Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: r6S+/n2X+pXJOaXrE4oTWMS3D93GAFWdGhpTS/LRshI=
Subject key identifier: 5A:DF:40:8B:11:6A:23:7F:24:48:36:A1:E4:1F:04:A7:AA:7A:3B:D7
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 019D3752CA8A3822F2559769BD1658D76F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 0737
Signing time: Sun 29 Mar 2026 02:01:05 +0000
Manifest this update: Sun 29 Mar 2026 02:01:05 +0000
Manifest next update: Mon 30 Mar 2026 02:01:05 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: U51YEmo8CbSSlspQdsishgtrnJJhm+g2n1gqsKSeweM=)
2: lLFp57ELRFwcVwgQgnxoPRuM_jc.roa (hash: su+kmJqCkSrBt5ZKQNGTlCO76FI+aak3+r1BBZTULGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ca:8a:38:22:f2:55:97:69:bd:16:58:d7:6f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Mar 29 02:01:05 2026 GMT
Not After : Mar 30 02:01:05 2026 GMT
Subject: CN=5adf408b116a237f244836a1e41f04a7aa7a3bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:b4:a8:9b:a3:47:f5:9e:16:8e:d4:c6:69:
43:56:4a:79:af:5b:4a:18:95:82:77:b9:3f:03:9f:
2d:5c:5f:02:81:fa:d9:c7:d2:c0:0b:54:55:57:23:
7c:bc:85:33:07:10:25:75:28:14:14:7c:bc:da:0e:
d3:33:fe:33:7c:e1:ac:7d:29:0d:2a:2a:8b:12:ff:
70:fd:de:7b:d6:74:50:2b:20:55:5b:13:0e:30:c8:
8b:95:12:3a:52:98:fa:17:a1:43:e4:66:80:e5:49:
22:f4:14:a1:ad:2c:a2:d9:05:0e:1b:9e:b0:85:8b:
8f:5a:5a:bd:7a:37:f8:41:d3:ef:dc:83:ec:2e:71:
a1:9e:10:eb:58:a2:86:30:fe:57:44:ea:14:aa:05:
5d:34:49:e4:6b:c5:ed:26:48:e3:a7:ca:3f:ca:5c:
2f:72:56:c9:27:fb:7c:a7:92:2b:3e:7a:32:79:c6:
00:90:fc:53:36:4b:d6:1c:64:97:74:2b:74:b9:38:
55:e3:26:37:06:f6:73:bb:b3:c5:22:8e:c8:18:94:
6c:4b:d6:46:c1:13:33:0e:18:7e:a6:8c:96:40:be:
2e:c1:bc:57:49:e5:96:5d:4e:78:e1:b0:8e:52:a4:
39:41:5a:9c:34:3e:65:9f:35:f8:6b:55:31:b0:a4:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:40:8B:11:6A:23:7F:24:48:36:A1:E4:1F:04:A7:AA:7A:3B:D7
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:b7:38:a3:85:49:c5:77:7c:c6:51:58:10:4b:1f:29:6b:
90:da:ee:e7:ba:74:7d:5c:c0:76:0b:7d:e3:d5:61:bf:24:b0:
a7:bc:50:e1:22:6c:67:26:a6:06:c7:29:d8:29:02:a7:b7:fb:
9a:c3:1d:50:91:5a:76:a6:f4:33:5e:4b:7b:69:3e:61:cb:fe:
87:33:c4:53:a0:cc:8d:b9:d6:39:6b:ec:a6:11:d5:db:a7:d9:
be:a9:29:9b:da:0d:dd:a9:4a:1e:fc:a8:b7:84:02:48:b8:7c:
8b:fa:22:5f:fe:64:41:e9:6e:b4:e0:fe:cc:b0:90:f3:94:27:
f1:ae:d7:80:28:31:93:78:0a:bc:4e:45:c7:c2:8c:a1:f7:b0:
0c:68:85:ce:cb:6f:7f:00:b2:39:97:98:ed:bd:49:3b:68:af:
e7:1d:a6:eb:25:e6:5f:e0:c3:7f:c7:12:6a:59:11:e1:79:f9:
0b:e7:3d:54:f9:4a:f7:b2:b9:b4:5a:b4:2c:e2:b1:8c:d3:b5:
f6:69:64:88:33:da:45:0f:d3:a1:ba:bc:11:a8:22:c3:f2:77:
b1:07:6d:c0:1c:a7:c0:63:9a:4f:83:38:b6:3b:6a:a7:dd:2c:
fd:68:ec:be:bb:a4:a2:ef:de:24:51:4c:dd:e0:c5:91:56:10:
b8:96:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client