Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: rNKGaQK9CFan2/716u1j/GY3AbrT1N5/2rI05Q+CtOI=
Subject key identifier: B0:CB:AB:E9:B0:5B:48:55:F9:2C:02:41:01:6D:AE:A1:A1:DE:48:FC
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019D37C0F83CADBA154CCB395045A3FB2FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 05BE
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: twDYW264exLVzufNkayuA7Oxz3Jc0iJb+az/NhaR/F0=)
2: _Y_601F6eAt7O-baCpdg3BQDJXc.roa (hash: vyG9YG54wVQIAnIU/YKZPIrIY0HUdh61Oh6KNWA0bnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f8:3c:ad:ba:15:4c:cb:39:50:45:a3:fb:2f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=b0cbabe9b05b4855f92c0241016daea1a1de48fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:96:8b:6c:28:97:a5:18:05:a0:3e:f8:1b:
5e:c8:57:b1:1b:43:e5:91:bb:a1:d8:b6:af:e8:75:
c2:72:75:0e:75:36:61:c9:76:af:20:60:f2:5e:8b:
51:1e:e3:f3:2c:ca:eb:03:e6:f9:61:40:81:60:65:
a8:3c:c5:13:8f:b5:15:a4:9b:19:84:46:5c:d1:f6:
e2:31:01:db:76:60:1f:89:c9:3d:ac:08:70:f4:1a:
ef:3a:99:3f:0c:f0:35:4a:20:84:3a:c8:58:e9:40:
4a:c4:6b:f9:f6:ae:ee:14:ec:3f:ae:88:e1:2c:42:
d7:34:28:59:d6:3b:19:56:04:be:87:27:9f:d4:95:
b2:db:37:e4:76:c8:70:4d:1f:a3:48:ae:31:ec:64:
2f:c9:3b:a4:74:19:d0:1d:5c:50:fe:e2:fb:11:c3:
df:3a:c0:8a:03:01:23:ab:4a:17:b4:85:e4:da:68:
92:c3:a9:ae:ab:32:aa:63:b5:ca:df:15:20:4a:ca:
f6:03:a5:b5:8e:7b:5f:e1:5c:5b:41:81:39:37:6c:
81:52:af:47:80:51:95:ef:f7:cd:d5:64:f8:3b:12:
c5:4f:00:76:47:21:42:dd:22:61:f9:d3:f9:4e:bd:
5b:43:82:84:28:2a:ac:86:c0:a7:0c:bf:f3:87:c4:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CB:AB:E9:B0:5B:48:55:F9:2C:02:41:01:6D:AE:A1:A1:DE:48:FC
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d1:37:51:7f:ba:0f:84:67:1d:cf:e9:42:de:79:c5:68:c5:
14:0a:b6:37:f0:b1:8e:ff:65:32:a3:51:fc:36:d3:3a:8a:37:
77:a5:49:05:e9:3a:80:98:c5:40:e3:aa:77:3d:cf:0e:fa:94:
cb:98:43:75:87:0b:01:8a:d7:72:27:ed:2d:f0:f0:1a:63:29:
87:7b:5f:38:23:f5:e4:8a:4f:56:17:bd:e8:5c:57:75:79:2f:
8e:21:d3:f2:9d:1c:53:60:82:77:52:3f:2e:7e:59:20:9c:d6:
9b:9b:17:d8:7f:86:92:38:63:9f:00:96:de:73:7b:3d:5f:23:
df:5f:2b:ba:75:2e:da:81:8b:aa:69:cb:1a:e5:a7:45:c5:d2:
8f:9a:d9:3e:14:73:6d:81:60:6e:f6:15:13:ea:9c:c6:e5:3c:
e3:bd:9d:25:d9:9a:38:f8:c2:3b:b1:36:ca:aa:d1:b5:6d:5a:
6f:97:cc:0c:20:34:5a:a7:61:55:59:81:d2:5f:b5:d1:a6:01:
fd:22:75:fd:b6:86:e7:21:13:b7:40:c1:b1:f9:7a:2e:2c:da:
2c:bc:3f:7f:db:29:3c:bc:db:d1:4c:c6:cc:92:21:c7:25:80:
fa:45:ec:32:68:ef:8d:58:d1:2c:e0:52:9c:16:48:ee:51:53:
b8:fd:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:27 2026 by rpki-client