Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: xxwjpM5xjpsPlz14p+SYUnim9b+kVc9+QeGp9hno/yw=
Subject key identifier: 65:DD:A4:3F:91:DB:BB:B5:9E:2E:13:91:F2:65:C8:A1:1C:5C:6D:05
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019F1A8D14584D989C35FFB146567CAEC01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1298
Signing time: Tue 30 Jun 2026 22:01:21 +0000
Manifest this update: Tue 30 Jun 2026 22:01:21 +0000
Manifest next update: Wed 01 Jul 2026 22:01:21 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: rhbBfVNFy7bCpqLekKVaOoy3QH2ad3H0rryZbQp1Be4=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8d:14:58:4d:98:9c:35:ff:b1:46:56:7c:ae:c0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jun 30 22:01:21 2026 GMT
Not After : Jul 1 22:01:21 2026 GMT
Subject: CN=65dda43f91dbbbb59e2e1391f265c8a11c5c6d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:7f:28:f1:70:70:fa:80:bd:f1:32:4d:8d:
2a:df:c2:43:c6:e5:83:52:61:cc:8e:e9:ba:e8:f4:
c4:4e:48:36:bc:b4:db:b0:01:c4:37:10:ef:11:73:
3d:62:d0:cd:7e:00:21:22:62:a8:3f:44:8b:0c:f0:
04:5b:cd:77:aa:da:6a:66:b1:85:0a:6f:0d:f8:bd:
be:ea:ec:88:50:cf:8f:6c:56:52:2d:31:72:d6:0a:
13:4d:eb:de:a5:95:5b:bd:d4:05:ce:ec:8f:dc:4e:
84:64:b9:be:70:f7:df:74:df:ae:a6:bb:ec:9f:78:
65:22:c1:61:89:61:0d:70:76:b3:bf:0a:9c:b6:cf:
7c:49:c0:eb:d1:12:2d:1a:33:e5:97:0e:31:d3:00:
2e:9a:c2:6a:9f:bf:79:f0:5c:8e:43:dc:2d:79:40:
83:04:85:86:d1:5c:2d:84:51:14:d3:e7:de:b5:22:
10:98:9b:78:73:62:7c:4d:5e:93:44:19:4f:d2:59:
62:2b:ac:69:65:6c:e0:b4:e8:49:9f:01:1e:fe:a2:
ab:25:01:14:f9:6f:ac:47:db:ca:a6:f9:c5:8b:bb:
f9:18:93:cb:65:a2:f6:b7:7c:4c:5c:d4:c6:69:af:
ea:76:f6:71:87:ee:7c:05:b9:68:6f:13:04:76:8a:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DD:A4:3F:91:DB:BB:B5:9E:2E:13:91:F2:65:C8:A1:1C:5C:6D:05
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:dc:43:48:2b:80:30:14:47:44:de:8c:36:97:ab:67:33:2e:
fc:94:b6:2f:c1:85:8b:61:30:9d:da:c3:0b:90:ce:87:b3:21:
5c:1d:d8:3a:64:04:b8:ad:3d:c9:87:d4:d2:9a:65:0c:68:31:
74:7a:b3:5f:7c:8c:90:6f:ae:b3:40:56:bc:3a:70:04:21:3b:
6e:e1:e5:76:28:12:e7:ae:44:e4:75:9a:d7:ab:d3:c4:77:c4:
0d:05:62:a9:7f:a5:fa:22:90:60:65:45:bb:64:0b:2e:fa:00:
40:12:c8:b7:58:a2:c7:dd:f3:79:b3:87:1e:50:5e:f6:21:59:
69:b2:e5:4e:fe:f3:20:3e:74:78:21:65:3b:e8:de:28:48:28:
e2:cd:f4:dd:dc:e5:85:8c:ec:95:11:1a:c0:3d:94:0c:2c:72:
f8:93:95:a4:98:1c:21:cc:27:ef:0a:cf:b8:5a:d2:28:e1:2b:
23:79:03:01:b9:3a:9f:3a:67:38:0d:0c:bb:c5:9f:ee:e8:7b:
90:37:61:5d:17:83:fe:e2:7f:da:81:bc:5c:c2:ab:f7:48:7d:
79:f5:ca:cb:7a:0c:33:56:de:2e:a1:e0:c2:2d:37:a7:b0:68:
44:54:b4:4e:1e:cc:26:f1:0f:39:a0:94:11:9a:ec:3b:3d:8f:
af:78:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:16:04 2026 by rpki-client