Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: pjpItR4PbMbgqUJhYvAqnhImd5l+CH6gX8lk6N1KL0I=
Subject key identifier: FD:1D:91:CD:FA:EF:B3:2F:8A:8C:F3:BB:89:FC:6E:ED:43:FF:05:39
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 019CAE34FCDC7B16F56BCFECBDA16C933831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0B8C
Signing time: Mon 02 Mar 2026 11:00:33 +0000
Manifest this update: Mon 02 Mar 2026 11:00:33 +0000
Manifest next update: Tue 03 Mar 2026 11:00:33 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: 4RUCtY/a9n2G5V3ADniLp2OpJ9p4KqBXeQsgw2Aragw=)
2: UUFkgDHnR-0F8lOxAZm-NLU67J4.roa (hash: rvVeUb9I1xFcpHYp5yi+r3b7sO0cyT/6JlEZ7q0j+po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:fc:dc:7b:16:f5:6b:cf:ec:bd:a1:6c:93:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Mar 2 11:00:33 2026 GMT
Not After : Mar 3 11:00:33 2026 GMT
Subject: CN=fd1d91cdfaefb32f8a8cf3bb89fc6eed43ff0539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:fc:46:85:63:af:c9:f1:4b:99:cb:e9:3e:
3b:e2:34:2f:54:a3:bc:d0:7f:7a:00:76:97:e2:24:
0d:b4:b2:f9:0c:e3:03:c0:0b:07:55:1c:45:5d:19:
3d:e4:5e:a3:8b:25:ae:23:1a:6d:3d:54:c6:fa:fd:
4d:8e:b5:14:d4:8d:70:75:a5:61:b9:a6:29:78:82:
ca:96:65:07:82:f1:32:98:fc:f2:5d:24:cf:87:32:
c5:07:28:b9:74:3b:67:f8:6d:3f:92:fb:83:92:77:
5a:3d:7d:ec:b1:19:fb:c4:10:98:b5:38:97:9f:6e:
2a:be:6b:c3:97:e1:90:b8:17:e8:01:19:3a:fc:87:
f7:f2:0e:55:8e:12:d8:d7:72:f5:99:f8:1c:94:77:
22:d9:48:90:e3:58:49:c3:55:b4:aa:22:17:dc:70:
2c:3a:af:a4:4f:e9:95:dc:c8:6e:0b:5b:5c:2a:61:
ec:15:10:32:45:18:2d:7b:b7:11:72:6d:b9:d4:ea:
6d:4a:8e:fd:70:3a:af:0f:06:b8:05:86:dd:06:ea:
25:2e:77:90:f5:6a:5e:4d:c7:cc:fb:0a:60:ac:20:
26:50:6f:8f:10:25:12:02:a3:21:f0:9b:2b:b9:f3:
9f:46:63:cb:1b:3a:b6:93:83:32:cd:78:31:57:d5:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:91:CD:FA:EF:B3:2F:8A:8C:F3:BB:89:FC:6E:ED:43:FF:05:39
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:70:79:7e:19:11:c7:fa:f0:0f:11:93:3c:a0:79:82:d0:a8:
14:9c:3c:7d:9f:12:36:13:4e:d3:d6:8a:bc:a8:62:43:4f:b1:
a0:10:6e:b5:cf:70:9a:b4:72:b6:a2:0d:37:01:78:7b:a9:a1:
7d:bd:b9:98:2f:e9:3e:2a:08:db:7c:31:c8:b8:d1:af:74:5e:
5d:cb:f5:ec:29:87:9b:80:1c:e8:12:af:78:b4:1d:bf:02:11:
85:2a:9c:93:12:b6:9e:6a:73:55:74:2b:bd:73:5c:6a:c6:e2:
95:54:5e:43:19:a2:4d:71:98:8d:64:d9:8e:27:0c:4f:f0:e0:
2b:e4:a2:a6:c2:f6:ee:26:76:26:93:a3:86:ec:1e:ac:4b:ee:
5a:14:d9:01:e9:af:99:0a:ae:36:e0:a4:92:b6:c5:33:72:7f:
a6:30:55:60:3c:89:40:62:14:28:d5:58:1d:11:c8:be:29:6b:
7c:38:ba:52:56:41:f1:fb:6b:f1:d4:87:47:05:3e:32:ea:08:
6a:a1:78:a3:47:f1:d5:8b:ea:f7:48:f7:29:1b:54:26:61:76:
ca:d7:33:7c:30:67:e8:53:4b:de:b0:e7:a9:12:e9:80:a6:02:
ee:62:c8:80:b8:7c:89:33:74:41:31:b3:68:58:4d:f0:10:b9:
a0:fa:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:13 2026 by rpki-client