
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
File: Jg12BCKSiW-WU6ponkFgeUKzT4c.mft (raw, json)
Hash identifier: C70VPGDe6Cuj+sbffSrTdSUZ3bwkIJy0fZ8BPqU0AGg=
Subject key identifier: 51:C0:35:9D:95:20:43:12:9F:09:5E:44:CB:2E:2A:C9:22:58:60:18
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Certificate issuer: /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial: 019F853129AF59389CCA4B10B5F9A148F687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
Manifest number: 2A
Signing time: Tue 21 Jul 2026 15:00:19 +0000
Manifest this update: Tue 21 Jul 2026 15:00:19 +0000
Manifest next update: Wed 22 Jul 2026 15:00:19 +0000
Files and hashes: 1: Jg12BCKSiW-WU6ponkFgeUKzT4c.crl (hash: klgCiujAmtgk4zKCK8Eh/JIGA4Xs7ovAqTVMc/6GPbo=)
2: dA5GHyWkiinW-X3ggJL5uaWKg90.roa (hash: AobSuh+m+/JdWn6/war1pe24bAV9jiWfGNJFdO8s0gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:29:af:59:38:9c:ca:4b:10:b5:f9:a1:48:f6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260d76042292896f9653aa689e41607942b34f87
Validity
Not Before: Jul 21 15:00:19 2026 GMT
Not After : Jul 22 15:00:19 2026 GMT
Subject: CN=51c0359d952043129f095e44cb2e2ac922586018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:15:0a:34:45:8f:23:47:7b:fd:8d:90:3b:
0f:4e:b9:cb:7c:45:63:62:15:fd:5c:21:3e:29:d5:
bb:77:05:16:f8:ce:30:fc:2a:cc:ce:dd:aa:6f:e9:
59:db:9c:32:5e:61:65:b8:63:f2:2d:f9:ff:31:18:
67:a2:99:23:37:9f:eb:80:70:ef:d6:14:7d:9c:c6:
00:e1:3c:12:39:70:43:6a:aa:1c:33:88:37:0d:f0:
2e:62:69:1b:b6:e6:ec:d0:93:e7:a4:4c:e1:ed:36:
3b:b0:65:24:03:b7:9f:60:d3:cc:3c:87:94:79:ab:
e6:8f:d5:b9:09:ba:e5:ba:5c:72:c1:82:cb:49:8e:
dc:91:dc:52:51:d9:31:5f:d7:1a:dd:dd:44:09:b1:
28:cc:f3:8e:dd:76:36:e9:11:9c:4c:9b:f2:a9:46:
c1:58:17:b6:50:66:cd:81:22:56:31:6d:86:8c:c1:
70:e6:5a:47:a8:88:2e:45:4c:69:09:9c:61:6c:ed:
b4:5b:27:8c:d3:42:4c:c7:53:28:78:ce:85:90:b4:
2e:9c:64:91:2b:de:1a:e2:22:cc:d3:83:77:ec:55:
0b:5a:44:28:5e:df:5a:f7:5e:d7:05:25:58:ab:c8:
22:e7:9a:92:03:55:a0:2a:f6:03:0d:c3:90:49:0c:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:35:9D:95:20:43:12:9F:09:5E:44:CB:2E:2A:C9:22:58:60:18
X509v3 Authority Key Identifier:
keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:d5:e6:07:dc:e0:6e:e6:f1:80:07:a1:2e:75:a9:cf:05:
8c:72:6f:34:f7:0f:fe:7e:62:66:0e:59:1a:3a:8a:7b:ce:0d:
24:5f:5d:06:bd:2a:50:df:60:35:bd:0d:96:03:09:e1:a9:00:
08:cf:3b:4d:29:23:36:3a:fa:bb:3a:b0:2a:ba:d5:41:d9:6c:
ca:f3:a3:06:82:32:a6:c1:31:3a:f4:b0:ed:08:e8:fc:ff:74:
8d:e9:51:9e:2b:3f:52:c3:5b:f0:13:75:cb:0f:53:f4:84:7c:
58:50:fb:9d:8f:20:31:77:62:6d:73:b3:ec:aa:7a:d2:ba:91:
99:f6:f9:0c:3b:99:3e:6b:e0:08:43:5d:4c:e0:5f:44:3c:62:
c4:58:6d:42:6b:30:3f:db:57:dd:2f:8e:5d:f5:52:5c:f6:9f:
46:13:23:a2:5e:e0:a3:45:e1:5f:e3:be:06:37:f9:13:ef:52:
0b:8a:15:00:39:9c:42:88:2c:a0:ed:d7:a3:0b:43:64:3f:29:
da:2c:48:a1:e8:3c:e9:99:69:b4:2c:4f:79:a6:2c:5c:a1:d9:
0f:79:8e:4a:c7:b7:c1:97:fe:7f:5d:c2:af:ed:f3:41:9c:0e:
90:8e:e8:05:be:fa:a8:64:40:21:12:c2:9c:5b:05:f8:d9:c6:
47:f7:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:08:08 2026 by rpki-client