Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: dvILwnkAKiFZasP0MWdGIN5v1f+lUgpWqMeiT4rig8k=
Subject key identifier: 52:CA:1B:BE:56:91:E5:79:43:F8:85:B0:3B:48:71:B9:A1:CA:BE:7E
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019D397802063B35FFB4C2E1188BA52EB0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 02C4
Signing time: Sun 29 Mar 2026 12:00:59 +0000
Manifest this update: Sun 29 Mar 2026 12:00:59 +0000
Manifest next update: Mon 30 Mar 2026 12:00:59 +0000
Files and hashes: 1: D17eb-YaN69zmYAWu9of4KG5E8Y.roa (hash: stGJZzeKt4km6Sv/uUT+Q3OWclxmp1dOYGAe5XGVe2w=)
2: FZgi84RMvT9_2vE42FDuM9M6yQo.roa (hash: MWv0A+a3Hv1l7nsYC0PKMV2mBEaDOEQF7nbo1KN1I5Q=)
3: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: +7vCuyl39erU8B4JMahkP2wByn3Chso5ln/leC2k1z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:02:06:3b:35:ff:b4:c2:e1:18:8b:a5:2e:b0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Mar 29 12:00:59 2026 GMT
Not After : Mar 30 12:00:59 2026 GMT
Subject: CN=52ca1bbe5691e57943f885b03b4871b9a1cabe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:9a:37:4c:8f:fb:65:d8:91:d6:1b:73:9b:
2c:4f:64:53:f2:8b:47:13:e4:e6:a4:ee:ab:0e:58:
51:20:b9:4d:4a:54:68:b5:22:53:d4:5e:c7:a2:79:
0e:69:8f:12:c9:0f:b4:9b:1d:b2:d7:9f:21:9a:35:
d0:93:df:78:d0:44:3c:7d:5e:1e:a3:25:77:16:2d:
7c:53:d9:6a:f7:81:96:b1:3d:c2:01:f5:b6:9d:5f:
fc:97:9f:fc:b0:43:dc:23:25:2a:d3:7c:4b:bb:34:
9c:10:da:6e:4c:df:7e:76:18:09:71:7e:b3:3a:ca:
83:4f:e2:2b:34:53:87:56:0a:71:52:b8:f1:b9:03:
b9:be:72:cf:a0:9d:a4:1f:e1:74:42:b2:c3:f9:1a:
31:16:d6:d8:0b:8b:93:c7:ed:58:51:c2:ed:fa:f2:
13:82:c0:e9:c7:1f:83:f8:f8:d1:8e:93:6a:b9:72:
fc:08:c5:b6:ca:40:2c:8c:bc:1d:19:90:89:25:7d:
92:75:f9:e0:c4:ec:c3:0e:36:bd:cb:1f:a1:35:3e:
a2:bb:73:38:6b:fb:ef:22:da:c3:8f:7f:87:57:87:
42:ee:78:8c:ac:ba:81:dd:53:2b:5a:9e:28:57:ec:
82:7a:17:74:32:04:10:36:38:c2:9d:6b:d1:69:51:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CA:1B:BE:56:91:E5:79:43:F8:85:B0:3B:48:71:B9:A1:CA:BE:7E
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:a1:a9:05:dc:76:47:94:af:e1:ae:61:62:a6:6a:00:96:
92:83:a3:62:0d:13:d4:e5:61:7a:a2:18:1d:23:96:21:3f:9e:
d4:61:b7:17:c2:2e:af:ad:91:c8:36:6b:b2:4d:d4:5b:0f:63:
8c:66:f9:69:cf:9c:b1:41:10:a3:ea:c9:a5:36:10:58:a9:08:
63:a2:48:91:78:a9:23:2e:86:7e:d9:fd:f4:0b:61:4e:e7:3f:
44:7e:41:ee:06:03:a4:d9:71:85:46:11:4e:b4:6b:b9:79:cd:
45:4b:2f:a1:df:fd:57:75:58:88:96:51:61:af:06:aa:3e:c1:
df:75:9e:38:ef:4e:f9:2c:79:56:f2:17:ce:ff:b2:c8:8e:4f:
4e:09:8a:e7:a8:f0:c2:b5:ee:9b:fb:c9:03:4f:49:4c:7f:7d:
d9:30:96:58:3a:a0:31:03:29:39:c6:51:93:05:7d:7f:fa:c3:
38:13:4c:84:c4:c3:f7:ec:47:1b:00:55:03:8c:a7:9b:91:81:
fa:ff:4f:98:2d:3e:fb:cd:83:93:7e:af:83:be:7a:dd:2f:fe:
22:02:d2:eb:23:1e:ae:c1:00:11:4b:55:39:09:14:e8:93:f5:
3d:a3:2c:49:98:c3:96:d5:97:cf:cd:57:0f:77:6f:8c:0f:af:
14:c5:d6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:47 2026 by rpki-client