Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: dGnLqzjok1cXirtuwcWiLI/pif2NIFmU1iNiQBWxg6Y=
Subject key identifier: 71:D3:F9:A9:97:4A:57:3A:8B:2A:BA:62:79:55:8B:3C:64:2B:D7:F2
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019D382E5D7B0BDD63264330C8D084EBEB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 02BA
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: 0B6H5zkrFMKoeXCuwx2WOB_Z6tU.roa (hash: AMOeY2WBqIDOZyan24GKWqLsMD/oVDxNwHTF+9g2L3g=)
2: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: JASJlnwAVJMij5+NNcJIwwoPbt5uRdWwlJBTz8BcuUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5d:7b:0b:dd:63:26:43:30:c8:d0:84:eb:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=71d3f9a9974a573a8b2aba6279558b3c642bd7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:af:31:e4:d4:43:45:3d:d9:5e:67:7e:7d:
62:54:59:54:b7:19:84:44:cd:a9:92:1c:a4:ee:bb:
ee:85:60:3b:da:78:4a:f3:7f:54:53:87:0a:1a:b2:
75:c2:ef:db:75:27:77:a3:cb:89:6b:0e:f5:fe:62:
0c:4b:bf:e6:4f:b9:7c:60:61:7a:a0:dc:b7:a1:f4:
77:e5:5f:44:f2:ea:76:ce:cf:8f:cc:50:9a:ee:c3:
8e:2d:3c:92:09:12:d3:13:a5:7c:e0:f8:1e:43:d8:
1a:18:7b:ea:47:d1:bc:52:a2:e6:b0:8f:8b:67:0f:
3e:18:b0:f0:82:f2:e2:3f:04:ef:8c:3c:ea:c1:ff:
3a:27:83:17:fd:5e:77:fc:e3:3c:f7:33:a6:bf:3e:
1d:d5:0b:de:73:1b:50:bb:a0:13:56:36:e9:89:09:
6b:fa:b7:67:fc:3a:45:fc:c1:4d:3f:57:b1:6a:08:
c3:78:4d:ce:60:48:28:d3:5c:84:05:5d:69:10:86:
04:df:0e:96:cf:73:fc:a2:61:67:03:22:2f:82:fc:
ea:41:a2:6c:01:d9:72:66:b7:a4:51:c9:4f:78:b5:
89:51:ff:33:c6:55:13:fe:4d:19:fd:60:9c:9b:cc:
52:8c:d2:dc:1e:ab:c3:4f:1c:bc:45:87:3e:62:54:
7d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D3:F9:A9:97:4A:57:3A:8B:2A:BA:62:79:55:8B:3C:64:2B:D7:F2
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a3:7c:8b:1e:aa:57:da:b5:cf:db:f0:2d:09:21:28:a3:21:
b5:85:89:d6:39:71:62:50:13:69:40:ab:2b:c7:67:b7:0b:c5:
6f:90:3e:bd:b7:d7:e1:39:27:ff:d2:4a:6f:90:d8:ed:89:eb:
36:e8:4c:f0:8a:a3:9b:1a:8e:67:09:ee:cc:bb:4a:dd:13:0d:
a8:ea:5b:38:54:42:f5:2a:d4:f1:21:09:bb:12:d4:da:db:f6:
21:bc:fa:10:7a:c5:2a:6d:73:5b:97:40:52:05:fb:8c:1a:b6:
0a:25:6d:dd:f1:75:78:21:1f:fb:da:20:cb:db:1b:ce:ea:a0:
d7:4f:31:e5:ef:ca:90:bd:6b:2f:7e:f1:9d:eb:c3:d5:64:78:
00:cc:4b:31:11:82:2e:23:e0:da:fc:01:15:e9:6d:7e:85:cb:
c8:5c:ee:87:6c:e8:67:a2:95:9b:03:3c:18:86:fa:67:91:0e:
b5:e4:0d:47:71:06:de:8b:16:20:2b:13:8f:03:fe:b3:f5:c1:
e9:5b:65:d9:89:0c:6a:a5:50:87:40:3f:15:ce:e2:b6:6c:45:
a7:72:a1:e8:2f:86:de:83:e5:6b:0c:93:18:e3:e0:87:65:e0:
18:e4:c1:51:f1:e1:12:23:cb:1c:db:19:db:6c:2f:d1:91:3e:
d4:69:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:13 2026 by rpki-client