Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: HLM7Bm78xxLwLjjXELV+oHXzK0tXnxUMPcBnjgstIKM=
Subject key identifier: 0D:CE:42:9E:B7:BC:6E:4F:EC:A7:2A:79:4D:65:4C:3C:61:72:7D:54
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019FF9B6ECBA963F87D4632C1C89838E4BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: 0142
Signing time: Thu 13 Aug 2026 06:02:22 +0000
Manifest this update: Thu 13 Aug 2026 06:02:22 +0000
Manifest next update: Fri 14 Aug 2026 06:02:22 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: xbG6/jzDJB3JWqS/nFHucMeSIOhJfX3TLX3PO3Hkozg=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:ec:ba:96:3f:87:d4:63:2c:1c:89:83:8e:4b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Aug 13 06:02:22 2026 GMT
Not After : Aug 14 06:02:22 2026 GMT
Subject: CN=0dce429eb7bc6e4feca72a794d654c3c61727d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ef:10:97:97:09:ec:b8:70:01:e8:c4:38:5c:
e0:21:36:0f:f8:59:42:4a:3f:ee:24:38:a6:0b:2d:
14:e7:f4:51:38:73:4e:75:aa:13:58:1b:4e:53:fb:
de:86:a4:22:79:16:08:3f:88:99:4e:f5:bc:2d:90:
d5:b6:c7:44:3f:09:9c:02:2e:e1:80:2c:ee:71:0c:
70:9b:5a:3e:3c:ca:7c:71:67:93:67:a0:c2:a0:11:
23:d0:40:af:73:0d:a3:db:aa:9e:6c:51:ec:1b:d9:
38:99:21:43:db:96:57:64:67:17:37:fa:e1:6b:aa:
b2:8d:3e:be:da:13:d6:57:0f:8f:42:ec:da:61:0c:
57:cc:7a:27:af:be:d9:2b:12:76:b2:0d:0e:3e:42:
18:e6:b5:f0:68:44:38:2c:a9:2e:04:1b:35:33:77:
77:99:e2:85:79:8b:97:8c:dc:60:20:b1:08:61:d8:
9a:99:99:56:71:2a:05:ad:59:fb:00:48:3c:49:22:
1e:d2:04:da:04:fa:3a:1d:3d:3c:c5:4d:54:84:47:
10:f1:7e:c9:df:c3:8e:0f:4d:cf:f1:11:2a:8f:a4:
eb:a8:a3:65:78:5d:54:1d:ed:00:9d:05:86:63:0e:
06:77:93:28:d2:13:1d:04:68:9d:ae:15:19:a9:3f:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:42:9E:B7:BC:6E:4F:EC:A7:2A:79:4D:65:4C:3C:61:72:7D:54
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ec:f8:74:dc:8e:5d:03:28:23:68:cb:47:eb:d0:d8:06:34:
ae:56:3b:02:92:ab:ba:46:d4:24:85:47:b4:2c:e3:29:33:ac:
c2:9c:fb:3d:d7:ad:0f:69:14:3a:04:70:e5:22:e3:7a:13:ff:
dd:4d:2e:b9:f1:28:25:e7:84:7c:40:38:1f:4f:91:be:4c:12:
33:44:cd:09:a2:d2:56:e6:59:81:bb:94:c6:65:fe:20:2f:01:
9a:39:24:34:0e:75:37:c6:a6:70:58:c7:56:0f:f4:74:2e:f1:
1e:0f:63:d4:ab:f9:fd:bd:88:be:3d:02:18:db:50:58:50:c4:
5e:2c:b3:e9:08:87:d0:34:7d:d2:f4:74:84:6f:82:f0:4e:f9:
23:35:2a:4b:6c:1f:17:fb:2c:de:25:be:3c:37:79:04:c9:0c:
7e:23:18:9f:ac:c1:4d:d4:30:a9:8e:d2:07:57:77:63:3f:48:
f8:9f:63:71:23:51:f2:80:01:3c:06:34:b3:ef:fe:35:dc:17:
e5:09:fa:1e:ec:79:18:76:ef:2f:07:d4:7a:0b:24:43:9e:81:
fc:61:79:24:6e:b5:8f:f4:51:ba:c4:e8:94:d0:bd:7c:4a:9e:
4a:1a:a2:c8:14:23:5c:da:25:3e:2e:37:9a:7f:47:d9:4e:ac:
f2:d7:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:04:39 2026 by rpki-client