Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: a7r1N8DHEUjL390s239sD8LEeOMlqy+lCysyD79dnC0=
Subject key identifier: 23:1D:B2:56:49:30:3E:93:2D:BA:65:14:80:14:7E:2D:5D:8A:EE:CB
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019EFCBA11BFEA993937B06F733DDD8FF87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: BF
Signing time: Thu 25 Jun 2026 03:01:52 +0000
Manifest this update: Thu 25 Jun 2026 03:01:52 +0000
Manifest next update: Fri 26 Jun 2026 03:01:52 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: MW4Vji5a4JUO44yeAW0Mt60YByIBbJ61iCZWCYFSneU=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:ba:11:bf:ea:99:39:37:b0:6f:73:3d:dd:8f:f8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Jun 25 03:01:52 2026 GMT
Not After : Jun 26 03:01:52 2026 GMT
Subject: CN=231db25649303e932dba651480147e2d5d8aeecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:10:83:e3:e4:7d:40:57:28:87:43:b8:6e:
31:73:eb:5f:ac:d5:61:12:0a:20:8e:af:17:e5:a3:
33:47:49:9b:2b:b3:ba:b5:28:2f:c6:fe:4a:8c:ce:
5e:04:78:31:cd:ae:17:68:0b:1f:3d:26:9b:ff:3d:
5a:8e:75:bb:bc:83:5d:b2:a6:b2:1b:f4:4f:07:1d:
c6:45:3b:b2:c7:05:bd:ca:a1:84:3b:39:e8:5f:d3:
68:5b:91:23:71:63:fc:4b:18:3f:6e:1c:75:aa:31:
cb:47:ce:6b:2d:75:fd:28:19:a6:21:0e:c3:72:9c:
e3:d2:4d:d6:09:67:ef:19:5e:01:5b:b0:15:ba:eb:
b5:6c:6f:da:c6:36:cb:4e:ea:54:45:cb:f8:d8:fa:
d6:6f:1e:c9:a2:a4:10:6d:57:e6:f8:8d:2f:2a:dc:
e5:21:00:6b:b6:22:4b:a9:53:21:15:71:06:96:6f:
3e:5c:f1:03:50:03:ba:a2:c4:82:e0:8a:61:74:6b:
72:b0:3d:4c:5a:6f:0c:75:5c:ee:71:06:b2:c0:5a:
92:08:7c:fe:ec:ff:61:ae:e3:09:d4:98:50:d3:5e:
01:83:b6:cd:f6:bc:d2:c2:20:cb:84:ac:7b:53:dc:
87:5b:a5:93:b7:e3:f4:d1:e0:7f:51:91:49:2a:49:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:B2:56:49:30:3E:93:2D:BA:65:14:80:14:7E:2D:5D:8A:EE:CB
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:26:e1:ef:cd:cd:51:38:d2:c3:90:81:a1:1a:37:27:da:bc:
ac:14:62:19:b6:55:2e:6c:a8:3d:2b:43:00:5b:bc:f3:eb:0a:
37:1d:03:23:73:5c:0f:c1:da:e8:f4:d2:fb:fe:2d:80:f4:35:
4d:ec:3f:8e:40:e8:79:6f:d8:7b:b3:60:8b:99:7f:a8:98:05:
2c:42:40:97:b0:97:a1:fa:65:1b:34:1a:f5:e9:45:e4:99:17:
a4:e9:82:d9:11:42:09:c9:fe:22:9e:99:f8:8b:94:61:ec:2a:
fd:33:af:aa:7c:40:40:9a:df:db:70:df:d9:8e:4f:6e:49:7d:
f4:95:08:40:96:11:23:2b:16:8f:82:cb:d3:99:0b:5e:f6:2f:
7b:05:37:31:a3:6b:4d:f2:d3:74:f5:4d:6a:2b:3c:29:df:a5:
c0:b9:8d:0b:55:ab:5d:cc:f6:de:27:cf:b9:50:54:6f:2c:50:
63:9b:ff:20:41:27:87:68:f7:af:bc:fa:5d:2d:26:27:a8:ec:
3c:28:4a:99:90:9c:a6:c5:a5:0b:77:07:dc:cc:87:95:14:18:
1b:c0:0e:96:fd:49:3d:24:0c:8b:b2:b6:38:5f:07:9c:35:57:
fd:c1:57:b7:87:90:a0:80:84:36:5d:d9:06:49:d0:2b:fc:29:
d5:b2:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:34 2026 by rpki-client