Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: VhXOAUacV+K6EzeEgU6ljzeiZw2dU+jqAtfN+EjnWrw=
Subject key identifier: 36:6E:03:DC:01:BA:C2:B9:E1:7C:7F:A9:61:D6:B6:CC:78:C7:27:F5
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019D386628B03A195CC3224C3CA0EA77DE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 12AC
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: 8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa (hash: E0JF7X9/XHoU7PiFgFPjp+o209rtD/x1WqRQ5NKbHU0=)
2: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: Cn9O1dbrFGoNm4rYSnX+Cg8RBp0p78vLmzwdnd2vO5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:28:b0:3a:19:5c:c3:22:4c:3c:a0:ea:77:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=366e03dc01bac2b9e17c7fa961d6b6cc78c727f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fa:dd:0d:0d:14:bb:b7:e8:a7:60:25:43:9f:
6f:7d:f1:32:7a:11:31:56:fa:7e:5e:a7:c2:07:8d:
c1:fe:7f:fd:e1:ea:87:8f:ba:4a:0c:01:c3:0f:34:
6e:36:9d:37:88:70:1c:d2:87:1e:88:fd:1a:03:9a:
c7:8a:7e:b8:af:f5:7d:a2:3a:90:3b:8f:e6:ab:44:
71:02:41:10:19:15:6f:cb:f3:64:9a:c1:5e:72:1e:
f3:d5:8b:81:ca:92:e0:60:18:91:59:1e:69:92:78:
ad:d5:89:25:66:5e:30:0d:bf:6e:52:3a:c7:93:9e:
90:fa:ad:b1:e7:ae:2f:30:1b:d9:8d:66:66:7a:5b:
44:8e:99:07:3a:da:a6:c7:32:dc:ca:0f:4c:35:3e:
06:72:c1:71:87:21:fc:d0:1b:12:cc:89:78:e5:3b:
d8:a7:e3:22:f8:4b:28:d8:93:6e:07:f9:6a:52:e7:
52:b8:99:06:d4:bd:ae:26:6e:e4:89:f0:7e:cc:a4:
ee:6d:2c:be:a3:e7:44:97:aa:6c:a2:cc:0e:96:a3:
58:66:8e:dc:44:83:81:14:04:ce:92:ec:4a:30:a9:
fb:ea:fc:90:8f:0a:7b:59:12:9f:50:fc:cf:97:ab:
3f:29:e8:e4:d2:c2:df:c8:32:a6:a1:b3:c4:47:bc:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:03:DC:01:BA:C2:B9:E1:7C:7F:A9:61:D6:B6:CC:78:C7:27:F5
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:61:ee:67:50:9c:4d:7a:2a:8d:d4:32:c8:dd:b8:89:63:7b:
1e:53:93:d5:3c:7a:9f:ba:b3:d4:f7:2f:bb:1a:45:75:41:4f:
fa:0b:64:e7:52:20:12:28:e9:a6:2f:34:e5:53:71:52:d2:8e:
50:bc:78:38:b2:60:aa:71:ee:a0:0b:94:d8:b9:ab:cb:bb:dd:
33:e0:8e:30:e7:43:31:6a:89:6f:2e:d3:da:64:ff:c3:e5:03:
b9:36:7c:4c:e6:97:df:44:22:4f:6f:5e:21:51:fc:9d:3a:a3:
67:d2:63:75:2e:a2:32:ef:5a:03:5e:3f:e9:8c:32:4c:4d:94:
dd:64:c6:3b:ab:05:71:c0:59:e4:27:29:3a:70:33:bd:20:ce:
42:2c:4b:ab:e6:bc:f4:6a:13:75:2e:8c:06:76:19:1a:02:09:
32:b8:3f:f9:35:14:13:73:2d:33:4d:6d:0d:ad:4f:01:53:d7:
61:d0:99:9b:96:34:af:52:d3:f9:df:01:70:3f:55:0d:56:1e:
df:67:b8:9d:27:83:9a:ea:dc:58:9c:19:f2:d8:f6:52:99:20:
c5:2d:6d:8c:12:36:fa:d5:43:0c:d0:46:61:b3:82:02:74:bf:
38:c8:d4:80:c8:40:7b:0e:a6:fb:6a:ae:bb:8e:2f:10:c3:34:
f9:89:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:33 2026 by rpki-client