Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: h6uA/K5UHkg+hgQva+OQWIQSsY5eEgam2GyIjgpLRVM=
Subject key identifier: 07:43:37:1A:68:2F:DB:C0:08:89:26:5B:7F:4C:53:AE:E7:09:8A:09
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019CAAC69AF4E6351BF830015A80E3F1FF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0B61
Signing time: Sun 01 Mar 2026 19:01:08 +0000
Manifest this update: Sun 01 Mar 2026 19:01:08 +0000
Manifest next update: Mon 02 Mar 2026 19:01:08 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: rs+BI9Ng+tOJq/+R1HSQtY77Jd4IXqL9sEWgW8m6ixI=)
2: b4HgcSuFF78g3KojbGnfcJ_HWow.roa (hash: T5A48IHIu6Siqa4yHRK+sf9a+qlYjIQQwfP6VgKo5VA=)
3: grRs4RivLN7cpUB3UyiXGSSLhPU.roa (hash: uHkhelnd0+okWLXV2TG7W6yzacFWsktXmESp0qKxtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:9a:f4:e6:35:1b:f8:30:01:5a:80:e3:f1:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Mar 1 19:01:08 2026 GMT
Not After : Mar 2 19:01:08 2026 GMT
Subject: CN=0743371a682fdbc00889265b7f4c53aee7098a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:91:62:b3:4f:d6:76:56:99:1a:8a:e7:29:
a5:d1:eb:da:3c:ca:3a:e8:e6:33:82:6b:d2:47:3c:
86:f3:49:63:5b:6e:95:e3:75:f0:ca:3d:9e:95:27:
eb:92:04:de:52:d3:5c:c3:8b:30:fe:d3:fc:bc:13:
42:5b:6c:dc:2d:f9:5a:6a:4f:b2:e7:35:fe:12:3a:
17:0e:cc:79:cb:a5:10:dd:fd:65:aa:20:90:a2:d5:
3e:f0:43:be:59:31:44:f0:a3:51:fd:4c:b0:e5:60:
30:f8:7d:c4:fc:e1:a5:cd:c1:ed:09:c9:37:d0:3f:
51:c8:05:e7:1d:66:02:d4:3d:3c:6d:93:e7:6b:fb:
d1:7b:51:a1:58:fe:20:9b:89:62:4f:57:fe:7b:63:
14:0d:dd:f1:21:d6:aa:d5:0e:8a:1b:a2:5e:9b:be:
61:23:7d:99:b6:d8:ef:0f:ff:ba:86:1f:8f:5d:9f:
6f:95:0b:59:4b:ab:80:6f:d9:38:ad:4b:ce:3e:b4:
7c:2e:91:30:f4:b3:b0:fd:1c:24:fb:d0:6c:cc:b9:
0e:1d:0c:9a:68:6f:8e:21:fa:0e:86:c6:c0:e3:46:
33:c2:a3:ea:c9:d9:68:47:50:6f:19:04:d7:8f:11:
5d:26:b2:e0:e2:ac:35:3f:25:82:12:d4:b7:54:1a:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:37:1A:68:2F:DB:C0:08:89:26:5B:7F:4C:53:AE:E7:09:8A:09
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:a5:2c:59:38:40:71:d8:b0:f3:66:53:eb:70:dc:0c:3c:
63:5e:96:d0:e1:4a:af:ae:8d:27:07:fb:3c:b4:64:fd:fb:69:
5e:cf:ae:62:22:a6:36:44:23:cb:fd:08:9a:ee:e2:b4:14:b1:
72:73:cf:cf:31:e2:d9:e2:3e:59:02:7c:6b:e7:02:92:55:82:
25:6b:e4:31:af:49:68:5e:d4:28:7e:08:99:7b:07:b0:59:41:
3c:97:69:02:41:e9:45:27:ff:97:37:b3:14:20:ba:51:5a:10:
93:25:93:af:92:ed:0c:e8:9e:e6:86:e4:7d:14:ec:7f:e3:54:
1a:8d:12:7d:40:f2:10:f6:1d:06:ff:b6:de:d4:c2:34:90:f9:
cd:fd:79:46:37:10:c6:1f:fc:4c:4f:16:87:57:14:e8:17:50:
91:56:63:e5:30:79:d1:ad:0f:3e:8c:09:0a:17:83:90:38:51:
dd:70:80:51:56:14:d0:9e:37:98:0a:97:4f:27:30:1c:f1:85:
f2:7f:4e:6f:15:b6:7f:1c:d1:f1:0e:68:bf:0d:f2:da:a1:b7:
bd:ce:92:25:5a:02:cf:f9:4f:5e:28:49:49:a6:f9:56:d5:c6:
ef:e6:11:fb:73:e7:86:f0:f8:11:f4:23:4b:6f:76:d8:ea:d5:
59:01:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:28 2026 by rpki-client