Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: QZlda8+WBk+hO3dV/+T3WZbvHXWpJmGvhqfvROICYr0=
Subject key identifier: 5E:2A:B1:ED:DA:DB:2A:14:2C:B5:CF:0D:90:ED:22:BF:E4:A4:18:D5
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019D3A1D125196943FF9F2E9901C93D1CC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 15EC
Signing time: Sun 29 Mar 2026 15:01:16 +0000
Manifest this update: Sun 29 Mar 2026 15:01:16 +0000
Manifest next update: Mon 30 Mar 2026 15:01:16 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: YXUor+ty2yuElnMecsbGsgRCpgL2WdiZvc5ckOyBY+0=)
2: MAhA7gXCpIgcNBSezx0_LDNuYeE.roa (hash: gtd0FuYBYyd/LSXZ+56QOfyLvd9q78kArCStkyYOOCk=)
3: mzscA40zEoiH9Kq_9VBI19qX6D0.roa (hash: uudB9v4jzWmfwl14GqVDG6tHwsesFOICQ29lxjuw2OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:12:51:96:94:3f:f9:f2:e9:90:1c:93:d1:cc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Mar 29 15:01:16 2026 GMT
Not After : Mar 30 15:01:16 2026 GMT
Subject: CN=5e2ab1eddadb2a142cb5cf0d90ed22bfe4a418d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:ea:e3:97:cd:24:eb:ba:5f:97:b2:c7:14:
e6:a6:d0:69:56:5f:5b:58:83:60:c1:14:03:a9:68:
5b:28:c6:15:04:7a:ad:cf:2a:81:37:c0:a1:08:52:
33:67:10:d2:06:30:4a:47:e4:83:7a:12:4f:61:4c:
78:6d:c2:d8:1e:23:48:49:66:55:4c:b3:8a:7d:a4:
22:f5:19:a8:c5:ec:a9:49:c3:a5:aa:d5:c1:d9:c1:
fa:d8:e0:9e:51:2d:b8:c2:bf:0d:ea:f7:6d:2a:7b:
eb:59:20:7f:b0:3c:3b:a7:6c:6d:de:2b:77:09:16:
a0:67:2e:af:34:9f:d4:43:96:78:35:5c:71:6e:c9:
9e:6b:5a:83:dd:61:4a:37:0a:b2:34:f5:d9:91:5d:
74:29:43:d1:1f:b6:cc:9d:9d:ec:63:49:af:36:bf:
81:aa:d4:25:c2:c1:b5:e9:27:76:de:17:f2:f3:23:
61:57:82:56:cf:14:d4:56:91:69:45:b4:0e:91:01:
1b:e6:ad:66:64:e1:bc:fe:d1:3b:a2:dd:c7:58:1d:
c3:ef:9b:9a:50:76:07:58:b6:1a:a7:76:0a:ae:90:
80:7f:69:bb:37:26:d5:6d:c1:f4:64:f5:a2:db:f0:
d7:ab:b8:0a:30:57:fe:14:58:86:24:c0:ba:8f:99:
d0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2A:B1:ED:DA:DB:2A:14:2C:B5:CF:0D:90:ED:22:BF:E4:A4:18:D5
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e3:0f:c5:88:df:30:ca:81:ab:b0:e4:36:86:67:aa:92:b9:
2a:2c:61:01:40:9b:af:eb:f6:09:a8:30:c1:47:46:68:bf:d4:
35:3a:9a:82:c9:5e:e0:74:47:0c:03:b7:c5:3d:b1:44:e8:fd:
77:be:89:fb:9b:c6:27:91:00:35:5c:19:74:33:71:04:81:27:
9e:a7:93:9f:9e:c9:6c:19:6f:8d:68:a6:c6:6b:c8:52:dc:0d:
db:a3:5a:ce:f9:e9:dd:8f:e9:7c:52:d9:51:56:23:16:cb:a0:
69:fa:b3:b6:89:c6:0f:0e:9a:45:6a:da:f6:54:08:fb:83:ac:
00:bc:35:a9:4a:c1:db:7e:38:fc:0b:cc:6e:56:fe:ff:da:e2:
23:6e:e4:9f:8d:87:78:6b:d5:48:ec:fd:ca:19:8a:0e:a0:3c:
a9:6f:e3:52:2c:e8:3a:5e:1f:77:3e:a6:ca:bc:3a:d9:61:be:
49:4f:62:3d:53:74:90:27:43:b3:51:3e:25:0e:26:50:6d:be:
4d:b9:8a:00:af:67:1e:73:bd:55:61:f7:d8:63:71:9c:02:a2:
c6:01:fc:ae:b2:29:8e:c1:2b:28:6e:c0:9f:aa:ca:b9:26:81:
27:c7:f6:23:fa:c0:a5:90:a2:3b:b0:dc:3c:3f:c8:7b:46:97:
09:a8:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:07:55 2026 by rpki-client