Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: yepxEugbruIkDVb/74vBmdY8LuySiAxOdsTTL0VT+xg=
Subject key identifier: 02:E3:FE:66:53:75:9D:51:A7:3F:71:6C:EC:32:8D:A4:E9:3C:8D:6C
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 01A17E860EE617750719DCAD0D7C348C1B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 04FA
Signing time: Tue 27 Oct 2026 18:01:17 +0000
Manifest this update: Tue 27 Oct 2026 18:01:17 +0000
Manifest next update: Wed 28 Oct 2026 18:01:17 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: yRnhAx2W+HSMXJhkDL5BC27V5Y5Zqrb2/GFqF0U0rHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:0e:e6:17:75:07:19:dc:ad:0d:7c:34:8c:1b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Oct 27 18:01:17 2026 GMT
Not After : Oct 28 18:01:17 2026 GMT
Subject: CN=02e3fe6653759d51a73f716cec328da4e93c8d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:f4:b5:93:55:b4:c2:fc:11:ba:b5:bb:5b:
4b:15:1f:ae:64:89:c9:2a:50:54:2c:aa:b7:b4:99:
b8:2f:69:af:ea:79:b6:67:f1:48:95:3b:12:0f:bc:
2c:9e:0b:b9:57:f2:98:bb:8e:0d:4c:91:33:67:a2:
82:f6:1a:0a:a7:02:64:0d:9f:8b:d1:a1:d3:48:92:
de:ec:23:6b:c1:dd:42:47:9a:e8:05:b9:a8:7a:f6:
6a:b4:ff:ed:31:06:07:05:53:f1:56:bd:31:9c:a7:
04:37:04:0d:b1:db:11:85:6b:fd:0e:2f:d5:ed:18:
fb:4f:f1:19:74:99:65:1d:e6:73:19:f1:a6:43:ea:
c8:13:23:c8:24:08:73:99:05:50:9c:24:5c:90:ba:
aa:ef:56:87:34:ce:ce:1f:1a:46:bd:12:dd:15:48:
4a:01:03:02:e4:57:a7:ad:60:c2:8c:02:d0:2a:4a:
bd:6a:26:da:f8:6d:eb:03:52:cb:4e:dc:9a:64:24:
14:33:1c:f9:ca:8d:f5:3b:aa:36:2e:c1:93:b9:fb:
77:d8:ce:c5:72:1c:9d:2c:4e:1e:09:3a:24:8e:78:
56:ed:f2:be:a6:c4:4a:c8:ef:57:56:5b:59:05:b3:
59:98:55:af:15:9a:cb:d0:7f:1a:2f:dc:fc:52:3b:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E3:FE:66:53:75:9D:51:A7:3F:71:6C:EC:32:8D:A4:E9:3C:8D:6C
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:12:26:f9:5e:be:7c:12:bc:46:bb:1c:e2:3b:eb:d0:15:97:
35:00:e0:99:10:06:97:5d:72:06:51:b8:09:d4:30:68:88:b9:
22:a5:85:f1:37:97:51:b4:3d:c2:2e:97:00:e2:a2:7d:57:b7:
84:d4:a8:37:4c:16:9e:61:c7:99:97:86:73:c0:09:6b:2e:76:
cf:71:8f:d4:d4:22:aa:8d:83:b6:8e:01:2f:af:9e:68:87:04:
30:97:04:2b:5b:42:3d:bb:4d:32:3b:f8:6d:2e:69:85:05:96:
1c:a9:9f:5d:03:01:9b:cf:e0:dd:15:67:76:31:4a:99:63:ce:
42:36:aa:a6:c7:ee:26:94:db:f0:e3:76:35:35:11:6c:b2:e5:
e1:cb:de:10:4c:2b:e2:5c:b0:87:ed:6d:0b:b8:5f:69:bf:44:
6b:b0:5f:ae:c2:e4:e7:7c:76:8c:40:14:ec:0a:ba:6e:29:67:
12:f9:04:78:7e:cc:ac:62:0b:c9:56:b8:b9:ca:e0:c7:00:de:
71:2a:6a:4b:1a:27:6a:b7:d2:e3:25:54:1c:e2:f8:0d:03:54:
f1:3a:93:f9:49:7e:4a:93:ea:db:56:5a:97:74:f8:26:b2:73:
41:81:c6:1a:1c:27:06:3f:33:13:f7:6e:39:19:f4:85:70:26:
ac:71:4b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:42 2026 by rpki-client