Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: q5AmOiSLQu6dNhnjMqejFdtjrv68HQgNr46ZcUm6IxE=
Subject key identifier: 0B:58:C1:A1:2F:47:95:1B:7C:62:D2:39:AD:A1:67:C9:1D:CA:63:F9
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019D98506EA1FDE3AB8D972FD4C7A9902A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0BDC
Signing time: Thu 16 Apr 2026 22:01:41 +0000
Manifest this update: Thu 16 Apr 2026 22:01:41 +0000
Manifest next update: Fri 17 Apr 2026 22:01:41 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: hh4p1uB2MdhW/FUVXNGSga6Y81jjP6asfLDbA9dQrZI=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:6e:a1:fd:e3:ab:8d:97:2f:d4:c7:a9:90:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Apr 16 22:01:41 2026 GMT
Not After : Apr 17 22:01:41 2026 GMT
Subject: CN=0b58c1a12f47951b7c62d239ada167c91dca63f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:e4:e1:bd:80:83:11:3d:1b:da:64:71:8e:
9e:20:a7:6c:19:c8:19:10:1c:77:15:27:09:d3:e8:
2f:7b:2a:92:de:0d:60:02:77:7f:75:39:2b:2c:26:
c4:e8:8d:a8:a4:ae:71:c7:3a:30:fb:08:a7:88:64:
65:f4:49:a2:e0:4e:51:95:69:5a:61:4d:49:38:38:
14:53:29:3b:37:5f:6d:47:1c:71:22:a2:a3:26:c9:
a4:1b:cd:b3:49:f3:fe:41:e0:60:ec:ff:71:a7:cc:
6f:5f:81:b5:55:fe:ab:b4:60:eb:a5:90:f8:38:06:
69:40:de:43:c9:15:6d:c1:5f:d5:d7:b0:23:b8:2f:
1e:f2:5e:01:0e:64:98:a6:95:7a:b7:8d:0f:fa:c4:
e5:c8:c1:87:90:3c:f4:9f:31:4f:38:7a:02:b1:98:
f0:80:e2:db:b3:9d:f1:ac:b5:1b:10:f1:5c:43:43:
20:75:d9:fd:71:b8:7a:a1:14:f4:7a:80:30:46:d0:
53:23:0e:bf:f3:a5:ce:7a:b7:b6:09:a9:b3:c4:6f:
d2:8c:81:c4:ac:a4:5b:21:48:87:b3:bc:04:55:20:
62:42:07:21:03:d9:d0:21:bb:f1:bd:03:c1:ac:e8:
17:24:d2:d1:f0:87:01:da:99:06:8e:e5:76:02:1f:
18:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:C1:A1:2F:47:95:1B:7C:62:D2:39:AD:A1:67:C9:1D:CA:63:F9
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:00:59:fb:c8:0e:32:b5:ef:39:03:94:9d:54:b5:9d:39:53:
64:a8:00:fa:49:0c:d4:e9:89:a8:8a:f3:79:8d:03:e7:b9:96:
6f:8a:33:41:dd:db:3e:2d:cf:ca:c0:6e:59:0c:56:51:cf:6b:
25:d1:b0:b6:59:21:d2:a5:3c:79:57:1b:87:35:2d:09:c3:11:
0c:53:63:2d:c5:0a:1f:23:82:17:2e:63:cb:24:4f:75:4d:bf:
5b:c8:e5:f5:d7:9c:bc:d0:2f:48:db:9d:a2:7d:17:c6:aa:6f:
57:d7:b3:fd:c3:1e:2d:66:b5:8f:a8:1b:f2:e1:5c:32:88:c4:
2a:18:99:0c:32:2c:eb:17:5f:1c:12:36:68:75:b9:0f:19:e6:
3a:49:d0:d1:f5:42:d8:88:92:e0:19:7f:69:b1:20:59:36:5c:
81:2b:db:d6:79:f9:1e:5b:9a:6d:61:57:74:af:ee:b6:5c:e6:
79:b4:c7:33:d0:b1:3c:a6:7b:10:73:ac:78:f7:bb:de:b9:e1:
17:1a:2e:a1:ed:15:2a:1f:60:d3:08:f5:18:b9:a4:58:be:1c:
ee:31:41:2e:fd:6d:95:51:40:a8:32:4c:2d:d9:6d:1d:c8:c3:
34:94:84:5f:8c:af:1f:53:2a:5a:0e:6c:63:a7:91:d7:d4:77:
6d:95:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:56 2026 by rpki-client