Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: ogBvvmxyO0kZWLEGujdUbiZTBbyzZgwPsANaRFF3A3s=
Subject key identifier: 66:FD:CF:E0:40:69:FD:C7:A8:2E:8D:06:A5:30:A3:75:FF:CD:D9:67
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019FAD526D098C88DDD0954DBC1304403CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0CF0
Signing time: Wed 29 Jul 2026 10:01:27 +0000
Manifest this update: Wed 29 Jul 2026 10:01:27 +0000
Manifest next update: Thu 30 Jul 2026 10:01:27 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: bd/4TvREHhr1rSjJ878zAM5zZ6GJDLLj87rV2DuWQ/8=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:6d:09:8c:88:dd:d0:95:4d:bc:13:04:40:3c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Jul 29 10:01:27 2026 GMT
Not After : Jul 30 10:01:27 2026 GMT
Subject: CN=66fdcfe04069fdc7a82e8d06a530a375ffcdd967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:48:e5:6f:21:0b:26:3d:a1:74:a7:e7:8d:
93:5a:a4:18:8a:ff:db:7a:0c:b1:34:1e:b6:0d:dc:
3f:27:18:08:dc:16:75:ab:0b:59:9d:2f:e1:9c:9b:
f2:76:26:60:17:5a:89:d3:3c:cf:3f:aa:c5:8b:b0:
38:0f:cd:d6:f0:48:9e:7c:74:c4:e5:c7:c0:de:b7:
5e:3a:bb:73:20:ee:22:7e:33:d5:17:69:91:58:fc:
de:f4:ab:bb:6f:37:c0:7d:68:92:e1:7c:d3:aa:4b:
d3:26:43:52:9f:24:4b:d7:ec:1d:be:c8:bc:c4:f7:
87:67:d4:a4:e2:f1:43:a1:38:84:21:4c:5d:ba:03:
f5:13:97:e8:dc:d0:0d:72:23:d0:a6:b0:a1:c1:47:
7d:c5:46:79:14:d4:ab:5b:8e:fd:74:66:53:ec:c0:
35:49:2f:a9:b7:3e:50:44:43:83:15:22:ef:de:a8:
d5:b1:a1:4f:3f:99:25:8a:b3:e6:76:df:92:6f:c0:
3c:4b:89:7e:31:e1:c2:56:b0:8f:25:ef:e2:20:25:
cc:8b:1f:d4:5d:23:e7:ea:8f:b0:48:04:64:62:34:
e8:f5:fb:a7:fa:8c:c4:dd:11:8f:ee:8b:61:89:18:
2a:ec:c8:0d:75:fe:be:21:71:49:da:0c:1e:23:be:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:CF:E0:40:69:FD:C7:A8:2E:8D:06:A5:30:A3:75:FF:CD:D9:67
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ad:a0:dc:66:1d:9a:6d:dd:49:5e:65:74:70:4e:c9:5c:81:
17:07:83:bc:ce:1b:42:5c:f0:19:00:54:e5:6b:10:97:5e:69:
05:b6:42:be:86:08:0e:1a:75:13:58:a8:e8:fc:6e:da:42:08:
15:fb:0c:60:bf:b6:4b:db:95:d7:90:5b:b4:57:b7:3c:dd:3d:
80:d4:14:e3:cc:75:4b:a2:fe:b6:84:c6:0c:9c:dc:8b:43:85:
77:02:21:d6:8b:e8:39:04:e1:75:0e:78:14:1e:ca:fb:be:b8:
e1:d3:09:28:3b:2e:3a:8e:e7:eb:f6:37:96:c9:b7:c6:86:8b:
f0:c7:51:f3:05:50:1d:be:34:2c:8f:a0:f0:4c:0f:7c:9c:bb:
bb:e1:ff:53:f7:10:39:77:10:40:94:82:10:41:3a:78:a5:37:
0f:85:fa:a5:5c:4c:b1:96:46:f1:f8:8b:c7:df:81:c5:6f:4f:
33:b8:f8:4d:56:ca:27:eb:1d:07:c6:b2:bf:34:43:27:77:98:
24:68:ff:c3:ca:a9:ea:75:86:84:df:e8:e2:09:8a:04:7a:33:
a9:d8:90:48:52:ed:8c:e7:e5:84:d2:63:85:19:96:1b:c3:d5:
6e:05:80:51:1c:2a:66:e2:f9:6a:a8:91:2e:e5:e3:49:bf:af:
e5:b6:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:21 2026 by rpki-client