Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
File: JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft (raw, json)
Hash identifier: YVLWgItJBlPAMTNQhuRtmzHoxM2QUBgRkJ9f4koTdj8=
Subject key identifier: BC:BF:58:1E:0D:8C:C1:32:A6:56:42:79:F6:52:90:76:49:43:DB:92
Authority key identifier: 24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
Certificate issuer: /CN=247cdb5ea82e033336640e9eec8ea098cac86180
Certificate serial: 019D9D08781CECE858191A44F086F933864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
Manifest number: 28
Signing time: Fri 17 Apr 2026 20:01:10 +0000
Manifest this update: Fri 17 Apr 2026 20:01:10 +0000
Manifest next update: Sat 18 Apr 2026 20:01:10 +0000
Files and hashes: 1: JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl (hash: nOq7zm2/r1Sv1KHSSZFp9BPNMYE8NmuLcG8SGO1EkLE=)
2: sr5kiWaUNJb3k53oHKiE3zAeNCc.roa (hash: 4lKEnHHPq8ieSuUmi9tpKwDYW28NC9iz/gZMj6c8NHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:78:1c:ec:e8:58:19:1a:44:f0:86:f9:33:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247cdb5ea82e033336640e9eec8ea098cac86180
Validity
Not Before: Apr 17 20:01:10 2026 GMT
Not After : Apr 18 20:01:10 2026 GMT
Subject: CN=bcbf581e0d8cc132a6564279f65290764943db92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f4:31:52:19:c7:1c:a1:b0:34:42:a3:d6:88:
53:81:3b:a1:a9:4a:c2:5b:15:7c:e6:a8:60:98:6c:
5f:b4:79:2d:3b:39:68:68:23:ee:a6:76:a2:50:f3:
6e:94:0a:5f:b2:76:1a:35:4d:b4:11:3e:56:79:dd:
ff:9a:b3:71:b4:44:c2:87:b8:1f:a5:80:3b:21:ce:
14:b9:1b:0e:ae:61:07:f7:1e:94:42:1e:2e:8a:d1:
5a:44:ba:5b:9a:be:0e:b6:a0:7b:e8:a7:a2:6a:1e:
b3:11:f8:61:fd:3d:8c:56:92:80:4b:50:0e:40:58:
31:eb:53:e2:a0:47:da:ae:2f:23:cf:4e:95:58:bc:
66:83:e0:1d:64:d4:2f:ee:6f:fe:59:0f:2e:af:ba:
8a:f4:c6:8c:65:e4:26:2e:b8:4a:29:d3:15:18:e4:
7b:2e:d8:b0:95:dc:8e:ff:99:8d:1f:59:7b:ab:78:
17:27:c2:97:19:61:93:cc:e1:72:60:0b:1d:6a:8b:
d0:e4:42:a5:e0:ae:8e:d2:66:0b:c6:ba:11:c1:f7:
6a:cf:cf:ee:2d:ae:b6:e9:a7:cc:1f:74:f6:30:ef:
35:79:76:15:16:14:9f:77:b7:11:36:e5:37:c0:39:
ac:92:5b:4b:25:b5:97:fa:3d:46:0b:20:70:52:8e:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BF:58:1E:0D:8C:C1:32:A6:56:42:79:F6:52:90:76:49:43:DB:92
X509v3 Authority Key Identifier:
keyid:24:7C:DB:5E:A8:2E:03:33:36:64:0E:9E:EC:8E:A0:98:CA:C8:61:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHzbXqguAzM2ZA6e7I6gmMrIYYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b1541b-ca10-40f7-b3ed-b321055cfa2f/1/JHzbXqguAzM2ZA6e7I6gmMrIYYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ba:d5:a7:c0:30:54:8b:e2:b5:a4:d4:00:25:25:3d:7f:f5:
85:e5:10:0f:4f:33:d0:6e:c3:12:52:45:37:42:3b:9e:91:5d:
df:88:e0:ae:f5:ac:0d:f2:7d:00:f8:8c:30:d6:2e:c6:4d:13:
02:f4:12:7d:2c:25:8f:3e:cf:51:32:ce:76:66:be:58:cb:2c:
0a:c7:ab:35:c6:c8:f7:01:c9:ff:ba:b1:a8:89:98:0f:22:e6:
b0:36:2e:dc:97:d5:a8:60:69:cd:5f:87:c8:e0:78:4d:c1:46:
0e:16:1b:81:5d:d7:7e:81:3e:72:bc:e1:46:fd:31:34:4a:ef:
60:86:a5:3c:89:78:9d:5a:34:12:b6:a9:5c:14:6c:2a:cb:2b:
e1:4e:1b:1d:d6:9c:37:c5:7a:9a:8d:7f:76:ad:1c:48:9f:a4:
6b:59:0c:d2:be:08:31:8c:ae:a6:5e:4d:8b:72:7a:84:8e:90:
6d:d8:dd:e7:f8:93:5a:6e:16:63:b9:e1:0d:1d:38:9b:90:72:
42:23:7b:44:41:58:29:fb:70:01:ef:75:2d:38:f7:c4:23:52:
21:c4:3d:ca:ca:b6:4f:14:ac:6b:7f:09:f9:01:0c:a0:5b:e4:
83:c4:70:3f:44:c0:06:99:c3:33:1c:d9:31:d8:c7:25:98:22:
1d:0c:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:25 2026 by rpki-client