Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: wHevDS6Z2f7ftowhZ6edHoqtePdquwZRfyr26DnZjFc=
Subject key identifier: AD:55:BE:8E:A5:33:91:82:E0:25:E3:49:6E:15:B3:63:39:7E:FA:DE
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019E92145C2CABC1FFFAA1455035AED22AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 1412
Signing time: Thu 04 Jun 2026 10:01:08 +0000
Manifest this update: Thu 04 Jun 2026 10:01:08 +0000
Manifest next update: Fri 05 Jun 2026 10:01:08 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: Z90LKQ2U17mP8G6iUNr2ECxb1dzCxfaFFOrQ6cCr/JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:14:5c:2c:ab:c1:ff:fa:a1:45:50:35:ae:d2:2a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jun 4 10:01:08 2026 GMT
Not After : Jun 5 10:01:08 2026 GMT
Subject: CN=ad55be8ea5339182e025e3496e15b363397efade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:58:86:c8:9b:9e:a0:b1:28:24:2a:5f:72:
1a:0d:39:c7:ff:64:00:a8:85:dc:02:4a:4a:a5:06:
07:b6:d3:57:f6:42:fd:4e:f4:09:a0:18:5e:54:66:
ad:1b:67:8b:4b:62:f5:ae:d0:40:30:57:d8:10:87:
d2:6a:0f:98:f6:a8:41:a6:36:fb:2e:c9:15:dd:e6:
ab:7b:6c:49:e3:a2:fd:78:5f:16:62:2e:9d:67:e4:
85:61:b8:6b:d7:6d:27:71:10:0f:28:83:df:20:b6:
62:3e:2b:6f:00:f2:92:78:b6:0b:72:e2:aa:6d:75:
57:de:87:87:e6:9c:81:28:87:73:3a:d9:67:43:ca:
5b:44:1d:6b:f1:c2:a9:ec:8a:2e:84:b1:46:fa:95:
aa:91:cc:4c:5b:42:28:3b:2f:bf:ce:d1:8a:79:40:
cf:9d:cd:b1:25:62:e0:19:c1:1c:22:1d:7c:8e:b9:
2b:8d:9f:da:41:44:f2:8e:17:f1:75:cf:c9:5d:d8:
e6:c1:bb:41:9d:82:b2:98:a9:ba:91:24:28:c6:46:
44:d8:44:1e:19:80:22:c2:27:1a:8d:5f:7d:a3:15:
ba:72:d5:2a:03:a3:c7:94:30:fb:d5:cc:e0:b7:3d:
ed:1f:1c:d5:98:aa:f3:a8:c2:90:a7:6b:ed:2d:12:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:BE:8E:A5:33:91:82:E0:25:E3:49:6E:15:B3:63:39:7E:FA:DE
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:89:86:53:3b:99:8c:a4:04:dd:0c:72:79:07:e1:bb:cb:e9:
b2:9b:d1:0e:f7:7b:ad:b2:20:7c:cf:fb:ab:0c:41:23:46:7d:
8c:a3:63:e7:11:22:87:b1:f3:96:63:ce:e5:10:38:ed:c9:08:
51:20:2a:81:65:bb:76:dc:e1:65:62:fd:86:97:8a:1a:fb:58:
a7:9b:4f:eb:e2:20:62:a9:c6:7f:75:81:79:1d:f9:3f:c1:67:
f7:73:40:df:0d:1b:cb:45:ce:df:98:28:32:76:03:c8:7b:cd:
eb:1c:73:1c:73:4a:32:60:47:cb:9f:b3:43:ed:ac:59:c3:91:
2e:bf:b3:29:97:c2:5b:ec:f3:92:e7:41:3d:f3:6d:a9:8e:38:
9c:f9:f1:bd:f5:44:92:b9:f4:b5:23:b4:e7:2b:25:69:0a:bc:
6a:6a:0b:1c:37:3c:8b:ef:23:51:97:65:f5:85:3c:37:80:f3:
b0:92:ed:85:79:c3:7b:4d:9c:e2:6c:e3:28:eb:bc:86:8c:c4:
ef:65:48:44:59:1e:c5:e1:af:94:75:36:23:3b:95:ee:03:35:
ad:a3:07:40:f2:23:c9:37:d4:84:94:62:9f:f0:72:a1:f4:d5:
81:95:3a:8a:4f:aa:a9:fa:84:ba:2e:56:3f:68:f9:99:93:86:
04:4a:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:34 2026 by rpki-client