Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: VIt02LxIOSpaeQjnLJnyURzUWyWMZpkxqo++exX0LCQ=
Subject key identifier: 10:8A:E7:4D:82:71:5E:87:13:76:22:46:E9:AE:8A:56:01:4C:75:6A
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019F1189B2936D1078B278B592EE7A1C93FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0C52
Signing time: Mon 29 Jun 2026 04:01:04 +0000
Manifest this update: Mon 29 Jun 2026 04:01:04 +0000
Manifest next update: Tue 30 Jun 2026 04:01:04 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (hash: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: 0WkZTeR/nfBWkdjD4JOEn8Cg0chXZ1SKmZ95V4z1Ft8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:b2:93:6d:10:78:b2:78:b5:92:ee:7a:1c:93:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jun 29 04:01:04 2026 GMT
Not After : Jun 30 04:01:04 2026 GMT
Subject: CN=108ae74d82715e8713762246e9ae8a56014c756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:b3:53:11:74:e3:d7:e4:71:42:05:52:0d:
cc:81:17:04:e2:04:1e:60:68:2a:2c:33:41:2c:df:
d3:66:00:02:02:b0:92:b6:b6:4a:0f:67:71:fd:7f:
39:e7:48:d2:2a:08:78:68:87:e0:78:b6:8a:97:2b:
08:d3:05:36:93:61:97:7c:96:4c:a2:f1:be:ce:da:
d0:75:97:82:45:f2:ec:09:ae:c6:90:e8:da:77:ce:
d7:ba:3a:9a:7e:7e:bb:dd:08:96:66:0f:32:7b:e7:
08:3a:91:94:c8:aa:c3:60:0a:e3:44:be:13:73:14:
72:83:fa:21:2d:aa:a2:18:e8:bd:2c:b9:3b:92:06:
b7:24:6d:9d:7a:a2:ed:a0:9d:41:19:86:91:e0:b4:
42:38:f4:de:a5:e7:5b:d4:ac:a0:a6:d8:93:f8:f9:
df:5e:85:e1:88:be:ee:0d:f8:00:fa:7a:4b:18:65:
54:05:f6:c3:60:da:9b:2f:28:fb:0e:ec:17:b8:52:
02:09:e7:ba:9f:32:11:38:7d:99:21:7b:84:fc:4c:
7a:d7:ea:69:b9:0b:4f:55:e4:07:2f:a9:93:82:1d:
8c:87:f5:54:99:cf:d6:d8:71:b2:10:e1:21:f3:ba:
48:ce:80:78:37:78:e4:23:aa:ab:a0:29:06:d8:77:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:E7:4D:82:71:5E:87:13:76:22:46:E9:AE:8A:56:01:4C:75:6A
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7d:3f:27:71:44:9b:72:fa:70:d8:97:fc:15:b1:46:fa:af:
0e:ef:6d:8f:7a:40:26:d9:71:15:51:28:c4:10:69:d5:f5:31:
3b:62:49:42:f8:ad:e3:83:a6:58:43:ba:3c:88:7e:b1:0d:3c:
9c:3b:1f:1f:91:46:d9:23:af:02:b0:0a:af:94:7e:11:ff:b8:
b4:52:c1:cf:05:b2:9e:ac:b8:55:f6:f3:78:1f:7c:f5:01:15:
4a:97:5b:25:56:a2:41:2a:e3:96:79:6e:11:40:c2:f4:a3:85:
f6:43:4f:d2:83:2f:75:6e:1a:32:2c:83:c8:65:66:74:cc:88:
47:82:e7:9f:e1:8c:f8:f4:a2:d6:23:64:3e:07:10:f9:dd:02:
fa:6c:11:6d:6b:b9:cb:0c:c2:71:4e:96:1c:a3:7d:72:57:47:
fb:c7:a8:f1:50:2c:6a:f0:c6:51:a9:f5:2e:4e:57:02:36:7e:
58:ca:fb:91:9a:0c:2d:53:b7:8d:f4:45:c9:9a:c5:ac:54:d2:
1a:04:01:2a:46:6d:aa:dc:18:1f:57:ed:52:76:b1:cd:c6:0f:
57:db:5e:d6:85:cc:6c:b6:98:32:c7:c9:4d:37:e7:eb:05:dc:
b1:36:62:0c:38:df:b3:2b:c6:31:75:54:a1:03:b4:09:09:ef:
da:a3:2b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:48 2026 by rpki-client