Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: mndsz5xvyVs9sfqTdaAwrrTHXkn36oyvWeRrNkD61zQ=
Subject key identifier: C4:8D:1B:90:D1:FD:06:BC:F7:AB:C9:DC:32:E2:EE:7A:39:D0:DB:D6
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019D9BBF38E93E430A45B25BF3D01A37FB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 141F
Signing time: Fri 17 Apr 2026 14:01:33 +0000
Manifest this update: Fri 17 Apr 2026 14:01:33 +0000
Manifest next update: Sat 18 Apr 2026 14:01:33 +0000
Files and hashes: 1: 5WocRxOSmDdCp3t8dO5S36MRZuU.roa (hash: 2FyKXR8tCa5ZwTM66G1T6QFKNZ0CxQwW+d8mP57rB0M=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: hrAjqLmZrWQiL0l0kyLUMPle7AUwuLB5SqzWLEG49Oc=)
3: ndAxHc3VnkS73TWIqm8iAAZy9_k.roa (hash: d8ACwc3xMwTKBD/Rj4Jwn8VZBThWrsDZp4lALyC1e/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:38:e9:3e:43:0a:45:b2:5b:f3:d0:1a:37:fb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Apr 17 14:01:33 2026 GMT
Not After : Apr 18 14:01:33 2026 GMT
Subject: CN=c48d1b90d1fd06bcf7abc9dc32e2ee7a39d0dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:a4:3a:32:53:a0:09:75:a6:da:d3:9d:48:
3b:7d:5b:82:c3:e5:24:e8:b6:34:7d:7b:08:fd:b4:
ac:e9:3e:ac:dd:1e:72:63:62:6b:2a:4a:75:d4:5d:
32:aa:3f:e3:53:e2:d2:7c:83:31:6c:dd:1e:2a:96:
c0:8f:c0:f0:4b:f4:46:29:4f:30:85:6d:c1:fb:fc:
85:ce:39:bc:77:be:ab:d6:88:2e:88:13:12:ff:d0:
7d:7e:83:c9:c7:13:3c:63:3d:0b:a8:aa:77:e5:0f:
aa:16:7d:3f:0d:0c:41:e2:5a:49:8f:9d:de:e1:c5:
e1:10:7d:48:07:f2:04:10:60:5f:4c:97:2c:1f:e9:
68:5e:89:40:de:b4:08:89:2a:d9:49:bf:a8:dd:c2:
20:58:fc:08:d8:c9:13:38:c4:66:b6:46:4c:8c:5c:
f9:bb:52:e5:10:6b:b4:57:80:7b:ae:ce:04:40:1f:
ca:70:59:4e:2b:9c:b8:bf:20:c8:1a:3b:7b:97:f1:
29:d3:ee:ca:fc:6b:9f:2c:d3:af:c7:1e:f5:57:7e:
38:4d:e8:a7:e5:a0:cc:a7:ea:11:d1:b3:7b:5c:ae:
b8:27:ff:23:46:18:5e:e8:56:75:20:69:24:3c:89:
6c:fd:16:e4:0d:2e:62:20:e0:46:a6:08:1b:3c:3e:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8D:1B:90:D1:FD:06:BC:F7:AB:C9:DC:32:E2:EE:7A:39:D0:DB:D6
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:88:c7:76:08:2f:46:b0:9a:c6:cd:d1:e5:ad:19:a0:ba:36:
17:f7:28:f9:da:d6:32:7b:64:98:10:d6:c4:4f:46:a0:fb:2d:
5d:fa:a6:08:84:aa:a4:fe:e3:48:b5:24:a4:91:e0:21:56:bb:
5e:44:3a:4e:10:af:cb:cd:49:03:a4:35:20:c5:22:92:0a:26:
de:56:e6:04:ee:6c:b8:46:89:d7:ea:a7:fb:25:34:17:5e:74:
5a:07:20:43:27:b7:53:7b:85:02:25:cf:95:65:fd:e0:72:27:
dd:e2:97:90:71:ea:5f:e2:21:63:8d:aa:ca:20:4e:7d:3e:88:
e5:23:06:fc:d0:b9:a8:6c:ed:72:2a:4d:d1:e1:1b:0f:4b:7c:
b2:45:a1:59:d9:2b:e0:67:f6:dd:6e:f2:43:f6:ce:e1:14:f9:
07:e3:b8:c2:9a:8b:46:1c:e3:ce:cd:d6:36:a5:66:51:38:55:
00:e7:77:e7:8f:69:5c:a2:7f:73:6d:59:f6:2f:26:b0:96:b5:
a3:38:ef:ec:9f:ae:46:16:ef:db:56:19:9c:32:b9:c6:af:d0:
54:8d:1c:54:4f:05:fc:fc:5f:20:39:e4:d8:67:3a:d9:78:b7:
8a:a0:5d:bc:9e:f7:00:48:b3:48:e5:99:9f:67:b1:28:f6:2f:
21:c8:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:07:29 2026 by rpki-client