Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: NTWrrzF52XQ+Zja67oZ4CP7vuSIYgvWe6P0KvJQTcWQ=
Subject key identifier: 95:5C:78:9C:B8:1A:06:6B:3F:18:43:3A:93:AC:5A:5F:37:F7:25:49
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019D9962DEE903DF1923DA43F3BED3E25940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 146F
Signing time: Fri 17 Apr 2026 03:01:26 +0000
Manifest this update: Fri 17 Apr 2026 03:01:26 +0000
Manifest next update: Sat 18 Apr 2026 03:01:26 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: wj7nqiC/oy1cKZTGGgGEVrjF7Gu+dPubm7znA5E8s90=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:de:e9:03:df:19:23:da:43:f3:be:d3:e2:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Apr 17 03:01:26 2026 GMT
Not After : Apr 18 03:01:26 2026 GMT
Subject: CN=955c789cb81a066b3f18433a93ac5a5f37f72549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:87:66:fc:09:82:2b:88:a9:75:38:99:bd:
36:c9:5d:a3:8f:60:aa:3d:ec:14:95:9e:af:6d:35:
ec:24:95:4d:a2:cb:7f:2e:1f:27:f6:6e:b1:d7:5d:
f6:c7:bf:7a:eb:51:56:55:b0:ec:32:bd:4c:72:2f:
62:7d:dc:bf:89:48:44:00:e7:32:e1:d6:d9:17:38:
8b:12:77:1b:86:06:1a:b1:9a:a2:d7:e0:9f:5a:9a:
13:b2:fb:88:21:27:68:d0:02:b4:58:13:0b:7b:91:
b4:a2:e4:ee:1b:12:61:23:9c:e6:2d:51:dd:ca:86:
9b:e4:95:74:5e:fc:95:50:90:ce:ab:99:17:ce:47:
59:c0:bf:64:f3:17:cb:7a:ca:f1:25:21:af:56:ee:
f3:48:f1:c0:68:0b:24:10:d2:65:5f:e1:e0:8e:ab:
ad:91:5a:2d:8b:c5:63:bc:b4:ea:fa:0d:d8:5b:4c:
08:3f:16:04:27:9b:42:e7:9d:6d:ee:06:ee:51:b8:
95:e9:01:20:1d:6d:c7:78:24:a1:a6:ba:71:22:9e:
24:8e:5e:b1:00:a3:bb:3b:a0:9a:1b:b9:a9:24:fd:
85:26:46:97:41:7c:b2:47:b2:f1:0a:be:53:e0:b4:
1f:ef:b3:2a:a1:c0:58:1e:f5:df:6a:6b:65:97:9b:
6b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5C:78:9C:B8:1A:06:6B:3F:18:43:3A:93:AC:5A:5F:37:F7:25:49
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:bc:23:0a:62:3e:8f:18:e0:56:e1:96:8a:3f:43:c0:d7:16:
5b:25:f5:d2:80:03:45:ba:04:99:16:c2:de:2d:c1:6a:c4:47:
41:91:5c:11:48:93:8b:50:50:bf:07:9a:af:1d:99:7e:c2:e3:
e6:e8:74:01:78:06:40:f4:6d:f8:20:58:b7:ba:87:c7:2c:70:
53:98:a0:10:3f:8b:d3:17:51:67:ce:59:d1:20:e2:c1:67:9e:
73:27:ae:f5:f4:45:73:69:31:bc:aa:44:cc:a8:12:aa:c7:1c:
c5:9f:58:b7:af:13:4a:21:99:64:e2:86:0d:09:49:80:85:c5:
6a:43:42:45:57:10:78:70:fd:c3:5e:64:1e:36:04:5f:6e:0d:
63:89:ce:75:a2:c6:c9:da:b4:1e:87:c7:8b:f3:be:d1:3b:c0:
fb:6f:e3:ce:ea:e1:27:22:d7:4c:25:8b:1e:9e:b7:56:92:88:
fe:9d:6b:f3:fa:54:76:7d:6c:a7:a5:f1:5a:9b:fe:e5:73:31:
99:e9:2b:eb:b6:a3:7a:87:5d:61:ad:12:8a:3d:57:7c:41:bf:
01:69:55:2d:62:0a:f3:88:e6:78:98:5f:b5:9c:62:46:f3:3a:
9a:d6:9b:c3:f1:36:16:4e:8d:10:ae:08:6a:1a:80:51:bf:c6:
08:89:35:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:19 2026 by rpki-client