Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: 0+wK4GD6qsVXakzp74jXBWIJciO/QKQX1VmBQPc4Fn0=
Subject key identifier: FE:79:BB:20:89:01:A0:31:DC:54:DB:2E:C3:64:45:16:61:49:9B:04
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 019D37C0ABDFD92507B0D5239767F7368252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 1529
Signing time: Sun 29 Mar 2026 04:01:06 +0000
Manifest this update: Sun 29 Mar 2026 04:01:06 +0000
Manifest next update: Mon 30 Mar 2026 04:01:06 +0000
Files and hashes: 1: 4LLVtuowBMlt-elcg04sJ4SEZ4U.roa (hash: 9EzE57I9U9jlMNZnR2WQt4Ucc7HAdhe5JFz8hozLIH0=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: t8O0OAM7Rj9v4APUp0/FLbuFRcGYIVa+YbkwmQtWeDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ab:df:d9:25:07:b0:d5:23:97:67:f7:36:82:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Mar 29 04:01:06 2026 GMT
Not After : Mar 30 04:01:06 2026 GMT
Subject: CN=fe79bb208901a031dc54db2ec364451661499b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:9b:91:39:2e:37:f0:4e:cd:cb:2a:b7:0e:
7f:53:82:e8:82:a5:b8:49:1d:ec:e2:ac:a5:1e:f3:
b0:ca:06:77:f3:60:b4:07:bd:5a:d9:37:75:0b:f0:
f3:8d:37:90:23:b8:4e:31:a1:4f:a4:f3:02:70:57:
5f:79:c6:fe:bd:3c:e5:79:73:13:af:b5:cf:cb:7c:
88:ec:2e:c9:e6:e4:79:0b:54:b0:03:26:e0:8d:48:
80:59:71:02:db:bd:2d:e0:39:5c:1d:4c:3b:35:94:
54:3c:75:e8:27:e8:8e:81:f7:aa:01:65:ba:47:20:
04:e6:dd:46:fc:64:55:af:f1:aa:e9:42:0a:2e:c7:
fd:c3:92:6e:da:1e:63:d5:a6:75:1b:48:c9:7e:c2:
81:ab:8d:97:4e:2b:e2:78:53:ae:c2:73:6f:6f:8d:
14:81:89:de:ed:7f:c0:e4:d1:70:c9:9c:16:37:de:
f7:42:7b:63:46:f9:92:a6:4f:c7:bf:80:f3:4e:c9:
b9:0a:ae:bd:44:2a:b0:fd:b1:d9:5c:d8:52:49:5f:
41:fd:33:52:31:3c:c9:03:e2:45:6b:73:66:9b:1c:
b2:ae:55:fa:81:bb:10:03:a7:09:b9:32:08:22:ff:
b9:30:15:07:3e:3e:3d:34:73:45:98:40:6b:87:1e:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:BB:20:89:01:A0:31:DC:54:DB:2E:C3:64:45:16:61:49:9B:04
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:6b:c1:cd:f2:f8:1b:4a:35:9b:19:21:a8:eb:5c:29:95:
19:f9:86:21:6b:f4:7e:8d:8f:5b:5f:43:33:b0:f5:14:f6:53:
ae:fb:1a:15:37:ed:34:45:17:1c:0e:07:ce:63:aa:53:2f:a3:
db:9f:f0:38:a2:44:27:1a:16:f4:2b:50:f2:49:60:fa:e0:3d:
e7:be:cd:c0:ac:16:03:9c:1b:19:8c:96:c0:f9:fd:cb:f1:f7:
d4:ff:b2:ce:0a:03:a6:70:fe:37:3f:e7:e2:c9:ae:ce:08:82:
78:60:72:ed:07:65:a4:78:a5:3b:38:e1:77:ba:52:2b:de:27:
3b:73:b9:39:00:74:ec:c1:c0:f4:5c:e5:b0:dd:fe:77:ca:8c:
38:58:ed:89:d3:5f:4e:39:e7:14:70:1a:20:30:f8:d3:3f:3f:
ec:a7:14:6e:d7:36:9f:c6:f3:2e:44:b2:71:64:74:31:e4:62:
92:a2:64:ce:2f:51:92:5a:43:b8:13:7c:78:d7:45:9a:c3:7a:
3c:97:22:cf:d6:25:77:88:60:5e:c9:29:fe:7b:9d:62:d8:50:
f9:09:e3:73:47:78:31:ba:46:71:00:b3:ad:bb:a4:ee:45:d2:
af:ce:e9:67:bf:5e:3f:4a:9e:f6:fd:e7:86:19:5d:b9:a5:9c:
92:ee:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:29 2026 by rpki-client