Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: Xc9iFQb8cidvjb0fv4cApGoN8aihM5HdmpKDnjJVLjI=
Subject key identifier: 4F:B9:61:7E:1D:36:08:C2:F1:2A:6B:80:CE:36:7A:46:ED:2D:25:43
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019F111C0E6C44BE7BC7BD75482EB772CA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0E35
Signing time: Mon 29 Jun 2026 02:01:19 +0000
Manifest this update: Mon 29 Jun 2026 02:01:19 +0000
Manifest next update: Tue 30 Jun 2026 02:01:19 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: NQG9Gyc5U30fMAeIdan6wXRMCcWygEbmbxBgEwnuLpA=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:0e:6c:44:be:7b:c7:bd:75:48:2e:b7:72:ca:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Jun 29 02:01:19 2026 GMT
Not After : Jun 30 02:01:19 2026 GMT
Subject: CN=4fb9617e1d3608c2f12a6b80ce367a46ed2d2543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:f8:4b:f3:2f:75:44:23:d9:ef:1b:78:7e:
3f:07:93:73:d4:10:e6:41:8c:cf:bc:1e:6d:68:04:
be:35:31:7b:3f:72:62:9d:b9:a8:0b:7b:7c:e7:a6:
c1:de:ed:73:5a:53:8f:0d:6f:37:78:04:9d:5d:82:
37:ed:c4:83:6f:7a:70:c3:9e:46:a4:66:19:7f:e5:
6f:06:1b:54:a6:03:45:e6:18:47:84:c6:7a:44:10:
92:7b:57:19:94:5f:e2:7e:12:db:5c:a5:9f:87:26:
12:ab:ad:bb:d1:65:bc:b2:a4:3a:63:d5:42:cb:ed:
0e:03:43:64:68:8c:66:bb:d8:1b:cf:48:fd:d6:23:
26:e1:68:69:3d:40:da:bb:b9:8b:67:79:86:d1:15:
58:19:c9:af:35:49:72:16:34:8a:06:ea:31:0b:00:
26:84:50:84:84:4c:9d:dd:f1:25:8f:a3:e0:7e:9c:
f1:c3:c6:83:1e:24:34:ae:b3:f3:fc:35:13:74:96:
4f:c3:5a:06:5a:92:21:c3:94:a2:24:06:3e:cb:9d:
7f:41:b9:0e:89:ee:93:21:c7:b1:76:cb:19:66:ad:
c8:3d:39:d5:6d:d7:a1:5c:bd:03:7a:b6:81:54:64:
15:ba:52:38:5d:ef:47:8f:69:77:22:50:74:9f:f3:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:61:7E:1D:36:08:C2:F1:2A:6B:80:CE:36:7A:46:ED:2D:25:43
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:65:b2:8d:b9:36:7e:2b:03:c7:5d:9e:24:38:58:b7:59:db:
71:4d:73:85:1e:73:f5:16:9c:1e:ce:4e:ca:5e:e1:f3:de:5d:
1e:8b:b9:45:f8:99:29:66:ed:50:ba:41:c7:de:9a:03:ca:8c:
93:de:9b:62:e8:6e:40:c0:fc:e6:10:f0:13:42:f9:96:1f:d5:
97:fc:e8:56:e6:0d:39:c7:d0:35:57:4d:cc:da:9f:99:25:bf:
77:ee:bf:7d:20:c9:75:16:31:98:ba:f1:82:72:fe:00:63:b9:
8f:17:ff:a7:c9:6e:f9:d8:ca:6a:56:c1:bf:72:1c:cc:7c:7d:
f4:93:db:4f:7b:7e:0b:f0:4e:ed:1c:a0:78:a1:31:84:4d:4b:
45:71:e8:e8:de:06:86:31:26:ea:8a:15:82:0f:04:78:ce:1f:
fb:c0:70:9f:51:56:04:e3:09:0b:12:3f:6c:e7:72:4a:94:12:
b9:b9:a6:b5:b9:33:2e:a4:c5:e1:c1:76:d8:75:af:1f:bb:8a:
2b:d2:71:72:7e:04:2c:d2:4d:04:7a:5f:76:53:e1:9f:cf:39:
fb:90:90:4b:b3:b7:a0:3e:a0:fe:46:0e:47:d6:74:ce:b0:6f:
f1:51:a1:24:93:2c:79:b8:b7:2e:8a:84:be:f9:4d:c7:b6:a5:
69:74:ae:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHA5sRL57x711SC63cso6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDkwOWQ3M2EyNzk4ODNlMjU3MTExZTQ4NGU3ZjA3OGI1
ZWM4ZmQwHhcNMjYwNjI5MDIwMTE5WhcNMjYwNjMwMDIwMTE5WjAzMTEwLwYDVQQD
Eyg0ZmI5NjE3ZTFkMzYwOGMyZjEyYTZiODBjZTM2N2E0NmVkMmQyNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/P4S/MvdUQj2e8beH4/B5Nz1BDm
QYzPvB5taAS+NTF7P3JinbmoC3t856bB3u1zWlOPDW83eASdXYI37cSDb3pww55G
pGYZf+VvBhtUpgNF5hhHhMZ6RBCSe1cZlF/ifhLbXKWfhyYSq6270WW8sqQ6Y9VC
y+0OA0NkaIxmu9gbz0j91iMm4WhpPUDau7mLZ3mG0RVYGcmvNUlyFjSKBuoxCwAm
hFCEhEyd3fElj6Pgfpzxw8aDHiQ0rrPz/DUTdJZPw1oGWpIhw5SiJAY+y51/QbkO
ie6TIcexdssZZq3IPTnVbdehXL0DeraBVGQVulI4Xe9Hj2l3IlB0n/NHPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+5YX4dNgjC8SprgM42ekbtLSVDMB8GA1UdIwQY
MBaAFCYJCdc6J5iD4lcRHkhOfweLXsj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWIt
NjU2MTMxN2NmMjYzLzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZmE4OGUtYTVkYi00OGU4LWIxNWItNjU2MTMxN2NmMjYz
LzEvSmdrSjF6b25tSVBpVnhFZVNFNV9CNHRleVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2Wyjbk2
fisDx12eJDhYt1nbcU1zhR5z9RacHs5Oyl7h895dHou5RfiZKWbtULpBx96aA8qM
k96bYuhuQMD85hDwE0L5lh/Vl/zoVuYNOcfQNVdNzNqfmSW/d+6/fSDJdRYxmLrx
gnL+AGO5jxf/p8lu+djKalbBv3IczHx99JPbT3t+C/BO7RygeKExhE1LRXHo6N4G
hjEm6ooVgg8EeM4f+8Bwn1FWBOMJCxI/bOdySpQSubmmtbkzLqTF4cF22HWvH7uK
K9Jxcn4ELNJNBHpfdlPhn885+5CQS7O3oD6g/kYOR9Z0zrBv8VGhJJMsebi3LoqE
vvlNx7alaXSuVw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:34 2026 by rpki-client