Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: rnlXtueilZu7oTZcapqqdhItTS24G+hnBfbR97hdrTg=
Subject key identifier: 0A:54:BA:98:4A:58:04:9B:71:C8:C0:5F:06:E4:53:44:1C:EA:FD:7B
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019D9AAC1F3F48A25BB21421CD535EE8FC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 06F8
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: RbHfbi7d1A2mJi4c+uL/yCYpbirDdbP/jolTUi2F/CI=)
2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1f:3f:48:a2:5b:b2:14:21:cd:53:5e:e8:fc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=0a54ba984a58049b71c8c05f06e453441ceafd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:90:33:b4:84:57:28:e1:60:6c:f5:83:8c:
d6:b4:6b:e8:6e:f3:21:b9:13:81:98:5b:36:55:c0:
48:70:0a:7f:88:6c:09:e6:a3:87:6e:e8:49:ec:b4:
e6:37:bd:b2:4e:dd:d7:29:72:74:be:ae:ba:f7:f6:
43:43:88:d2:9c:26:0d:d0:cc:4d:12:76:a0:31:35:
47:8f:b9:02:72:28:36:ed:1b:f1:7d:d3:dd:e2:92:
31:f5:46:66:72:d9:02:c4:76:f3:ff:75:65:d6:b2:
36:15:39:1d:66:c7:e2:7e:f8:50:39:3d:a3:55:df:
43:a8:2d:85:66:b4:56:43:23:7c:7f:c0:86:0a:b4:
6a:6e:a1:20:26:6a:b3:29:73:42:f9:3a:12:78:82:
45:57:1f:36:64:03:8e:60:fd:25:20:2f:ac:ea:08:
2e:d2:ac:87:17:52:f7:0e:88:df:68:b6:1e:f1:7c:
8f:e4:54:f2:c4:a5:33:3f:cb:3b:58:84:d0:f2:b0:
88:3b:ca:4f:c0:94:72:74:b1:f9:8a:06:12:fa:f8:
e5:90:3a:1e:60:c5:39:86:fa:d4:3c:36:61:59:76:
08:9b:e2:00:90:21:28:a6:b0:ba:62:04:3e:72:61:
b9:10:a4:7d:e6:86:2a:aa:69:02:70:ac:42:72:c7:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:54:BA:98:4A:58:04:9B:71:C8:C0:5F:06:E4:53:44:1C:EA:FD:7B
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:69:bc:71:90:26:1f:6a:35:ff:a4:69:77:da:80:6b:7e:
0f:52:0b:76:a2:03:09:13:15:fd:f9:6f:fe:48:1a:20:5a:e2:
49:b3:06:fc:70:75:6a:e6:60:2d:4f:93:51:d6:fe:8b:7d:f5:
5e:fb:ce:4f:2a:57:f3:00:b7:4b:bb:f9:23:d2:94:83:6e:7f:
8f:8c:b5:94:1a:79:f3:53:22:9e:47:c9:61:f2:42:0b:f7:8a:
c4:31:cf:06:e9:94:85:0a:ed:56:6a:2f:08:93:1e:6c:0a:66:
41:4e:43:fe:4d:7b:45:83:0f:1e:1b:8f:c9:5c:71:5f:1c:30:
b7:d8:0c:fc:19:12:ea:5a:04:1e:eb:a2:0f:7f:32:67:d7:12:
d5:6a:44:9a:db:4d:c5:55:14:31:67:5d:ea:93:0b:73:e9:26:
56:ad:85:57:b3:11:b0:99:1b:38:12:92:f7:f3:71:04:9d:fa:
dc:ff:76:30:4b:ee:18:96:d6:98:34:9a:a0:79:93:8a:d6:8e:
da:7b:bb:ad:51:d0:fe:c8:c3:32:ce:31:84:36:6e:89:23:b5:
be:b2:04:ee:0b:5e:2d:90:54:23:49:e3:cd:14:85:5b:28:59:
1c:3b:e6:1c:b1:a4:cc:1f:3c:77:d3:bc:f2:3e:ee:48:99:23:
ce:f6:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:12 2026 by rpki-client