Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: U0gvk4UiNr20UPNcJaMDX6FXaHUmYVMzlSWR/8rTdxI=
Subject key identifier: BB:DF:0D:34:FA:71:17:6B:89:D4:77:0B:E4:02:67:13:81:E8:12:F7
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019DA48B65A4FFA6EB210D381180C2626D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 13F4
Signing time: Sun 19 Apr 2026 07:01:32 +0000
Manifest this update: Sun 19 Apr 2026 07:01:32 +0000
Manifest next update: Mon 20 Apr 2026 07:01:32 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: 5UEKx02iA6fDDbPbv31P5OjoexlvwRUIBFM+tQk4xB4=)
2: lX1Z7VJVHL2Btqa9OSR2j_W5ab0.roa (hash: xvNGFNidv1bMhY2UzHVCI87XTEPnytAR765b+Q4yrpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:65:a4:ff:a6:eb:21:0d:38:11:80:c2:62:6d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Apr 19 07:01:32 2026 GMT
Not After : Apr 20 07:01:32 2026 GMT
Subject: CN=bbdf0d34fa71176b89d4770be402671381e812f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:a9:0a:a9:ab:f9:2e:c6:58:af:d3:b8:02:
1c:2e:f7:39:4f:1b:d3:14:fa:0b:ce:0e:63:1b:bf:
7a:ba:39:84:cb:d3:7d:81:b3:16:b5:4e:84:cb:be:
1f:3f:f2:c5:e7:66:2b:87:31:31:40:04:79:be:2c:
f5:e6:97:93:8a:59:9b:64:ca:e2:23:24:b9:d2:48:
d1:6a:d6:05:fd:df:fd:ec:30:c7:de:f1:53:89:37:
f8:b1:93:9c:b6:a3:e9:53:b5:0b:8b:e6:23:1e:16:
04:de:a5:4a:ba:9b:cf:b7:b3:8f:4b:71:cd:64:3a:
a4:21:02:13:77:13:24:f4:5b:55:39:93:70:b0:6b:
81:70:a9:52:8c:9b:ad:71:59:79:b6:d0:b3:4c:e7:
e9:50:7c:5a:b6:f9:a5:5e:55:a8:99:11:a7:99:69:
ea:53:34:34:b2:8f:31:63:e6:9e:ce:bb:43:db:a6:
b1:a7:b7:98:c8:81:5a:57:d7:e3:40:86:30:5b:6b:
11:b5:f7:2d:57:b1:79:8f:55:a1:da:05:8d:94:e1:
09:37:b0:a4:db:a3:b7:9e:ba:eb:77:b8:03:ae:ee:
f1:7e:90:21:5c:e8:0b:9c:b2:6c:78:2a:12:58:c4:
50:00:9e:20:98:a6:8b:6c:3a:c5:d8:16:9d:56:d2:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DF:0D:34:FA:71:17:6B:89:D4:77:0B:E4:02:67:13:81:E8:12:F7
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3a:23:11:8b:b6:ac:40:b4:16:86:6e:e8:99:7c:37:83:0d:
8b:93:0a:cf:60:00:e9:d3:92:cb:04:29:fd:bb:75:80:47:1a:
36:f6:f3:9b:bd:12:77:c2:00:bd:e4:75:1a:48:8c:01:cd:d5:
14:5b:c7:ca:4f:45:f6:25:0c:0f:00:c7:67:1e:3a:51:74:5b:
51:30:91:4b:d8:03:d7:c0:32:99:51:06:7a:ab:79:3f:f4:0e:
9d:f2:d8:65:c7:a0:ea:7a:35:85:1c:7c:a6:d2:c5:a6:c3:90:
75:b9:c6:5b:d9:e4:64:04:d4:c9:92:e3:d1:71:63:11:5f:95:
cf:74:05:b7:c5:52:26:0f:5c:0b:13:b4:83:cd:f9:22:3e:ae:
e6:3b:30:00:43:39:f1:fc:a4:85:53:59:5a:ed:d5:04:88:92:
fd:54:76:9b:07:7a:54:a1:55:a3:9f:88:87:2c:f3:ca:04:b4:
ad:3b:99:cb:e8:96:5e:d1:89:e1:e8:3e:34:57:a2:7e:6c:64:
e9:d7:27:33:18:f3:5e:a5:cd:f0:0f:31:5e:cd:e3:f4:c8:ca:
26:ac:74:f5:f8:ca:66:8c:3d:a1:fa:00:fc:b6:95:aa:2f:cd:
7a:4b:c5:6e:f1:f8:4d:4a:b9:11:a7:1c:50:cc:33:5a:43:43:
0b:3d:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:19 2026 by rpki-client