Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: R8W66yTUA6WhiXpWvXD2UUsLT0Ks+BOkeegDIEsqPNo=
Subject key identifier: A1:2F:91:9F:9C:32:56:BB:8A:7F:4E:39:D2:FD:9D:BA:BD:F1:EF:B2
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019DCF078D0294B5145BF26A3E0704CB8294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 02C2
Signing time: Mon 27 Apr 2026 13:01:11 +0000
Manifest this update: Mon 27 Apr 2026 13:01:11 +0000
Manifest next update: Tue 28 Apr 2026 13:01:11 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: wkTs1EYNjhRKp8j/32qR7dJjUbbo/7hxrfnuYXqLq/k=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:8d:02:94:b5:14:5b:f2:6a:3e:07:04:cb:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Apr 27 13:01:11 2026 GMT
Not After : Apr 28 13:01:11 2026 GMT
Subject: CN=a12f919f9c3256bb8a7f4e39d2fd9dbabdf1efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:f1:07:fa:3e:b8:1d:ec:cb:e4:d2:e5:c6:
36:12:3e:e9:e4:e9:81:db:01:9a:0a:d6:95:4b:62:
b5:14:4e:8c:5b:02:2d:1d:a2:ae:53:a6:77:e5:fc:
78:e5:64:76:bb:ff:96:b5:b4:87:88:35:9b:97:ec:
6f:8b:64:71:cc:91:be:6e:d4:fa:64:08:cc:5c:57:
db:8b:ef:7b:95:94:b0:f3:9e:31:df:ce:58:0d:70:
2f:74:2b:3d:06:e2:29:09:46:e0:68:e6:4f:2e:01:
5a:59:02:e4:0e:d7:c9:03:81:74:da:6a:6d:70:09:
59:7f:68:34:ea:c2:c5:c5:bb:f9:6f:97:9f:45:87:
97:3d:22:0e:48:95:83:87:30:3e:67:5c:ef:fc:b0:
06:13:9c:ad:c9:a0:b8:34:6c:60:82:5f:6d:75:55:
15:2f:05:47:1f:9e:68:ac:cd:ce:91:8b:04:df:a2:
f7:16:08:1c:3c:4b:83:a4:a1:36:e5:40:9f:7f:86:
a9:8d:28:52:04:c2:ee:08:c7:96:66:e1:de:9b:83:
30:2b:e4:db:c5:20:62:3e:f5:1f:1e:fd:98:03:14:
7e:a3:4f:2d:5f:d4:8d:42:70:30:21:4c:76:76:5d:
e3:bf:a9:56:01:17:1d:91:99:d3:61:f9:97:48:75:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:91:9F:9C:32:56:BB:8A:7F:4E:39:D2:FD:9D:BA:BD:F1:EF:B2
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8b:fb:80:6e:08:26:c0:b5:ca:34:67:1a:09:c4:29:55:ad:
5d:6c:23:a5:eb:d4:e4:ce:84:29:86:ca:e3:5d:e4:2d:31:c1:
e6:e7:41:81:71:e6:fc:2b:19:7c:dd:3c:42:e4:7d:40:3d:26:
3e:80:5a:84:3d:66:6e:9d:5a:48:3d:46:5d:85:61:e4:22:ce:
69:d7:f7:8b:9d:3e:92:f8:80:62:0c:a9:73:f8:9a:65:cb:4f:
c6:a8:c5:65:cb:65:d4:6e:03:69:1f:81:41:e8:8d:03:83:8a:
71:2f:5d:17:80:41:b0:2c:0a:84:36:a3:87:06:9f:ad:31:7d:
46:c6:cd:fb:d9:91:0b:64:5c:8c:52:7b:b4:c3:7e:5f:9f:0e:
18:77:aa:f9:3b:dd:31:6a:7f:56:45:98:aa:c4:48:9c:60:49:
cb:5d:ae:5d:d0:d1:9c:8c:7d:0d:8d:18:ee:08:c2:3e:18:e3:
5e:4f:9e:52:6c:6a:dd:0a:3c:76:73:b5:3e:d2:00:32:b4:d4:
ff:a9:95:88:95:ca:87:b4:16:b0:35:29:0d:f7:20:55:04:96:
24:7f:a9:fe:6c:0c:ab:9a:0e:bb:0f:e1:ee:a6:b1:30:6c:0c:
7c:94:9a:79:2a:11:8e:0e:1e:cb:e9:18:2d:17:97:74:c7:ce:
3e:97:bf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:06:08 2026 by rpki-client