Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
File: jolfHicMY17GHfmpf8D2aMCo9Ug.mft (raw, json)
Hash identifier: 8om6+aaIdO0Pg/nxFavxOAAweMuGiafHE+T1KsgfyCk=
Subject key identifier: 27:89:59:D8:15:C9:B2:A8:85:83:EB:0B:55:29:FA:73:E9:AD:C4:E9
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019EB80E8CB0704561CB80CF5ED2605CAE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
Manifest number: 144A
Signing time: Thu 11 Jun 2026 19:00:21 +0000
Manifest this update: Thu 11 Jun 2026 19:00:21 +0000
Manifest next update: Fri 12 Jun 2026 19:00:21 +0000
Files and hashes: 1: L24zb2GPwHD-aPGno9VtNYT_9UA.roa (hash: TV8bwr8KXxyIpZ3hz+LfUH4wszhJw0hokfRXNpqsBSk=)
2: jolfHicMY17GHfmpf8D2aMCo9Ug.crl (hash: /79rzbxF2CboOzhWlphSpQk30a6guSyNK16T9P83p3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:8c:b0:70:45:61:cb:80:cf:5e:d2:60:5c:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jun 11 19:00:21 2026 GMT
Not After : Jun 12 19:00:21 2026 GMT
Subject: CN=278959d815c9b2a88583eb0b5529fa73e9adc4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:a5:bb:aa:87:f8:18:d8:e4:a7:ab:3d:c5:
06:8e:51:38:1f:40:7b:84:eb:57:ea:7d:99:d2:57:
51:47:d8:03:c8:88:c2:d9:98:b2:ae:85:1b:da:57:
3a:95:bb:7c:d9:f3:78:e2:da:03:b4:67:2d:5a:f1:
b2:e0:2b:f1:ff:9e:d7:f5:16:b4:71:8a:37:23:08:
bb:43:9f:0c:35:0e:3b:45:9a:32:34:e9:3f:23:b9:
61:ab:27:90:ba:91:a8:3a:93:78:65:be:84:3d:12:
22:ad:b8:0c:ca:0d:31:fe:bb:84:1c:b1:a6:f7:c7:
de:cb:58:e7:ce:ea:cf:1b:be:77:12:38:02:45:37:
8d:23:34:c8:65:76:36:36:1c:d7:a0:0d:94:e1:d6:
e9:8e:c1:6f:59:43:63:c4:9a:48:59:f4:71:f7:a5:
ed:8d:99:fe:bc:55:5c:47:2d:91:0c:de:39:e3:7f:
fe:0e:ff:b4:42:00:be:16:ba:26:4d:dc:27:af:3a:
c1:96:02:14:84:84:95:a7:79:da:95:4f:dd:eb:88:
04:77:13:40:d0:1d:0a:cb:35:10:ba:8e:e7:4b:ee:
45:47:54:0e:3b:c3:bc:a0:44:3d:c0:5c:8b:a6:67:
0e:be:63:5d:24:f7:ff:a3:f3:96:43:38:e8:8e:87:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:59:D8:15:C9:B2:A8:85:83:EB:0B:55:29:FA:73:E9:AD:C4:E9
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:27:93:83:d8:29:f0:c8:76:93:a5:76:1f:fb:d0:6e:f0:
be:8b:25:c5:48:cb:cb:98:92:f7:74:cb:bb:71:0e:a8:65:16:
53:fa:3a:67:5b:2d:5f:f8:ed:b4:49:c4:d2:d6:1b:ea:e5:04:
f0:79:23:71:cc:a3:2a:0f:2c:62:4a:60:6c:91:6f:b5:e6:96:
e2:e5:68:c8:c6:a0:be:92:ff:8d:b9:64:ed:73:ba:86:4e:df:
9f:68:86:29:f1:df:44:4d:ea:6f:4e:f2:50:9c:5f:c8:82:19:
01:86:07:69:8b:b2:62:c0:54:78:27:c8:23:e0:0b:ba:54:24:
b0:c1:fe:4b:aa:9a:d2:56:ba:a0:70:27:2d:9d:4d:26:e2:81:
a9:bf:ec:f8:65:96:1d:0d:dd:a1:76:32:91:64:cd:63:c7:51:
e2:da:38:2d:03:49:fc:fc:60:f2:68:70:c5:9d:df:ef:66:43:
5b:a9:06:37:24:75:de:bf:4d:11:21:41:4d:5c:32:89:5e:96:
54:22:3e:1a:02:b1:b1:63:2b:17:1f:ed:05:cc:78:b7:81:75:
9c:19:a9:98:9f:e1:96:41:a4:6a:80:ac:61:40:b8:4f:88:ff:
b0:ec:8f:9d:d5:5c:0d:48:c8:d4:51:90:32:13:34:b6:04:87:
21:ca:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:39:27 2026 by rpki-client