Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: zK8eYXsPNNejirXuq7GB3p/sP9YM+HO/XECc0E8KqXA=
Subject key identifier: 72:59:0A:BF:3A:66:60:0D:3F:9C:6C:6A:F6:57:4E:E7:EA:FE:85:37
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019F1A1ED95E3A762E11D164DA1D3D988582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 17E3
Signing time: Tue 30 Jun 2026 20:00:57 +0000
Manifest this update: Tue 30 Jun 2026 20:00:57 +0000
Manifest next update: Wed 01 Jul 2026 20:00:57 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: Gr5WrpNvHy/MmkKWV3VRTrR0ELHaeGQQJBeNpbaAFis=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:d9:5e:3a:76:2e:11:d1:64:da:1d:3d:98:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jun 30 20:00:57 2026 GMT
Not After : Jul 1 20:00:57 2026 GMT
Subject: CN=72590abf3a66600d3f9c6c6af6574ee7eafe8537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:a3:f2:60:09:7c:8f:cb:f1:fc:81:47:7e:
8b:5a:bd:9c:36:62:c1:80:8b:b5:8d:0e:29:d3:ce:
71:97:ee:fe:12:0d:d1:40:c9:3a:c2:10:b1:01:96:
79:42:47:81:d8:c0:d5:db:d7:da:7d:dc:2c:b5:f7:
8e:3f:8d:05:0e:dc:4f:a9:8c:a6:32:72:9e:16:d4:
e6:26:45:d3:cc:6c:9d:45:20:42:29:a5:fc:6e:71:
30:1e:e4:19:c9:4d:e8:38:69:b9:39:63:36:31:be:
4a:10:48:81:9b:78:85:e2:e8:b4:31:97:61:13:8c:
e2:32:ac:45:61:04:e6:28:0e:75:84:80:74:3c:db:
ff:1a:0c:31:59:14:ae:e9:66:b8:4d:c3:5c:ad:db:
2d:6c:9d:3a:36:5a:d8:59:53:e0:60:0a:e3:7d:18:
bc:67:4b:bc:82:e3:27:f0:ed:a7:84:78:cb:59:3c:
da:a0:03:4a:09:f3:50:68:a4:a4:d1:34:27:6b:19:
63:b5:b1:d5:5e:ba:80:46:bb:f3:4d:36:2a:73:34:
4a:6d:e0:1a:30:a8:38:52:39:a5:15:6a:6f:18:f5:
a3:fa:33:d8:bf:f4:7d:ad:b6:75:61:f4:29:10:bc:
60:ef:06:3e:0f:23:4f:17:eb:49:84:0c:3d:32:61:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:0A:BF:3A:66:60:0D:3F:9C:6C:6A:F6:57:4E:E7:EA:FE:85:37
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:61:06:dd:1d:b2:6f:f2:62:5f:c8:35:db:35:50:d7:91:
d7:d4:36:ca:6d:68:c8:ba:03:54:b9:d2:3b:21:cb:6f:7d:af:
9c:59:7a:20:19:87:bf:4b:b2:09:aa:7a:28:10:2f:4f:0b:1e:
9d:38:c6:88:ff:12:53:3b:c0:11:61:45:4c:16:2e:26:21:37:
85:43:28:08:0c:5a:6f:89:e6:94:61:b1:f5:81:2d:c4:4b:1c:
54:eb:90:73:bd:d0:8d:96:5e:d2:8c:cf:bf:08:cd:57:00:fa:
89:83:7a:d5:90:84:da:54:0c:02:90:fe:9f:e8:b8:fb:9e:b6:
f2:4b:4d:d7:e3:87:1b:4f:fa:cd:b9:03:a2:d4:11:ec:fe:02:
8a:b2:4c:66:ae:10:bc:32:dc:74:c7:10:23:0b:6b:8d:65:9a:
14:0a:a2:f8:a3:4b:65:d3:dc:4b:ad:62:d1:a9:ac:bb:1f:82:
51:53:b6:de:c8:72:de:de:bf:85:63:15:6d:a1:fd:75:07:53:
3c:4a:84:0f:f9:a1:3c:79:05:22:30:55:78:22:ec:01:d7:5b:
05:45:f6:2a:a3:22:d4:ed:d8:5a:53:0b:bc:a9:db:5a:b6:dc:
37:dd:47:c0:02:c4:18:5d:8d:13:49:0b:85:12:08:4d:9b:88:
2e:ce:23:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:17:53 2026 by rpki-client