Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: TzVG9JDn6qnRIfz21LvhnZg8KbGiqCp5hO1zUqRaaQY=
Subject key identifier: DB:7C:FE:16:17:E9:23:38:87:C1:03:F6:CF:DC:F1:34:22:E1:F6:AA
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019CACB4CFC32F1F15361D94D39379BAF868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: pbUXeAuF+6u/tRbC61RufZmSUNhb495Lx/p01N4D8mA=)
2: qaXfGqRy8REPCt5AS8O0mmZxMbQ.roa (hash: s2r/NmzprssiG6q7fm25EDu8EjVb4m0dpfMF/5RAabI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:cf:c3:2f:1f:15:36:1d:94:d3:93:79:ba:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=db7cfe1617e9233887c103f6cfdcf13422e1f6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:10:3c:84:67:ef:9f:f8:b8:de:63:09:c1:24:
86:b6:5f:1f:89:c8:06:d0:6f:2d:73:8d:1d:1c:23:
25:4a:2e:5b:c0:59:51:b8:d0:25:51:32:9f:9a:ea:
78:70:0e:47:3e:fb:b4:57:1e:7d:08:e0:c6:f6:9d:
a9:94:bd:b5:e8:7e:2d:b1:63:d2:f0:9a:38:4b:4c:
3f:2f:5b:5a:91:c9:69:36:0d:0e:f2:ee:24:d8:ac:
c9:d2:12:0e:c7:fd:12:84:fd:9f:e5:88:cd:d0:0e:
c1:45:88:59:34:0f:77:5f:2d:33:50:7e:5e:af:31:
e8:71:aa:fb:3c:74:d5:30:f8:2e:42:43:a3:4e:c9:
1e:83:e8:be:98:33:49:b9:78:9a:1d:89:42:a4:7c:
f0:96:97:08:f1:a8:73:9c:43:2c:85:7a:03:0b:90:
ae:a7:1a:24:19:0c:11:eb:f7:69:9f:df:ef:ac:6d:
f6:f1:06:aa:79:96:7e:e3:e7:d6:c7:3e:98:c2:51:
8d:98:d5:77:a5:b9:77:7c:fe:54:bb:f5:84:df:9b:
e0:05:e8:8c:5b:ee:e8:d1:f5:da:a1:91:43:c2:f8:
76:ec:c1:ef:26:f4:ed:a9:8e:7a:b9:37:fd:86:6a:
27:d1:6e:30:b8:53:7e:74:5f:dd:3c:07:06:f9:9a:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:FE:16:17:E9:23:38:87:C1:03:F6:CF:DC:F1:34:22:E1:F6:AA
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:9d:33:4d:b5:75:d9:53:1d:6f:38:95:fe:f9:90:53:57:
7f:8a:6a:90:ed:1c:98:30:ed:29:c3:7c:99:e9:3f:1b:e5:a5:
ca:fc:02:53:c1:00:a6:ac:4e:cf:dc:2d:7e:f7:5c:88:0a:cf:
a5:13:02:7c:4e:06:e1:2a:a9:26:80:b9:bf:43:8c:63:e3:fe:
b8:ad:c6:30:01:75:50:9d:37:3c:e2:6d:1e:c2:23:f4:40:73:
0c:c1:e0:40:63:ae:ca:98:fa:10:09:39:26:5b:53:87:5a:61:
da:24:bc:bf:b3:23:90:2e:f0:f4:1a:08:44:9f:1d:01:9b:00:
ef:64:c7:9f:54:f5:81:88:68:05:55:90:5e:ba:1e:fb:66:91:
87:fd:9d:c5:04:90:30:ec:b0:f9:00:2c:8d:79:fd:47:f9:db:
be:39:fe:be:35:88:c2:2b:3b:36:84:25:46:c8:12:a1:f9:3a:
80:74:2b:48:51:78:48:01:1e:a8:83:ad:57:a9:ad:d4:8f:16:
82:15:f7:d0:06:15:31:aa:97:c6:ef:28:66:0b:3d:74:d3:d3:
7a:23:7b:5b:ef:d0:2b:ae:06:9c:e3:91:24:79:ec:d2:2b:0f:
39:a2:b0:ad:2d:fd:87:5b:a5:88:56:bc:a7:63:93:bb:42:a5:
ed:74:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:18:29 2026 by rpki-client