Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: x39yszjCMKMnzIcoukwvi2c+0vJJC2fCdJZaeSiGl+8=
Subject key identifier: 75:BB:57:C4:C4:27:F9:B5:1E:C7:85:9F:12:64:CF:3C:A3:B1:A4:B0
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019EFBDDA20E8414DCE78B768CA2F2EDE5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0D6D
Signing time: Wed 24 Jun 2026 23:01:06 +0000
Manifest this update: Wed 24 Jun 2026 23:01:06 +0000
Manifest next update: Thu 25 Jun 2026 23:01:06 +0000
Files and hashes: 1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: eSL9RUeA/NiZeiQjgW+QeKthg3HdK4kQLWHEH/6Faek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:dd:a2:0e:84:14:dc:e7:8b:76:8c:a2:f2:ed:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Jun 24 23:01:06 2026 GMT
Not After : Jun 25 23:01:06 2026 GMT
Subject: CN=75bb57c4c427f9b51ec7859f1264cf3ca3b1a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0d:66:3b:82:c3:dc:fc:39:35:c3:e0:e6:2e:
1a:5c:81:08:b3:a0:d9:9e:c3:3a:88:15:ad:4a:a1:
98:a4:74:b0:aa:db:c2:5c:04:af:b6:38:66:63:5d:
d5:99:b7:7e:62:7d:47:73:34:24:9c:b3:47:1c:8d:
f2:cc:49:99:f1:3f:09:88:54:f6:23:59:d2:00:2f:
0f:2f:45:c0:04:8a:d6:2c:9a:88:e3:d5:15:9b:54:
f3:a0:f5:d6:01:7a:14:11:5d:44:75:91:61:fb:50:
ba:cf:0d:ed:5c:ef:8a:4d:50:df:6e:9a:18:43:47:
5c:31:13:61:64:6e:f4:de:83:00:13:6f:9f:5a:0b:
8f:49:d9:da:5a:bc:8c:de:20:b7:1c:4e:d2:21:e3:
b3:01:05:6a:d2:80:cd:73:d5:54:94:c0:2f:f8:1e:
a5:a3:47:e0:d0:38:9d:b1:a3:b2:db:46:64:f2:9e:
f5:7a:0d:4e:aa:6a:18:99:b5:42:4a:0f:1b:8e:ab:
cd:91:26:bd:3d:2b:c0:6b:35:d9:d3:49:30:a0:fb:
1d:4f:f0:67:2d:4f:fd:d2:cd:30:c6:60:d7:f5:41:
54:65:23:46:3c:3c:0b:fc:7a:42:1e:4b:36:7a:66:
4f:d7:7a:d8:07:fb:e8:e6:af:bd:8d:65:7d:33:16:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:57:C4:C4:27:F9:B5:1E:C7:85:9F:12:64:CF:3C:A3:B1:A4:B0
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:79:e3:0c:04:42:b9:f2:ab:c0:3b:0e:8e:bb:44:12:80:
9d:84:3f:80:2b:62:df:85:e3:dd:8a:22:1e:9f:6a:c6:5c:5c:
7b:48:74:10:22:5a:06:a6:d4:cb:33:f0:33:a9:80:27:d1:bb:
b8:4d:40:fa:37:b2:54:02:5f:82:2e:10:85:4f:6b:08:4c:d2:
da:93:30:b5:dd:5e:51:84:d5:37:45:e9:70:95:8e:7e:a7:45:
bb:97:8f:e6:fb:25:2e:10:d7:8e:e5:e2:d6:89:11:4d:96:e2:
0b:8c:62:83:5c:db:ce:72:a8:e0:17:07:13:55:d2:fa:84:03:
fd:ec:da:25:dc:71:bd:29:be:1b:50:12:d6:ef:74:ba:97:8b:
cb:21:91:58:c6:a7:06:19:be:f8:5f:d7:d8:8c:43:38:e1:86:
a3:c8:54:9a:63:f5:bf:14:f9:67:0e:c8:b6:cb:63:b2:5b:a8:
29:1b:09:ed:d9:3c:fc:cd:b6:25:ab:aa:cb:36:9c:cb:d1:db:
89:77:2b:3a:8d:3e:6d:ed:9d:b1:19:8b:26:0e:0e:07:10:c5:
c2:ce:b5:a9:63:2e:64:b0:2d:fb:ea:fa:98:95:97:30:ad:7f:
8c:4d:7c:1b:eb:b1:aa:5f:73:63:ee:dd:80:a0:c9:16:1b:89:
af:94:e4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:35 2026 by rpki-client