Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: gbD5wndxMczXy79TACkOv+B/94K0JMMmF85ea2J2poo=
Subject key identifier: 83:FA:E4:4D:04:28:9E:E6:38:06:D3:46:65:F7:5E:48:BF:97:6A:8C
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 01A0C746AA9EC55A2166F7A0EC0CEB127EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0D82
Signing time: Tue 22 Sep 2026 04:01:32 +0000
Manifest this update: Tue 22 Sep 2026 04:01:32 +0000
Manifest next update: Wed 23 Sep 2026 04:01:32 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: 5XVxS50xUooUtrqRgf78TkY+NJyMFYDLCpedalbsOLI=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:aa:9e:c5:5a:21:66:f7:a0:ec:0c:eb:12:7e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Sep 22 04:01:32 2026 GMT
Not After : Sep 23 04:01:32 2026 GMT
Subject: CN=83fae44d04289ee63806d34665f75e48bf976a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:0f:21:54:08:38:2e:7a:7f:13:b2:4d:44:
d1:03:ef:cc:46:d0:53:3b:73:e8:00:99:b0:41:31:
7e:b8:1d:03:3b:d2:b0:61:e4:bb:e4:52:33:6b:99:
0e:12:c7:1c:09:f3:41:7e:d5:70:a8:81:9f:10:07:
22:1c:f8:c1:ee:ba:53:f4:a7:65:00:b5:b0:71:90:
33:8a:94:da:6e:cb:86:44:70:31:cd:07:a9:8c:0a:
ed:a7:07:5b:2b:3b:19:74:8b:58:0b:9d:e0:73:78:
dc:1f:d2:b4:f1:ef:91:cf:16:52:48:66:bc:92:89:
41:73:44:c7:58:91:fb:03:25:33:45:e9:79:7b:98:
11:33:af:2e:e8:06:0d:62:93:9a:30:ef:4f:5d:b4:
9b:7d:5d:a7:ad:22:29:a0:db:ef:1d:c7:b4:f2:1e:
9c:cc:ce:57:d0:90:11:e5:66:80:21:c8:2e:eb:b2:
dc:6c:24:9d:ef:0b:4b:04:9e:3f:bd:c5:0d:e4:67:
53:e8:7a:0c:3e:15:96:f1:e0:c1:0f:ac:c6:bb:6a:
e1:8c:88:20:66:24:07:fc:53:a7:cd:e3:fd:54:fc:
91:0d:23:45:f1:23:4e:0f:fa:d7:89:e1:83:95:6e:
c3:45:2d:7b:0a:09:b1:3c:c5:d4:42:ad:cb:21:df:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:E4:4D:04:28:9E:E6:38:06:D3:46:65:F7:5E:48:BF:97:6A:8C
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:9a:75:66:e3:c7:2a:f5:81:ff:4e:ae:8a:3b:4f:a4:54:
77:e1:37:e9:3d:ea:75:a1:50:3e:6c:9c:ce:c7:80:5f:bf:3a:
67:89:f4:89:a3:12:ce:e7:ff:88:8c:1d:e7:dc:7f:a1:c5:79:
23:cf:bf:93:58:5d:87:f1:8c:32:d6:1e:ea:24:10:d5:75:10:
ee:a8:bf:6d:03:77:17:1d:f6:3d:b6:5e:f4:fc:f7:63:69:5c:
eb:b6:b0:e7:3c:69:18:e9:81:d6:8c:6f:67:dc:7a:45:f6:ba:
d9:9d:62:50:6e:8f:95:ea:6e:37:b1:2a:11:9f:07:01:12:ee:
97:cd:40:02:5a:6f:3e:7c:32:75:c9:4c:58:af:97:66:2a:32:
40:7e:60:03:a9:6d:5e:34:65:28:0b:78:76:0a:f2:bc:26:08:
17:dd:4d:8c:7a:10:97:af:04:a4:81:65:c9:9b:25:ab:38:26:
5d:5c:d7:a5:66:3b:ee:3f:87:60:9e:c8:f8:a1:a9:87:0a:01:
c5:99:ea:ee:27:24:df:f8:a4:12:26:1d:1f:10:51:48:83:e6:
fd:c6:d1:70:59:4a:29:93:35:1b:8e:71:e7:e7:9d:97:d6:50:
ff:0b:c7:eb:9e:41:a6:94:a3:51:81:24:50:49:42:1d:05:ab:
9f:65:a6:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRqqexVohZveg7AzrEn70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjYwOTIyMDQwMTMyWhcNMjYwOTIzMDQwMTMyWjAzMTEwLwYDVQQD
Eyg4M2ZhZTQ0ZDA0Mjg5ZWU2MzgwNmQzNDY2NWY3NWU0OGJmOTc2YThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMsPIVQIOC56fxOyTUTRA+/MRtBT
O3PoAJmwQTF+uB0DO9KwYeS75FIza5kOEsccCfNBftVwqIGfEAciHPjB7rpT9Kdl
ALWwcZAzipTabsuGRHAxzQepjArtpwdbKzsZdItYC53gc3jcH9K08e+RzxZSSGa8
kolBc0THWJH7AyUzRel5e5gRM68u6AYNYpOaMO9PXbSbfV2nrSIpoNvvHce08h6c
zM5X0JAR5WaAIcgu67LcbCSd7wtLBJ4/vcUN5GdT6HoMPhWW8eDBD6zGu2rhjIgg
ZiQH/FOnzeP9VPyRDSNF8SNOD/rXieGDlW7DRS17CgmxPMXUQq3LId+7GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP65E0EKJ7mOAbTRmX3Xki/l2qMMB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5uadWbj
xyr1gf9Oroo7T6RUd+E36T3qdaFQPmyczseAX786Z4n0iaMSzuf/iIwd59x/ocV5
I8+/k1hdh/GMMtYe6iQQ1XUQ7qi/bQN3Fx32PbZe9Pz3Y2lc67aw5zxpGOmB1oxv
Z9x6Rfa62Z1iUG6PlepuN7EqEZ8HARLul81AAlpvPnwydclMWK+XZioyQH5gA6lt
XjRlKAt4dgryvCYIF91NjHoQl68EpIFlyZslqzgmXVzXpWY77j+HYJ7I+KGphwoB
xZnq7ick3/ikEiYdHxBRSIPm/cbRcFlKKZM1G45x5+edl9ZQ/wvH655BppSjUYEk
UElCHQWrn2Wmww==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:39 2026 by rpki-client