8k.roa (hash: F6VZpsG6B4dQY8+6I93tdHS61Qfv0yiT02WGdhA/ATs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:b5:bf:90:79:60:c1:df:7e:82:fd:28:3e:29:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fcc95f190f6fadffa3934131c74cb3a0688d72
Validity
Not Before: Mar 12 13:00:51 2026 GMT
Not After : Mar 13 13:00:51 2026 GMT
Subject: CN=2b0c2994d15f8c0b65bbeb1b6ae194a4aa0ab817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:c3:b6:82:b4:5c:6b:54:fa:57:ec:62:22:
c9:ca:49:6f:ce:f2:62:87:66:16:70:1a:7b:b8:62:
3c:b3:d0:6e:ef:df:04:f4:df:c1:2e:6d:18:cb:20:
68:66:96:fa:41:59:32:ec:9a:cd:18:e6:8c:6d:02:
7d:7e:0a:de:d8:d6:3f:82:1e:9b:cf:a5:03:a3:f4:
97:de:e2:8b:61:27:45:2c:b0:da:80:ad:68:35:c7:
e3:15:4b:0c:69:a0:7f:c2:16:b9:47:ff:70:c6:62:
b0:86:25:02:1b:44:6a:28:ed:5b:17:bc:56:fa:60:
47:f1:9f:df:e3:1e:41:4d:d3:3b:24:30:47:45:b2:
3c:72:00:ab:cb:40:b1:b6:03:8b:b0:80:84:cd:24:
4c:54:be:76:0f:ab:f7:10:f8:11:88:17:bf:18:a0:
29:48:ce:cf:dd:72:1f:52:8d:42:d1:b6:17:66:08:
0e:30:82:48:87:0c:9a:48:b4:f6:9d:0f:35:4f:37:
1c:fc:5a:e5:1e:4a:56:71:08:8d:20:30:29:09:9f:
7b:e5:20:58:14:c9:b0:e4:49:31:65:20:9c:e6:e7:
66:59:78:8c:b7:06:1e:f9:c4:20:db:42:bf:91:e6:
c1:56:6d:11:99:60:36:8e:f1:13:4f:59:0f:ac:de:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:29:94:D1:5F:8C:0B:65:BB:EB:1B:6A:E1:94:A4:AA:0A:B8:17
X509v3 Authority Key Identifier:
keyid:25:FC:C9:5F:19:0F:6F:AD:FF:A3:93:41:31:C7:4C:B3:A0:68:8D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfzJXxkPb63_o5NBMcdMs6BojXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e1c399-3418-4071-85a9-ba1e609fc421/1/JfzJXxkPb63_o5NBMcdMs6BojXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2f:1d:d2:e0:a0:4a:5e:18:bd:de:7f:99:6a:04:59:0e:9e:
2d:22:76:01:9e:61:0f:b4:99:a9:81:45:9c:9f:c9:9b:44:85:
47:a5:3b:c9:1a:c2:fe:31:d8:0f:cc:da:5c:d0:f1:35:64:8a:
13:66:7a:99:2b:3c:32:69:60:41:c4:b1:b5:dc:44:a6:9d:e1:
72:e1:6f:f0:c5:0b:17:c1:07:9b:f2:87:c8:ef:84:19:ca:f4:
f1:4d:df:a5:b6:73:8b:f3:3a:40:4e:3f:e0:e1:bd:7d:3f:0b:
dd:35:14:83:05:4b:35:3a:b6:b0:38:af:42:8f:45:ef:ef:40:
00:00:d3:07:c1:a5:5d:7b:6e:6a:70:25:1b:4a:a0:cf:8a:da:
58:7d:e2:82:ff:75:b2:78:6d:19:16:20:70:b4:91:61:25:f1:
76:25:be:ff:75:39:80:4f:9c:07:53:b0:61:c2:63:c1:75:5a:
bb:6a:f5:65:e1:7c:55:a1:02:3b:33:d5:70:1a:50:da:94:d1:
c9:6e:b4:37:3c:a6:a5:d0:36:dc:75:84:cf:6c:d4:e5:67:4a:
a6:35:77:0d:59:e3:cf:84:69:b5:52:fe:ca:a6:3c:f1:b0:b6:
54:f1:17:e2:b4:90:d7:b0:37:59:dc:06:ed:49:a5:1d:73:db:
b6:25:9c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:06:48 2026 by rpki-client