Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: pdZJV7JQ2DXQtyoRA/sq8KjPCvN95rTOMzKcBCkH2yo=
Subject key identifier: 89:4D:FB:81:F5:96:9B:1B:C0:64:A4:6B:E4:9D:10:79:E1:C5:A4:F2
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019CA9EA9895EC00F8D829E093C532A2E0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 13F3
Signing time: Sun 01 Mar 2026 15:00:49 +0000
Manifest this update: Sun 01 Mar 2026 15:00:49 +0000
Manifest next update: Mon 02 Mar 2026 15:00:49 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: NAWin2brXMgBa8UtgZekn71Ob/tCdngASajgZFtR2Cc=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:98:95:ec:00:f8:d8:29:e0:93:c5:32:a2:e0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Mar 1 15:00:49 2026 GMT
Not After : Mar 2 15:00:49 2026 GMT
Subject: CN=894dfb81f5969b1bc064a46be49d1079e1c5a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:45:ab:8f:26:16:4a:a8:13:8e:82:1e:e3:
f0:f1:e2:54:c3:d9:0f:11:75:a2:68:ba:72:3c:73:
fd:f0:31:09:87:8e:89:14:4d:c8:ea:51:00:e0:66:
d1:94:4a:88:4b:60:94:3c:08:23:05:7c:7a:75:98:
b3:6b:b2:c5:01:9e:05:02:29:b6:f9:c5:9f:4d:f4:
f2:b2:24:eb:91:bc:cc:0e:6a:b5:c4:e5:1b:cc:98:
e4:fe:a8:9c:19:5f:fd:c2:68:ce:d9:e6:49:a4:17:
b9:60:c3:1d:92:db:86:82:3a:9b:a5:b7:ee:4c:14:
60:c0:e4:26:00:38:88:01:fc:15:3d:0d:13:b9:4b:
7b:79:75:f9:ac:68:43:35:92:11:ef:35:28:6f:fb:
f7:c7:24:ff:69:52:66:39:84:7d:68:9f:d9:0e:a4:
15:94:49:43:51:bb:43:c7:ee:0d:fa:13:99:4f:22:
d3:02:58:46:51:98:ef:29:49:2e:43:6d:ab:f6:03:
aa:79:7c:01:e3:82:54:02:85:d4:60:e2:07:0c:55:
f1:26:9d:6d:89:ff:29:6d:16:e6:02:f4:18:d6:9c:
60:5a:49:8c:98:89:ae:42:25:ae:e3:82:c3:e9:64:
ff:86:ee:61:25:be:ea:53:2b:e3:12:1a:74:9a:3e:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:FB:81:F5:96:9B:1B:C0:64:A4:6B:E4:9D:10:79:E1:C5:A4:F2
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:46:e8:1b:c5:ab:69:bf:c6:6d:35:c6:b4:88:75:1e:d2:52:
8a:1a:32:f0:87:1a:a7:9e:8f:a5:d7:d3:bf:79:b9:c0:3a:14:
2c:24:00:a7:d6:a9:d4:56:80:09:33:43:66:36:5e:3a:d1:b6:
35:82:ba:8a:4a:d2:f1:08:51:94:8d:16:15:f6:ac:aa:6c:dc:
72:ef:c3:9c:12:2e:e0:88:67:ac:23:46:1a:35:ca:66:2a:b0:
5d:ae:8d:df:58:7a:d4:d0:34:87:e1:6b:c8:e0:f9:da:bc:b5:
fc:e1:7d:c6:cd:41:68:5b:b4:66:39:28:40:52:10:88:17:68:
05:5b:a6:d4:87:82:7a:8f:6f:54:b2:ac:e1:5f:fb:be:9c:9a:
19:99:0c:d7:da:5b:4d:ba:77:b5:f7:89:fb:1a:31:01:c2:18:
4c:43:16:a7:57:64:c0:e5:40:4e:76:60:6e:d9:5b:df:d9:09:
0a:9b:e8:54:96:04:7c:9b:b9:6e:6a:4b:7f:7a:ca:b5:f0:c4:
ee:a0:68:a8:87:6c:17:f3:25:9c:59:8b:65:cd:50:14:fc:f8:
c2:29:f5:e5:e9:10:b6:76:9d:74:50:06:78:51:bf:02:ff:e8:
a0:54:98:79:cb:75:d0:cd:cc:09:ba:5e:f0:46:a8:a7:16:76:
4d:9c:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:30 2026 by rpki-client