Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: 6KUXw2DfgG5cyViHsvMVwWkWRxwTPOKSwKZ+5T2F2TE=
Subject key identifier: 52:D7:81:40:E3:9D:E8:DD:A2:DB:0C:FF:C4:EC:26:77:01:84:5F:6C
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019EB8B38314EFD2B5673E7FC20107A8EB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 16C4
Signing time: Thu 11 Jun 2026 22:00:32 +0000
Manifest this update: Thu 11 Jun 2026 22:00:32 +0000
Manifest next update: Fri 12 Jun 2026 22:00:32 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: t8Q4U0q4TxqILnhiDKdQoGnAAI3Na/PKfJlRoLRUikk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:83:14:ef:d2:b5:67:3e:7f:c2:01:07:a8:eb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jun 11 22:00:32 2026 GMT
Not After : Jun 12 22:00:32 2026 GMT
Subject: CN=52d78140e39de8dda2db0cffc4ec267701845f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:7c:2b:7a:eb:4a:de:a9:eb:6d:64:50:18:
29:32:30:34:c1:1d:8f:71:f1:d8:bb:b3:c9:d2:31:
9c:4d:89:38:e4:39:35:25:b2:27:86:05:43:26:b2:
02:23:a9:b1:8b:b0:78:49:98:74:3c:3f:d5:84:6e:
c5:34:5c:cc:6c:d4:c9:72:84:c2:47:aa:12:24:e8:
98:46:ab:db:12:9e:1e:35:2b:4b:80:f9:08:5d:89:
03:5f:4a:ec:07:4a:de:2b:89:b6:14:25:17:4b:a9:
ce:b9:6f:48:84:83:74:f6:44:3d:f4:dc:12:03:50:
e2:41:1b:85:6a:bc:49:e9:f1:a4:41:0b:75:92:ad:
76:e7:4f:fc:13:57:e9:60:78:93:79:b3:25:93:07:
84:36:33:84:9e:b3:c5:64:10:9e:7a:61:e4:ee:05:
6a:c2:c7:cb:b9:d0:f1:c3:31:57:80:c6:f2:68:4d:
94:d3:e4:5c:66:6f:bd:d2:58:de:25:2b:fd:61:51:
36:47:06:e1:84:b9:a6:6e:d9:9d:f8:50:96:b9:de:
bb:f3:79:a0:50:3e:b1:e2:1c:5b:1b:44:5b:dd:e1:
89:0c:0e:f9:30:7b:0f:79:08:48:44:6a:f1:f4:62:
0c:e7:c7:bb:e7:00:37:d6:83:f4:cb:b0:90:7a:18:
49:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D7:81:40:E3:9D:E8:DD:A2:DB:0C:FF:C4:EC:26:77:01:84:5F:6C
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:54:f5:81:a4:6e:84:e0:7c:97:f6:4f:97:c9:40:25:3c:d7:
80:70:5f:c2:0b:20:5d:6e:17:b8:3f:4f:70:49:74:b9:3c:27:
d7:a3:3c:d1:dc:a4:7f:7b:e3:19:78:92:69:fe:65:41:d3:41:
22:8b:d6:de:00:41:6d:46:5a:4d:9c:fb:9b:eb:bf:81:f6:99:
f0:0a:91:5e:7d:9c:2b:7b:2e:82:02:03:74:b8:87:83:31:40:
bb:e9:ae:df:03:90:e4:e9:db:b3:02:a9:fe:2b:b8:13:b1:b7:
e8:cd:24:35:18:67:c9:9b:7b:ec:41:65:22:9a:c5:c0:b1:a1:
7f:db:8e:d7:56:49:56:47:63:4b:7c:28:03:1e:01:41:c2:f9:
9d:ae:9f:0d:e0:a7:1b:f7:61:72:fe:6e:dc:51:43:15:26:7f:
f4:47:8a:8d:b1:75:db:0a:aa:f8:a5:b9:d0:43:c8:d0:03:17:
c0:16:56:a7:04:a9:f9:3c:e1:81:4f:23:f0:a1:b0:ec:d1:f9:
ad:f4:98:c1:ed:39:6a:26:ac:2a:db:96:b4:96:a8:fc:39:bc:
c2:7e:66:fc:54:b6:e6:a1:6a:3d:f3:ff:e6:ac:ce:aa:f5:27:
e9:48:9d:84:6c:71:d1:fa:24:a7:0d:b3:87:7d:f6:83:77:c4:
c3:79:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:44 2026 by rpki-client