Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: m4kNMX2OZn5GL4Kad9OT58Pu3LYWS0CX/KVRd08eMEM=
Subject key identifier: 9F:F7:E6:F8:08:59:B6:8B:AE:06:8C:B1:D8:97:3A:02:BA:66:C0:4D
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019D37C043DFA228A5D12E55531865A39CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: jgAYlsdewZnHDt5BWwzqVh+jEhr+rZUAylYNxU4H/UI=)
2: qaXfGqRy8REPCt5AS8O0mmZxMbQ.roa (hash: s2r/NmzprssiG6q7fm25EDu8EjVb4m0dpfMF/5RAabI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:43:df:a2:28:a5:d1:2e:55:53:18:65:a3:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=9ff7e6f80859b68bae068cb1d8973a02ba66c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:4e:15:92:e2:64:cb:1c:6e:a9:6d:07:f6:
de:fd:6e:3f:ef:c8:5b:9d:6d:3c:a1:e1:2c:8e:f5:
65:a8:89:27:1b:8a:1b:33:77:04:c8:44:17:3f:ad:
9f:67:f6:93:4f:33:e1:4e:da:58:64:c4:73:61:e0:
d2:ae:df:4b:e8:2e:c4:71:ec:ff:5a:7c:9f:58:17:
b6:bf:80:7c:36:38:55:f4:ca:47:d8:93:d6:a2:2e:
8e:4a:95:37:c4:fc:2b:93:69:a0:42:75:57:63:09:
9a:55:e9:6f:d3:64:a4:fe:5b:f6:f7:56:40:a9:7c:
f4:66:ab:55:6f:92:98:c2:d9:67:06:eb:9b:6f:02:
9c:21:6a:d3:47:46:0c:73:92:d0:3d:16:23:48:6c:
8b:e5:99:85:ff:8d:2a:eb:87:bd:79:a9:bd:37:f7:
e5:0f:a2:96:b4:4f:d9:78:ff:20:2f:5e:69:bd:3d:
16:e1:c3:1b:c0:8c:61:3d:17:05:11:35:da:a7:64:
c9:0c:6a:e4:cd:08:20:f3:8c:f4:e2:25:74:7c:b1:
32:c9:81:38:2c:0f:49:2a:fe:06:25:52:24:86:64:
11:63:3d:a7:de:73:17:4b:14:65:0d:0a:d8:07:72:
52:5a:0f:52:12:4a:e4:ae:97:be:f3:4c:e3:f8:2e:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F7:E6:F8:08:59:B6:8B:AE:06:8C:B1:D8:97:3A:02:BA:66:C0:4D
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:7f:d3:05:a8:ed:0a:41:13:b1:d1:80:e3:3f:d1:7d:7a:
de:2f:03:36:22:0f:7c:9e:ab:5a:87:77:21:1f:c2:c3:d2:53:
d0:b7:b6:54:f4:b8:c6:7a:87:4e:4c:2e:77:10:30:bd:81:15:
20:40:4a:2d:bf:85:79:f7:dd:53:e3:67:1b:b9:8c:8e:5d:6e:
c7:cb:ab:60:16:00:bd:8a:71:54:99:d0:d9:27:0b:8d:16:43:
7a:9d:03:8c:b9:24:a1:84:eb:96:91:0d:82:8b:60:8c:8f:d6:
f0:74:a5:1c:28:9d:3e:83:0e:5b:b4:7a:6e:6c:ab:bb:61:65:
f5:ed:ba:b0:d4:26:77:9c:c1:f3:0d:05:1a:a4:bc:a1:69:9b:
7a:f0:56:29:8e:57:66:4a:8c:40:ae:23:b5:63:76:75:24:00:
18:0a:55:0b:53:fc:81:bb:45:0b:cc:f2:de:58:05:e3:75:72:
43:fe:56:79:05:11:fa:ba:7a:c5:80:1e:d5:fa:e0:85:3c:37:
5e:6b:81:fd:8d:4d:d5:dd:b1:a7:b3:c7:37:f0:a3:ac:37:9a:
f2:01:0c:2f:2b:4f:82:cd:e5:b2:a9:c3:d6:b6:2a:9e:ff:57:
bf:89:fa:d3:35:e5:d5:2f:1a:be:03:d2:2f:09:ab:fd:d3:d4:
29:53:36:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:46 2026 by rpki-client