Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: 10MZ2OOV1AznhYWCcCk+8KVY+TrDJIp/FIFw5IcsfEw=
Subject key identifier: EE:34:90:11:68:BC:8A:D3:CF:78:D8:C7:D6:C3:DD:3D:FA:9D:80:E1
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019CAB6B71C8D54CF973BD5AF7BD0F5DFF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 1263
Signing time: Sun 01 Mar 2026 22:01:11 +0000
Manifest this update: Sun 01 Mar 2026 22:01:11 +0000
Manifest next update: Mon 02 Mar 2026 22:01:11 +0000
Files and hashes: 1: 8EPv-E3q9JYSkUGXl6mdrAjIzz8.roa (hash: E0JF7X9/XHoU7PiFgFPjp+o209rtD/x1WqRQ5NKbHU0=)
2: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: 6dmzNFo7j/Xtdr5yM1LM9AQeJnYCM2yiBm+91koTnUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:71:c8:d5:4c:f9:73:bd:5a:f7:bd:0f:5d:ff:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Mar 1 22:01:11 2026 GMT
Not After : Mar 2 22:01:11 2026 GMT
Subject: CN=ee34901168bc8ad3cf78d8c7d6c3dd3dfa9d80e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:0f:d2:d3:5d:75:25:9a:8a:d5:c3:c6:b7:
93:46:2c:c8:b8:b7:27:1d:a0:05:60:7d:53:fc:96:
07:cb:36:cc:be:11:53:ca:a2:60:a1:36:9f:5b:f3:
bf:44:fd:06:a6:1a:62:2b:fb:2c:8f:59:55:70:c0:
d0:1b:81:a3:b1:ce:11:2b:45:1a:d8:50:b6:b1:ca:
24:0f:9c:db:c3:13:f6:8b:6e:33:d5:85:c6:43:7c:
71:dc:da:de:58:5a:4a:5c:40:f2:2d:5b:e0:b3:15:
4b:64:b0:13:ed:c8:c2:37:3c:d8:fc:d3:45:8d:2e:
33:17:fa:75:c2:16:63:ed:42:5b:4d:75:ab:0c:75:
79:3e:16:8a:5f:5b:49:16:4a:32:17:89:98:df:79:
24:14:1a:75:5d:d5:4d:6c:52:f0:ac:fa:49:55:68:
57:eb:46:b3:b7:ae:b9:12:d6:f7:69:9c:12:c8:80:
62:d1:bb:5c:87:a1:19:b8:f3:be:a1:b0:36:ef:0f:
03:50:c2:91:35:df:7b:be:62:eb:0f:a5:6d:aa:3f:
ec:74:03:69:67:c4:6f:4e:e9:35:bc:61:0b:ae:98:
6f:ba:a8:d9:7b:1f:31:8d:e0:87:9c:83:93:95:03:
06:cf:ab:19:e3:2b:80:98:ba:cc:6f:0d:37:a2:79:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:34:90:11:68:BC:8A:D3:CF:78:D8:C7:D6:C3:DD:3D:FA:9D:80:E1
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ab:95:e0:3c:2f:57:9e:26:ef:92:39:e5:5d:0f:57:fd:58:
bc:64:ed:c5:fd:5c:60:87:5a:23:53:59:4f:a3:fd:2f:96:7e:
8d:fa:78:3d:58:80:8d:46:cd:fb:df:2f:da:ab:b3:4d:b1:d2:
b1:66:45:d5:bf:01:a2:16:bd:e7:eb:5f:72:9e:fa:ba:52:5a:
d2:9e:06:60:a2:ca:7c:7f:21:b4:0e:ad:36:8b:7d:ac:29:b9:
fb:9b:80:e6:a3:cf:c4:95:de:54:0f:e6:7d:87:75:5b:72:29:
81:c6:75:c2:53:fd:06:d5:23:06:db:6f:ae:4f:28:20:92:53:
f2:d2:e9:74:b5:58:df:f5:4f:be:d3:ab:b3:b8:f7:48:70:d6:
dc:ec:eb:2a:df:dd:0d:b6:02:94:ed:31:f4:0c:ad:ce:77:65:
c7:8c:b2:c9:74:18:43:c3:0b:17:10:c6:ba:51:02:c1:43:54:
b5:c5:04:d7:ef:e3:da:31:89:cd:6a:8d:42:75:b9:7a:d0:ff:
3c:cf:1a:9e:44:db:b8:b6:2b:f3:49:0b:41:60:36:34:ca:da:
d0:c3:02:2c:09:03:21:e4:bb:d4:a4:fe:c9:dc:1b:1f:56:f9:
b3:8c:ec:00:ca:ea:c1:a5:ba:58:c1:e8:65:98:78:15:c4:ac:
30:01:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:42 2026 by rpki-client