Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier: i+FFR+mudhNniASpp500hMbzQ3KFdde61RNoXVV02OU=
Subject key identifier: 32:66:27:30:DD:45:6B:23:4C:3C:C0:AA:02:6F:B0:BA:F3:C2:ED:6C
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 019CE4ECA07F670D36300610F29E253EFFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number: 0AA4
Signing time: Fri 13 Mar 2026 02:00:38 +0000
Manifest this update: Fri 13 Mar 2026 02:00:38 +0000
Manifest next update: Sat 14 Mar 2026 02:00:38 +0000
Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: lN6aEQU7ZMjBlBzBgDfuPJ9DKGkasUeCv3CHEFjp6nw=)
2: topvI4u_yc05Ro-Wd1LgO-ILlDM.roa (hash: YcyOx4QELjJwJBph+m+FjlEMDtBjOHDtaRK96fGlHwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:a0:7f:67:0d:36:30:06:10:f2:9e:25:3e:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Mar 13 02:00:38 2026 GMT
Not After : Mar 14 02:00:38 2026 GMT
Subject: CN=32662730dd456b234c3cc0aa026fb0baf3c2ed6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:97:9a:1f:56:b1:95:9b:97:8e:54:55:41:
f4:ae:e4:ae:87:e8:dd:a5:83:07:a4:fb:76:ba:aa:
d8:55:31:c8:fe:2c:7c:5e:98:ae:ba:ad:48:02:94:
42:68:ab:d6:d1:ce:5f:57:85:20:71:39:6e:f7:3e:
fd:05:13:9e:dd:6f:92:7e:ce:1d:e6:44:16:89:76:
53:3a:d9:74:47:b4:9b:dc:7e:54:4f:2c:b7:69:46:
c2:ba:1c:21:82:17:6d:79:a0:0b:0a:43:17:da:b4:
12:4f:90:a4:ea:7e:f5:13:a3:92:9d:d3:21:c0:7f:
de:c4:5e:0c:b5:4f:84:e9:2a:99:ae:8d:bb:13:33:
02:80:99:c5:26:1e:e5:5c:fa:bf:5e:34:34:de:26:
a5:56:0d:a2:ff:2c:09:8c:99:38:be:98:cc:db:fd:
47:a8:25:f4:a5:12:e9:1f:9b:5a:aa:67:3f:a3:78:
93:ea:c7:f8:c4:54:97:99:42:be:e7:63:d2:16:1d:
ed:b5:38:53:ca:2a:f0:bf:5d:07:c5:86:39:1a:e3:
7b:c5:c7:2d:f4:d4:ee:1d:10:12:88:d9:71:36:fd:
ed:ea:f6:8c:c0:ff:9a:8f:d7:b6:a5:c2:95:46:ac:
7f:79:a9:b6:3e:50:e6:2d:7d:7e:9e:4c:93:28:9b:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:27:30:DD:45:6B:23:4C:3C:C0:AA:02:6F:B0:BA:F3:C2:ED:6C
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:87:80:b4:33:c6:ce:22:81:f3:48:8b:61:6e:4c:59:f8:
03:1e:ac:1c:45:86:1e:35:67:3f:67:d8:37:d9:45:57:86:9e:
f7:ed:5a:a1:9c:41:35:e7:21:f1:13:56:d7:54:4b:6d:39:ae:
01:b0:38:c0:8d:5a:18:f3:e6:e2:6a:3d:48:4a:78:8a:7c:65:
92:52:16:fb:9b:7f:f0:78:4c:88:f3:f4:6e:76:4f:46:58:ad:
5b:3b:d0:fc:27:5d:2c:9f:cc:c8:1e:70:d5:91:44:ee:0f:35:
80:7a:e2:1d:68:7d:66:b7:19:32:96:c0:01:63:70:01:52:af:
fd:79:e3:ce:b6:f5:94:10:85:2c:2e:77:69:f8:52:09:0f:89:
c6:58:4c:0d:04:a6:3c:b5:5b:d5:ad:71:3b:64:42:66:e9:4e:
92:43:20:1f:ea:50:f4:96:d1:b1:a4:c5:65:a2:f8:ba:c7:e8:
68:99:62:31:36:6d:14:14:a5:73:9e:f0:99:27:49:a5:d7:0c:
fe:d3:7c:44:af:1e:80:7a:0c:35:f1:8c:52:31:b4:7f:dc:d4:
de:38:0c:1e:fd:4e:83:7e:30:d8:74:d4:6d:95:ff:59:77:6f:
02:19:15:86:a2:f1:7a:1b:37:89:75:25:2a:92:7b:0f:7c:ed:
c2:b4:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:49:23 2026 by rpki-client