Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: UJU7OmI3MXftBt5L14c9Ozc/v5AcoIwU+SGKj/i/9Yg=
Subject key identifier: 70:9F:4D:8A:6B:E3:A0:9D:30:C4:1F:01:54:54:B0:2C:A6:CE:81:BA
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019CE7B74481F60D037F77E3278AFE61C625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 15:01:13 +0000
Manifest this update: Fri 13 Mar 2026 15:01:13 +0000
Manifest next update: Sat 14 Mar 2026 15:01:13 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: ABTy6HL9g9ihN5HHkqqQjA6pmwqS2MY/SEgfsSJIqEg=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:44:81:f6:0d:03:7f:77:e3:27:8a:fe:61:c6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Mar 13 15:01:13 2026 GMT
Not After : Mar 14 15:01:13 2026 GMT
Subject: CN=709f4d8a6be3a09d30c41f015454b02ca6ce81ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:f2:16:cc:f6:9c:43:73:a9:5f:a1:56:b0:
46:aa:8a:56:04:c3:60:5d:70:dd:b4:27:11:b0:72:
99:8e:ea:fc:ff:e0:bb:02:0f:09:a9:e1:dc:6d:d4:
03:5e:00:c9:0d:b2:86:26:08:82:fb:33:cf:7b:8a:
d7:05:32:32:fb:d2:c7:a9:d5:5e:f0:b4:91:48:e3:
81:24:44:b1:68:86:64:dc:5e:e9:04:78:fe:dd:42:
87:bf:26:92:09:e8:0d:3f:07:42:51:59:1e:5e:ff:
f8:7d:1d:ff:78:32:ea:ab:a1:39:c5:65:5e:90:3f:
75:de:f7:fb:d3:0b:f9:3f:18:fc:e7:c9:04:43:fe:
d3:a7:65:b6:16:02:ca:84:9d:2d:30:be:08:74:8d:
c1:08:4a:1c:65:37:ba:81:6e:ce:af:1c:cb:9f:a2:
38:82:b8:da:c2:01:6c:24:f2:5f:6e:df:ab:b0:40:
d6:e8:15:76:6d:4b:99:85:d9:3f:1c:66:77:ce:29:
4a:3f:c0:ea:88:3e:a0:61:87:94:7e:9b:96:67:96:
08:94:88:85:52:99:b4:1f:bc:65:13:80:06:a5:83:
45:f4:54:09:74:4a:4c:e1:52:3c:02:f0:b7:ef:08:
80:07:79:dc:b8:4d:13:5d:3c:48:66:20:b1:fd:6b:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:4D:8A:6B:E3:A0:9D:30:C4:1F:01:54:54:B0:2C:A6:CE:81:BA
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:d4:2c:3a:54:0c:28:bf:39:5f:51:43:de:23:00:e1:a6:
53:61:cd:1d:5f:27:d5:60:38:ec:c9:32:8a:b9:32:43:fb:47:
c8:28:b3:96:dd:e6:d1:ff:57:17:6f:ed:6e:6a:b3:7a:ef:a6:
b5:38:ce:71:e9:35:1d:10:ad:c9:96:aa:9b:ae:21:f2:9f:08:
d7:d8:0a:e2:40:10:ca:2b:eb:59:76:d5:49:4e:2a:90:db:0c:
c0:97:0a:9d:a9:ef:42:79:da:76:28:eb:1c:fd:1b:71:4c:75:
50:38:cc:f2:8c:4d:b1:99:a6:b3:d7:b3:e8:7d:e0:1e:7e:71:
a0:42:2d:e7:06:2b:23:3b:d7:7a:dd:7b:75:d8:5a:e9:eb:0d:
a4:6f:e6:a6:3b:2b:58:ac:69:0d:03:37:14:a8:dc:16:9e:31:
78:17:a9:95:f3:ed:ba:90:82:60:e9:6b:eb:df:c9:5a:b0:97:
5b:43:44:de:21:85:b5:27:08:55:30:f4:1f:33:c3:d0:a1:eb:
1b:c4:6f:af:c6:da:0e:77:6b:c3:7e:b1:e8:2e:d1:a9:1a:2c:
86:02:ba:2a:98:c1:45:d2:e1:96:87:bd:a0:2b:f3:57:1f:d7:
5b:20:6b:ec:b4:50:93:13:27:f3:44:65:dc:55:90:c9:60:49:
5b:a3:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:35:09 2026 by rpki-client