Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: JIpa/L5q9aEwzlmhUzldY+u4Kijf25rhwcfjG/6FoSw=
Subject key identifier: 97:09:17:A9:02:53:DB:9D:F3:F8:FA:F7:1F:6B:A6:09:11:EE:F2:DB
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019D37C01BFD95013AC0AE7DEF2F876A4625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0BAA
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: oOaoFo1aYcCjIW4Mwy+NqpeodnAslLvpN1nFcm+asEE=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1b:fd:95:01:3a:c0:ae:7d:ef:2f:87:6a:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=970917a90253db9df3f8faf71f6ba60911eef2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:13:3e:27:6e:ee:b6:78:d2:c9:63:05:c8:
22:f3:f2:1d:21:33:be:79:f7:93:f3:1c:a7:40:53:
f4:27:39:5e:e5:da:7e:1f:ee:6d:3f:fa:ab:4d:68:
81:5b:10:48:68:96:9f:0d:8a:dc:8b:32:00:09:b4:
95:f6:a5:26:c7:38:20:b0:05:1f:3c:bc:84:58:4b:
12:57:bf:71:b8:bc:ef:69:da:b5:97:68:e7:a3:a2:
27:61:90:1c:9a:63:3f:85:7a:3c:94:62:6a:cf:3d:
c4:13:34:2f:39:1b:66:b4:98:7d:cb:08:b2:5b:95:
f2:6f:24:1b:e6:58:a0:da:f8:34:5f:c6:a3:84:4e:
3f:82:3a:32:cf:eb:ad:c6:e3:1b:6d:92:82:89:22:
55:d6:a3:99:3d:92:3d:cf:61:0c:5e:f1:d7:43:b8:
9b:4c:58:50:d2:82:59:e2:98:1e:ba:f9:55:2f:fc:
42:47:54:ce:a6:45:db:63:9f:15:7b:9a:fe:42:68:
df:53:3e:4d:f2:f3:60:c9:23:8e:9d:99:20:46:7c:
19:b7:f9:62:71:96:8e:02:b0:42:13:99:75:44:ef:
cb:86:5c:a6:48:32:35:9a:b8:8b:df:c5:99:21:18:
e8:52:1e:ae:df:1d:be:96:74:b3:79:d9:ef:3c:30:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:17:A9:02:53:DB:9D:F3:F8:FA:F7:1F:6B:A6:09:11:EE:F2:DB
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:fb:56:9c:a6:82:93:77:b5:a0:af:be:ff:97:0b:6f:1f:
5c:6c:90:3c:7f:a5:05:db:13:68:87:64:f1:f6:ae:22:55:93:
00:16:6a:b6:ad:97:79:1e:15:86:f3:5f:24:5d:31:fa:87:95:
66:a6:1e:b2:d5:8b:25:73:14:ac:2a:7e:45:08:66:da:ea:49:
13:79:30:8b:c4:59:e2:b3:c2:d2:2a:06:ab:c6:fe:61:32:47:
71:f6:8b:9b:17:e9:1d:ee:eb:02:23:8b:2e:f8:30:ca:fe:e3:
cd:70:a9:04:3c:bd:4e:b4:5e:5b:12:76:68:30:1b:ae:08:fd:
5c:d2:40:9b:e2:06:6d:66:22:fa:06:83:c1:8d:eb:ae:76:2d:
5f:8b:94:5c:b6:31:3d:e0:d8:00:05:b2:0e:f3:bf:fe:79:07:
8f:c4:bd:50:f1:87:21:77:77:c7:83:0e:71:f2:9f:6e:51:43:
1b:ef:d9:c7:76:b5:61:99:45:20:86:83:7c:dc:58:0f:2d:aa:
36:60:e8:e9:25:09:08:30:6f:38:e0:4c:43:0c:d4:3d:ed:a2:
bd:78:1c:b6:ca:74:56:41:f4:d2:38:b5:d6:d7:7c:59:28:e9:
1c:f5:0c:62:87:80:e1:a8:60:ac:5e:83:d1:14:39:46:81:72:
78:51:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:38 2026 by rpki-client