Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: EQbZJMzuWIGAxie9LM1988WdOC+gIozwMhhM+3m18qQ=
Subject key identifier: 6D:AF:E8:A0:A6:93:D0:0F:7B:AF:6E:22:7A:36:D2:AD:32:43:8E:BD
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019F13E6B3B14FE2DE0FFC365FC31106A830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1533
Signing time: Mon 29 Jun 2026 15:01:54 +0000
Manifest this update: Mon 29 Jun 2026 15:01:54 +0000
Manifest next update: Tue 30 Jun 2026 15:01:54 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: IS8RxPmguUUpmtuxvTSrUf74KdFJ+Mio9ktmVMJr5Jk=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e6:b3:b1:4f:e2:de:0f:fc:36:5f:c3:11:06:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jun 29 15:01:54 2026 GMT
Not After : Jun 30 15:01:54 2026 GMT
Subject: CN=6dafe8a0a693d00f7baf6e227a36d2ad32438ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:1c:f4:59:23:89:03:ef:bc:e3:8e:29:cc:
49:0b:03:0a:7e:03:5f:c2:77:52:54:c6:81:16:d9:
48:41:f9:c8:0e:f4:e4:68:e3:77:97:75:42:67:f8:
a3:3b:d9:cf:ff:9a:3b:d3:23:8d:9f:85:f4:74:08:
3d:05:f7:4a:64:34:60:89:2f:09:af:84:12:a0:42:
8f:38:d9:44:36:c5:29:fd:21:a6:3d:39:10:bc:d1:
e8:0b:3f:ac:a7:35:11:18:8a:0e:8c:34:b9:f1:ff:
b0:ff:0b:c9:4e:eb:86:6b:45:58:20:b3:67:b4:ff:
56:fa:9f:10:92:00:74:d6:a1:46:eb:83:d9:93:cb:
16:84:eb:8a:10:45:3b:a2:94:45:c4:5d:f0:40:e4:
96:41:17:ba:22:c4:e4:19:8c:14:c1:ec:55:99:4f:
70:6c:d2:d5:dc:59:42:af:e8:90:90:5c:80:b1:16:
f0:81:e7:6c:cb:65:d5:3a:d5:db:fe:0b:3a:33:3e:
cd:ee:55:fc:d7:7c:fc:28:45:b0:da:4a:cc:4f:d7:
2d:42:df:b9:a7:74:f7:3e:65:5c:d7:bf:40:74:85:
1a:9f:aa:f2:ad:87:83:5f:24:50:ce:b9:e9:af:4e:
83:23:bd:c5:b2:84:88:b7:69:87:55:6d:a6:82:c1:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AF:E8:A0:A6:93:D0:0F:7B:AF:6E:22:7A:36:D2:AD:32:43:8E:BD
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e1:be:c6:8d:fc:07:a6:14:4a:7c:1b:0f:d3:db:1f:b3:e1:
92:4d:9e:76:00:0a:b0:e1:47:1b:1b:ed:59:19:6b:b6:f0:a5:
f1:e9:ab:ce:95:d9:75:92:47:74:61:c2:c6:33:94:2a:06:01:
c9:d4:6c:2f:dc:de:00:50:ad:3c:db:08:78:04:1b:b5:85:e8:
1f:b5:a5:e4:93:0f:55:54:e8:e8:00:7e:50:30:b7:8b:ea:de:
c8:f5:c1:75:e2:8c:6b:94:01:30:d4:1c:d0:2e:7c:4b:7f:15:
e3:e1:a4:8c:2a:fe:cf:6a:ec:a7:7d:3c:f9:2d:9a:a4:b6:fb:
bb:39:e0:a8:c1:45:fa:05:fa:b3:eb:b5:fc:d1:6e:fe:b8:25:
0b:f7:cb:35:48:fa:96:4c:ac:0e:38:72:6a:81:6a:8f:ed:41:
a1:50:a5:b5:2d:4f:c4:c5:04:f3:7f:77:e8:2f:5c:46:4c:9f:
34:f9:cf:ed:e9:e1:35:f6:5a:f7:1e:3f:6c:b2:d0:f3:a1:29:
2c:58:81:14:4c:af:1c:d0:13:68:71:32:f2:78:11:32:de:c1:
9d:f2:9d:f3:e0:e0:6a:90:c7:f2:c4:ce:a9:f6:64:60:48:b8:
9f:9e:0f:ce:40:85:a8:78:24:22:b0:de:c0:5d:e7:7e:65:42:
28:22:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 01:45:13 2026 by rpki-client