Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: 4loKSWoTnxZeY3FOe60FwMc3wL5sKe3zj7XVKm+7vbQ=
Subject key identifier: 1B:D3:64:75:07:CA:87:FC:BB:9C:A2:19:AB:28:2E:ED:56:FA:9B:67
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019CAB6B8CC87BF4A5BECD036214BD9583FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 1373
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: yrxYzhavTipQxmQPuGWr7X+1NILLzOmbDfA69U8A/oU=)
2: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (hash: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8c:c8:7b:f4:a5:be:cd:03:62:14:bd:95:83:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=1bd3647507ca87fcbb9ca219ab282eed56fa9b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:65:b8:40:5d:79:8b:a7:88:49:b0:b3:7c:
c8:3a:60:3e:ca:aa:8e:d3:55:90:a2:4f:0a:7c:92:
9a:99:88:57:66:22:f8:b2:47:61:f1:fa:31:27:b0:
9e:1a:7a:70:84:a2:84:fd:f0:51:b9:30:f6:aa:51:
fb:df:f3:46:56:10:6e:0d:23:c1:2b:a7:d8:e9:00:
30:58:3d:e0:8f:ef:49:1a:f8:40:6f:9d:18:40:69:
78:f8:de:1a:57:90:8f:bd:61:38:b5:36:82:46:a9:
ef:4d:41:75:8e:09:a0:1f:9c:da:4a:d5:a5:29:8a:
f0:83:93:90:3d:79:e0:ae:47:7d:ad:93:3d:dc:35:
41:8e:ec:00:34:a0:4e:17:3b:e4:33:e9:3f:6d:f7:
f5:1f:c3:50:2f:d6:f8:6c:f5:a6:dc:b7:2c:8b:ce:
84:9d:48:39:03:d6:70:da:4f:90:23:69:ca:07:62:
1f:0e:e6:cb:c5:95:0a:8c:75:6b:be:47:c3:0b:bf:
a8:68:b2:71:23:75:74:6c:dc:42:dd:9d:db:c9:da:
9e:13:bc:e3:5e:29:e4:bb:66:ef:51:34:68:93:5e:
e4:08:be:c9:bc:aa:17:d1:12:be:02:97:0b:d7:f5:
48:a0:b7:c2:de:b4:6c:09:9a:0c:f5:2f:88:b9:cb:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:64:75:07:CA:87:FC:BB:9C:A2:19:AB:28:2E:ED:56:FA:9B:67
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7a:23:45:4b:04:f3:cf:3a:07:71:2a:ef:bb:9b:42:34:ba:
db:7d:3d:2c:48:e0:3c:85:2e:ee:b6:e7:05:61:9e:6f:d5:2c:
71:f0:3c:81:7d:be:bf:b5:f7:ad:ef:fa:71:bc:4e:c9:92:fb:
7c:82:46:ea:ff:12:44:3e:7f:c3:2e:7f:4b:39:77:12:7b:4e:
76:95:a9:43:27:30:ae:b7:cd:26:93:2d:97:1e:53:28:8c:48:
1c:32:6a:4b:44:de:30:2e:8f:8e:a5:70:22:70:dc:55:cb:2a:
ae:8f:27:49:23:b2:0f:9b:cc:eb:e5:de:e1:8c:d6:c8:56:8e:
a7:56:c6:09:d8:34:a8:fd:62:52:c9:a1:e1:c2:14:86:34:22:
78:44:89:cc:6b:d9:47:c4:1a:bf:78:5f:c0:ed:0d:e4:b4:0e:
46:a3:3b:c4:7d:37:0b:82:c2:d4:36:a2:41:89:2e:72:24:13:
dd:87:ba:0d:f0:24:02:4b:75:a3:a4:3f:ec:c8:06:38:8c:aa:
4c:d0:00:4d:15:09:ef:8e:19:d7:22:15:d6:ec:6f:27:b4:a2:
8e:cc:ff:10:28:48:e0:21:57:57:ab:ed:1b:d8:48:36:da:81:
43:7b:3c:7b:c6:8e:62:e9:39:99:df:90:45:d3:7a:bc:cd:0f:
47:16:66:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra4zIe/Slvs0DYhS9lYP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NThmMGE0NTNiMzJmZjNhMjFlNjZhMzFiNzRmZTQ5ZDhl
NDZhMzMwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EygxYmQzNjQ3NTA3Y2E4N2ZjYmI5Y2EyMTlhYjI4MmVlZDU2ZmE5YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TlluEBdeYuniEmws3zIOmA+yqqO
01WQok8KfJKamYhXZiL4skdh8foxJ7CeGnpwhKKE/fBRuTD2qlH73/NGVhBuDSPB
K6fY6QAwWD3gj+9JGvhAb50YQGl4+N4aV5CPvWE4tTaCRqnvTUF1jgmgH5zaStWl
KYrwg5OQPXngrkd9rZM93DVBjuwANKBOFzvkM+k/bff1H8NQL9b4bPWm3Lcsi86E
nUg5A9Zw2k+QI2nKB2IfDubLxZUKjHVrvkfDC7+oaLJxI3V0bNxC3Z3bydqeE7zj
Xinku2bvUTRok17kCL7JvKoX0RK+ApcL1/VIoLfC3rRsCZoM9S+Iuct/WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvTZHUHyof8u5yiGasoLu1W+ptnMB8GA1UdIwQY
MBaAFCRY8KRTsy/zoh5moxt0/knY5GozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQt
ZWUzNzk1MThjNjg2LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8xMTE5MmQtMTc0MC00ZThlLTllMDQtZWUzNzk1MThjNjg2
LzEvSkZqd3BGT3pMX09pSG1hakczVC1TZGprYWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHojRUsE
8886B3Eq77ubQjS62309LEjgPIUu7rbnBWGeb9UscfA8gX2+v7X3re/6cbxOyZL7
fIJG6v8SRD5/wy5/Szl3EntOdpWpQycwrrfNJpMtlx5TKIxIHDJqS0TeMC6PjqVw
InDcVcsqro8nSSOyD5vM6+Xe4YzWyFaOp1bGCdg0qP1iUsmh4cIUhjQieESJzGvZ
R8Qav3hfwO0N5LQORqM7xH03C4LC1DaiQYkuciQT3Ye6DfAkAkt1o6Q/7MgGOIyq
TNAATRUJ744Z1yIV1uxvJ7Sijsz/EChI4CFXV6vtG9hINtqBQ3s8e8aOYuk5md+Q
RdN6vM0PRxZmVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:18 2026 by rpki-client