Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: xAnQNTIBKBzNvqGVeaKV9hdHNawodfbmoQ9Jl49giI0=
Subject key identifier: 38:B8:CF:5D:35:E3:F8:1F:DE:0A:E5:7B:51:9D:F0:74:12:31:7C:EE
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019CAAC6BF9326BA2286794A815752283975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 19:01:17 +0000
Manifest this update: Sun 01 Mar 2026 19:01:17 +0000
Manifest next update: Mon 02 Mar 2026 19:01:17 +0000
Files and hashes: 1: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: f3AKuZWhxNouxFpp7qERkgr/uc8nLeWtLp/G3OhL6eU=)
2: OMdy0Wi0NhFrb1HpbI-J8Bi2EjQ.roa (hash: qtUmf9EbD2abkMef7mdvs22HGXF5Nws7qs6ZujPLgX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:bf:93:26:ba:22:86:79:4a:81:57:52:28:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Mar 1 19:01:17 2026 GMT
Not After : Mar 2 19:01:17 2026 GMT
Subject: CN=38b8cf5d35e3f81fde0ae57b519df07412317cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:ac:14:f3:74:00:26:3a:14:07:6a:c9:3a:
a5:91:c4:2d:3c:a0:04:8f:8b:1c:37:16:b0:8a:37:
ba:43:80:c4:2c:7a:09:9a:d3:cd:7e:7e:bb:b9:5e:
05:2d:28:74:53:49:65:bb:83:01:d0:86:cf:45:54:
07:87:3f:0a:0e:06:ba:01:21:c6:66:5f:b5:9e:56:
99:f4:73:f1:63:54:e7:8f:fe:1b:0d:ca:5a:2e:af:
ab:36:de:50:1d:58:93:d5:d4:14:5b:69:3e:5a:91:
ed:0e:1c:a2:4a:7c:64:b2:61:54:be:1a:19:43:91:
eb:50:99:91:b7:ae:98:db:d1:01:79:de:1d:6c:48:
27:b8:7e:be:2e:01:08:d0:1f:99:0c:2a:64:a4:f2:
55:05:39:60:8e:ac:ed:d0:a1:ff:7f:78:ae:1c:3d:
34:b7:4c:a1:a0:70:39:6a:06:4f:b8:63:12:aa:11:
a2:8a:50:21:5b:46:0e:82:3b:fb:e9:ca:6e:b1:eb:
b9:d3:50:b6:7a:2d:15:56:94:e9:77:0a:ad:fb:3c:
ff:1a:bd:f0:1e:60:2f:44:37:08:41:73:71:c8:f7:
52:35:f6:30:62:f4:d4:81:03:22:89:27:f3:91:a3:
51:45:9b:6d:ac:bf:60:bb:19:8b:e0:d8:c6:0d:42:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:CF:5D:35:E3:F8:1F:DE:0A:E5:7B:51:9D:F0:74:12:31:7C:EE
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:83:fa:d4:bd:49:ba:db:26:77:c8:98:be:ad:45:71:34:
60:04:c6:d1:84:d3:13:e8:c1:93:0e:2c:ab:51:1e:4b:ce:4d:
14:8b:83:96:6b:c5:d4:a2:a9:c7:b1:ed:d3:79:7b:39:ee:d5:
8f:53:9d:3d:0a:19:34:fb:c1:27:8b:b2:79:de:dd:46:dc:2b:
17:bc:13:a1:a1:40:69:94:b9:43:fe:36:54:18:ea:f6:f2:e0:
d6:71:34:3b:2a:2c:d1:d4:37:f9:5a:db:61:a6:85:1b:5c:0e:
90:1f:59:29:ee:d3:4b:b1:24:d5:a1:26:56:ed:bc:aa:a3:e5:
fa:7e:03:c8:a3:64:7d:0c:7e:c3:3d:99:89:db:bb:4e:a9:4d:
df:b1:02:df:f4:9a:a4:dd:1b:6d:01:ec:9a:6b:13:cf:b7:a5:
67:ab:92:6f:b5:f2:e7:94:ad:64:4d:fd:de:3f:4e:2f:91:ff:
4a:40:3c:76:4f:6d:dd:ca:6a:99:4c:c9:78:0c:9d:cf:46:e2:
81:ed:6c:de:8a:ac:08:a9:7e:1f:ec:f9:9f:6b:31:d1:1c:29:
a3:b2:3e:69:da:cd:12:6e:4f:53:d9:d2:3e:4f:e9:5e:9e:55:
50:71:8a:23:3d:83:8c:43:e3:97:34:dc:c4:cc:b1:bc:2c:0f:
8b:39:94:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:38 2026 by rpki-client