Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
File: JdkBZyfOqUe9tIs6fefiBxvkWAo.mft (raw, json)
Hash identifier: Ol3X+/EPfHpkSFPWgSDanb/1RcLK3fByRp9m6eZs3RI=
Subject key identifier: 28:EC:D7:AB:88:1D:17:1B:15:BC:B9:E7:AA:70:94:16:CC:4C:CA:1D
Authority key identifier: 25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
Certificate issuer: /CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Certificate serial: 019D3A8AC148EF18823CAE3431AAA6580CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
Manifest number: 0AF5
Signing time: Sun 29 Mar 2026 17:01:05 +0000
Manifest this update: Sun 29 Mar 2026 17:01:05 +0000
Manifest next update: Mon 30 Mar 2026 17:01:05 +0000
Files and hashes: 1: JdkBZyfOqUe9tIs6fefiBxvkWAo.crl (hash: fmFeBnfxM429fvFeX3EZCC4VXtzrHsxGiWlrU//wbTo=)
2: Vb5g5T6bqFoh8qtm0J_JkslpOEo.roa (hash: COQQhfCQ5pueYBwG1/nepox+6Hyg8CKRyfOh9o2cEpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:c1:48:ef:18:82:3c:ae:34:31:aa:a6:58:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d9016727cea947bdb48b3a7de7e2071be4580a
Validity
Not Before: Mar 29 17:01:05 2026 GMT
Not After : Mar 30 17:01:05 2026 GMT
Subject: CN=28ecd7ab881d171b15bcb9e7aa709416cc4cca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:f6:9f:13:47:0f:fd:c3:17:91:62:9c:7f:
65:ea:27:68:02:00:58:1d:5e:b5:ed:a9:2d:2d:c4:
0b:6f:7c:a1:24:c2:69:2e:bb:08:28:87:94:38:e5:
6f:c8:a2:e8:6e:f7:a5:25:3c:0e:3a:7b:8a:4d:f1:
35:d2:44:f9:3a:da:fd:54:69:30:d9:4f:44:c3:9b:
5e:e0:a9:b8:1f:23:32:21:d8:ae:6a:2e:1c:b2:5a:
a2:f8:70:ae:4a:7b:c8:4c:f9:f4:91:7e:b4:e6:c0:
01:89:e8:4f:5d:f3:9d:eb:ae:a8:af:62:77:ff:a1:
d5:55:bb:71:c7:ee:50:3d:f8:50:f2:89:62:4e:42:
4e:47:77:bd:24:4c:4d:d3:ff:e7:a0:9d:2a:49:c8:
30:31:7a:9f:21:0b:36:cf:24:cb:4c:5a:07:1d:da:
ee:4c:73:78:92:d8:35:8a:77:60:d0:8a:8b:b8:9b:
24:28:95:5b:c3:46:04:81:6e:17:32:66:f6:6f:df:
93:cb:ca:30:07:64:92:dc:3b:de:ba:2f:41:6d:3f:
a0:a0:04:de:ac:cf:4a:05:bd:6a:c1:5d:4b:2d:ec:
04:ff:f5:d3:a8:64:b8:86:b8:3e:8f:c0:17:89:11:
28:b2:c7:e0:22:84:a1:a5:f6:07:38:85:fd:73:3b:
a9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EC:D7:AB:88:1D:17:1B:15:BC:B9:E7:AA:70:94:16:CC:4C:CA:1D
X509v3 Authority Key Identifier:
keyid:25:D9:01:67:27:CE:A9:47:BD:B4:8B:3A:7D:E7:E2:07:1B:E4:58:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdkBZyfOqUe9tIs6fefiBxvkWAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3cc89e-76df-46b3-9f14-a38dda13a608/1/JdkBZyfOqUe9tIs6fefiBxvkWAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a2:28:3b:98:51:c6:d4:ac:65:8a:80:0c:21:2b:bd:07:c4:
6d:59:d6:d8:e5:f5:d7:2f:cc:28:8b:57:99:47:74:d0:36:a0:
62:bf:84:36:93:03:73:6b:bd:c0:f5:f6:3e:c0:41:08:f9:c7:
92:c9:1d:93:63:82:9b:c9:31:36:63:1f:27:81:c3:56:b3:b9:
b1:37:35:0f:d9:a7:32:31:4f:fb:fd:82:83:b3:a3:3c:3d:1d:
f4:54:4d:65:fc:93:1c:43:c9:b7:fb:da:16:e4:17:61:9b:b2:
14:33:c1:95:e9:5c:39:fd:fe:d5:9d:61:bf:db:50:eb:16:2b:
fd:27:78:d8:4b:75:4d:e1:62:4f:86:42:d4:95:58:57:2a:fb:
e8:5a:69:3a:0d:f6:95:56:18:cd:c4:24:3d:d3:38:14:e8:52:
db:0d:b2:86:90:4e:10:46:76:ba:c3:ae:0f:e1:6a:4d:9c:d1:
32:44:5b:9d:d0:64:7e:5d:68:cb:e9:01:76:11:06:59:94:d2:
20:d0:f4:78:fd:c6:56:b3:a9:6f:56:8d:b4:ca:1f:f2:84:16:
4a:b7:2b:fc:64:6e:63:94:f1:ca:95:51:03:54:2c:31:b0:2f:
4b:95:30:1a:b7:06:7f:14:5c:9d:6e:61:17:9c:11:30:0a:64:
49:ab:09:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:47 2026 by rpki-client