Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: qgATP5xljGSxYA099867UdGugnxFQSMg8cL0kopHydY=
Subject key identifier: 51:B8:89:C4:C9:17:B4:18:38:54:5F:30:36:6F:AC:9A:FD:A2:D3:1C
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019CAAFD5C57A0173BFFB911807102D2F3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 06AA
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: 8mlX01dUhb6-6rm4Tg_A6iylZK8.roa (hash: aWWMzk3BVnWIBBzTyM865wpiSTi7X2ELFihppDyLczk=)
2: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 4r8aLOj6kC7gGy6bOEj3vMxI+lOVrUGzaNHvSnT5phk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5c:57:a0:17:3b:ff:b9:11:80:71:02:d2:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=51b889c4c917b41838545f30366fac9afda2d31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:13:e8:57:99:a7:bb:1f:60:d9:8c:70:ff:
45:0c:d7:83:73:75:f8:69:72:8b:8c:58:d2:56:bb:
66:a5:7b:8c:58:97:c8:46:32:86:64:82:06:8e:76:
13:00:7d:b8:1f:24:f3:5e:5b:7a:43:32:48:f4:a2:
e1:2f:86:aa:ab:ff:9a:26:64:1c:e1:80:00:4f:e1:
5d:cd:fc:f6:79:f5:44:69:8e:21:99:a9:79:be:d8:
68:fe:f4:06:12:89:e5:bb:a7:78:c5:40:f4:9f:36:
34:01:02:07:4e:24:aa:fb:1b:85:3b:13:04:f0:50:
07:d7:69:e9:25:b9:de:f0:29:7b:25:52:d0:c9:78:
cc:73:6d:95:9d:02:0a:7f:d0:9d:5e:68:d3:e9:19:
b1:39:4b:04:53:b0:4e:a0:c8:09:0d:b6:9d:f8:91:
9e:91:df:c8:bd:84:b2:af:96:fb:3c:db:10:39:76:
30:5e:0e:dd:99:fd:0e:5e:05:0a:3f:02:94:cd:18:
dc:df:34:ac:98:f1:5f:23:a5:c8:a7:f3:84:79:c7:
97:1c:86:55:14:9e:11:60:a2:d3:ad:d6:9c:6c:5d:
34:dd:ae:75:14:b7:2b:a7:b1:41:35:63:50:a2:d2:
05:00:c3:11:1e:a8:ee:3e:00:f2:b0:e0:c1:80:22:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B8:89:C4:C9:17:B4:18:38:54:5F:30:36:6F:AC:9A:FD:A2:D3:1C
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:1f:08:4a:11:ef:73:45:d3:e3:a6:06:47:1c:4e:5a:59:
74:a9:0a:3f:a9:09:dd:12:d0:08:0e:ce:a5:5e:3a:12:f1:c3:
2c:1c:68:1f:5d:18:74:ff:76:02:ca:28:9d:3d:21:12:54:54:
cd:f3:c9:5e:47:5e:2f:9b:05:d3:53:55:af:b3:d3:c2:d3:13:
29:c4:6c:03:e8:c3:69:e1:59:2d:9b:15:e7:87:28:82:0b:a7:
81:55:70:68:ea:3d:db:e5:12:03:50:f3:89:f2:e9:69:3d:9d:
12:91:92:2b:84:4d:99:9c:7a:27:71:1a:bf:c5:2a:91:d3:af:
01:24:1a:f0:79:f7:a3:1d:47:96:13:26:71:f3:7e:b9:99:c9:
8d:c0:60:bb:6e:0e:77:78:ba:a5:8b:20:5a:9f:5a:68:e2:41:
40:58:6f:7f:c1:24:47:f5:1d:9f:4c:4a:f4:9d:a5:b8:47:62:
e0:7d:2c:61:ab:27:2c:c3:dd:98:be:20:48:07:79:8d:39:c2:
00:5e:01:76:0e:25:d0:29:5e:3a:f9:c7:2e:bc:62:d7:cb:16:
4d:8a:cb:cd:98:74:5f:2d:4f:1b:5b:cd:86:11:fc:67:aa:e8:
08:c0:4b:a8:a9:55:0e:5f:c5:72:81:49:19:d7:a2:80:39:4f:
9f:f7:aa:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:20:03 2026 by rpki-client