Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: HYhm+XUpvC2VpjNYtK68tXFveMz5C+f18PSSbAhaqMg=
Subject key identifier: 2A:0C:36:97:EC:97:7D:76:4C:12:C4:AF:ED:D0:5E:47:5D:D2:03:D2
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019CAB340BC6D25E777A1D5DC999DBF9BE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 067C
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: Si8AaoXwIShgenJU2LuLOWm/zRQ/8D8XOqaQgZEDb9Y=)
2: qkkBRbbgk03fhxQbqtIxu6rxUSs.roa (hash: O2DGXBeKtsG4B29jCyT2BVcPBMzu25RKDg9by8oTkos=)
3: tHXazgBXsceuUAJhoJGckJWKiyM.roa (hash: 6b1NPFovjCL0B3snTScPHML/dlS9QVd+EflwMNuX4WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0b:c6:d2:5e:77:7a:1d:5d:c9:99:db:f9:be:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=2a0c3697ec977d764c12c4afedd05e475dd203d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c5:21:e5:07:19:ec:7e:a4:ab:93:29:6d:c3:
8f:b5:d3:34:15:c2:57:d5:93:5e:43:27:29:db:53:
6a:a7:04:e8:36:73:ed:da:11:23:1c:74:1e:15:2e:
04:5a:ce:24:5a:40:bb:ed:e3:19:09:b7:b0:ab:b2:
12:5d:3a:fa:27:a4:66:f3:8e:a3:cb:ec:42:24:4e:
65:37:72:09:f0:24:63:53:80:35:64:91:aa:82:ac:
bf:f0:3e:e1:03:47:38:23:e8:b9:f7:d9:0b:c4:91:
6b:39:5f:87:c7:12:b6:d2:01:51:e2:33:6b:e6:bd:
fb:43:96:f7:42:35:63:2d:1e:9e:da:1a:08:c0:d3:
33:a5:3e:2b:fe:0a:ce:6b:09:df:32:a3:41:0a:1c:
c9:35:92:73:cd:d3:11:ca:7f:b6:b7:4b:a5:ba:aa:
b2:28:40:6d:ac:39:c6:00:9f:b0:2f:71:b1:9f:04:
8e:1f:27:e7:0a:c4:32:0d:c8:63:6e:ec:bb:97:70:
58:a5:7b:01:cb:d8:92:be:81:d8:87:53:58:c9:ac:
0e:6e:01:ac:90:71:cf:d9:4c:61:87:30:8c:36:4b:
3a:b5:ef:ec:5c:ac:b2:f3:b1:aa:7d:81:ed:85:99:
5e:b9:59:b5:42:23:e5:63:69:3f:98:38:a7:4a:80:
24:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:36:97:EC:97:7D:76:4C:12:C4:AF:ED:D0:5E:47:5D:D2:03:D2
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:7f:4f:a7:36:0b:83:4f:52:5c:9c:70:a8:6e:75:0c:27:60:
be:6a:a8:4b:d0:73:5a:ae:33:41:4f:85:4d:85:04:10:1c:df:
96:9a:b1:d2:20:04:4d:e5:2d:0c:29:df:71:d8:a6:35:0d:3c:
cc:b2:6c:48:e6:9b:a3:cd:4f:64:be:87:43:0c:f6:f7:78:8f:
4a:8e:d9:e3:f9:ef:dd:a3:91:60:54:43:d8:b4:12:3d:d2:c6:
13:4d:8e:bc:6b:43:b2:82:27:08:7f:8d:c0:79:0b:29:ed:10:
1b:8f:ad:6b:ab:46:6f:d7:96:f7:6e:57:3e:53:a6:ad:56:fd:
19:5d:58:37:51:0c:d1:f8:ae:3e:b1:98:85:8d:74:8b:e4:59:
64:a0:9a:43:53:5d:34:05:5a:f1:c0:af:6d:9f:a1:d4:9e:f8:
90:e8:1a:ef:6c:38:f7:61:2d:dd:1e:21:66:d6:3f:c4:7b:b5:
a1:8b:2b:6d:de:70:a5:88:b6:b5:41:c8:e9:ba:01:cf:e9:00:
0a:96:40:16:cf:45:44:e0:4c:d0:d9:29:f9:75:df:14:d6:12:
bd:ff:42:19:2c:7a:9c:1d:82:2d:7b:8d:63:f3:b2:24:88:17:
c9:0f:19:1f:0f:46:07:dc:2c:55:3e:97:77:18:aa:ee:3a:99:
32:4b:72:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:44 2026 by rpki-client