Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: uZ7QLaFvSY1MowKCxsq3r+aAxZAvvM9yr8cGz/xUGYs=
Subject key identifier: 10:97:23:60:05:35:E0:45:14:C8:89:A8:11:04:F5:99:2D:11:13:D4
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019CAA21F0716AA1C4D935305235F44D14A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0EDA
Signing time: Sun 01 Mar 2026 16:01:16 +0000
Manifest this update: Sun 01 Mar 2026 16:01:16 +0000
Manifest next update: Mon 02 Mar 2026 16:01:16 +0000
Files and hashes: 1: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: y2GCMJ42J/rk1WmZnKGJAXzsMwcEwNbBY1uQtf7EDps=)
2: qPgFOiKxJLDpdTilhYgZPrKGHjw.roa (hash: m7UK15QpMiMYw7CRC6ZOxg/sICx/UBTV4BV3vXeXMv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f0:71:6a:a1:c4:d9:35:30:52:35:f4:4d:14:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Mar 1 16:01:16 2026 GMT
Not After : Mar 2 16:01:16 2026 GMT
Subject: CN=109723600535e04514c889a81104f5992d1113d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:13:cd:31:34:e6:0b:0c:ef:58:d2:73:d7:
4a:69:28:21:44:f5:4b:49:80:58:22:de:d9:a5:06:
c1:ae:ad:33:fa:52:bb:6b:12:c6:05:30:e4:75:69:
da:16:fc:f3:07:8a:ba:ae:cc:59:69:13:9e:c9:41:
38:1e:5f:c1:4e:a2:5f:5c:2d:7e:48:dc:c9:dc:ed:
32:c9:50:75:70:15:27:5b:c6:0b:31:20:7e:a9:b4:
b5:d4:41:a5:04:29:ff:08:f3:e1:44:62:b9:9d:24:
1e:18:5d:6f:46:83:47:fc:95:bf:73:2e:40:c5:09:
12:92:39:f1:ac:11:e8:68:b8:f9:c4:45:20:1e:d5:
7f:d3:51:d8:0b:27:e7:6a:ea:dc:3e:af:f2:82:b8:
dd:31:da:73:f0:e7:4c:f3:3e:f8:0a:bd:de:73:09:
4d:7f:d3:4f:e3:0d:74:b7:14:e0:de:42:71:8d:8c:
15:93:7a:ae:39:cc:d4:a9:d1:29:09:2f:c9:e4:9b:
cd:89:02:12:ff:42:df:d7:62:ec:74:78:e9:55:a2:
e0:44:da:97:b2:c9:89:f4:74:4d:ce:c6:44:97:ea:
b2:6f:6f:fc:d3:d3:f3:44:d2:f0:e4:9f:76:b6:50:
4f:bc:e6:5b:09:65:f7:9e:d1:9b:53:dd:d2:5b:86:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:97:23:60:05:35:E0:45:14:C8:89:A8:11:04:F5:99:2D:11:13:D4
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:98:83:c9:4c:f1:84:f1:28:f5:45:e5:63:ed:fd:32:29:39:
90:01:63:53:79:1f:a9:0d:90:31:5e:24:5a:8d:26:11:8e:56:
eb:fd:96:5f:64:65:d4:93:f2:8c:ee:44:c7:3d:d9:24:99:e6:
28:af:11:70:15:ca:a0:79:4f:1c:1a:fb:d5:54:03:5e:9a:7b:
18:a4:51:b3:26:28:65:fe:c1:08:99:94:19:e0:07:45:86:e9:
b8:4a:3f:71:63:55:36:ea:7d:3d:6f:c2:d8:ce:99:17:3e:84:
99:a3:59:25:e9:5c:09:8c:4e:ba:3b:e2:0c:66:55:04:13:a2:
a9:94:e5:76:ed:f6:d6:a5:1f:65:45:0b:26:47:0a:77:f0:ca:
6c:ce:1f:27:b2:23:60:5a:88:28:5c:01:97:38:29:a3:94:3b:
29:d1:7b:db:40:2e:b4:d4:3a:c6:9b:ef:8f:ff:5c:02:68:e6:
55:76:df:55:e6:c6:0d:60:f6:24:ff:91:72:09:d5:95:55:2d:
bc:d3:19:fc:62:77:c0:bb:09:52:f9:ed:af:43:f6:9f:0f:19:
61:db:4f:22:ba:0d:8f:47:77:b0:39:7c:61:e7:a9:a9:5b:2e:
8c:6e:36:59:4f:08:d9:6c:eb:a6:72:10:fd:9f:23:0b:c0:3d:
90:f5:88:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:06 2026 by rpki-client