Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
File: ji88c55RceTAJtqW5bUP_CZ9YG8.mft (raw, json)
Hash identifier: EZFu49vqZFKMgdnxd+u+wqedcIqQq4unjdDSWCsKrN8=
Subject key identifier: 5F:A7:DE:00:F8:5F:1C:D4:BC:47:3D:88:58:96:E2:5F:25:C6:60:01
Authority key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
Certificate issuer: /CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Certificate serial: 019EFBDDA6F4CA25B7E32CADBED19CEE5159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
Manifest number: 025B
Signing time: Wed 24 Jun 2026 23:01:07 +0000
Manifest this update: Wed 24 Jun 2026 23:01:07 +0000
Manifest next update: Thu 25 Jun 2026 23:01:07 +0000
Files and hashes: 1: VxvYbuSfG0RJoqSS3rt4zAO_Ka4.roa (hash: rSBhJErUYfpEXMJHn/N2TLGG8HzzTS+TuaT38co035w=)
2: YFA-d3A1ISpbmPqz1_8MtB9PJRo.asa (hash: k4l8UAsY//4Uv07kuP0cOg++GjLVEYXzfq64mBnia+Y=)
3: ji88c55RceTAJtqW5bUP_CZ9YG8.crl (hash: Z2xSei8U1viBiVunAXl3jZME2vC+qEEPIVQeJgSe0AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:dd:a6:f4:ca:25:b7:e3:2c:ad:be:d1:9c:ee:51:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f
Validity
Not Before: Jun 24 23:01:07 2026 GMT
Not After : Jun 25 23:01:07 2026 GMT
Subject: CN=5fa7de00f85f1cd4bc473d885896e25f25c66001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:10:1e:88:54:3c:13:09:d8:f8:2d:51:bc:
98:3f:d8:f6:eb:da:6c:60:52:c8:12:13:33:d0:b8:
da:25:e4:19:87:7f:1a:83:28:ab:21:13:55:f2:23:
3c:1d:f4:53:95:62:73:54:ca:6e:d0:dd:5f:ac:11:
bb:f0:49:91:f1:9f:4e:d2:74:60:f9:ea:4d:52:81:
32:05:5f:f2:a8:9b:5b:3f:5f:88:1e:c9:18:68:6a:
bf:e0:b1:72:ce:47:51:5b:39:23:12:79:7a:3a:30:
bd:18:6c:c1:57:67:14:d1:b6:1b:57:0d:4b:fc:19:
01:7e:89:ca:e8:22:ec:22:ef:01:ce:6e:65:29:5e:
b2:ac:5c:c1:68:aa:46:f6:ca:23:dd:32:47:03:8f:
63:d8:a7:bc:f4:06:0b:72:d1:3e:a7:02:cf:48:f7:
e5:b3:9a:90:5c:a1:87:6e:eb:87:25:3b:63:a0:51:
98:6c:a1:ad:78:5d:ba:b8:6c:ef:df:4c:7d:c8:e6:
d1:e1:d3:30:7b:86:68:f5:15:6d:e2:07:e2:a0:ae:
a5:bd:25:ad:61:76:53:2b:4c:7a:a2:0b:e4:be:42:
ef:b9:91:fe:e6:19:0f:28:b6:60:fa:15:b4:9e:d9:
a8:ec:ef:fa:e9:70:c8:8a:e6:00:b9:b6:77:17:e9:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:DE:00:F8:5F:1C:D4:BC:47:3D:88:58:96:E2:5F:25:C6:60:01
X509v3 Authority Key Identifier:
keyid:8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:24:65:1b:46:9d:a2:17:9d:9b:6a:de:5f:08:81:0e:c3:ab:
0c:d0:6b:cd:37:37:75:ad:5d:b0:11:8a:44:1d:28:de:ce:06:
59:3c:42:42:97:f5:13:97:95:29:23:ac:30:65:0c:70:66:93:
61:80:d1:4e:76:46:a8:91:6d:d1:fa:a1:bd:48:aa:3f:1b:b2:
49:ae:43:07:59:7b:db:be:bb:00:07:2b:69:d5:30:0b:2b:57:
b0:7d:42:ad:8b:14:3c:28:41:22:2c:14:58:78:93:44:1c:ed:
9d:98:99:a0:1c:6b:8e:05:bc:30:a7:54:a3:f4:50:06:7e:db:
b2:8c:6c:30:fc:b2:87:57:76:ae:a3:ba:8a:51:ff:30:1f:21:
96:74:72:1b:fe:67:e9:60:b5:2f:0e:79:d9:9c:89:b9:f0:b6:
3b:e2:c2:27:9a:42:59:89:33:a0:99:41:47:a2:60:d5:bd:f2:
e1:72:d2:1e:29:fb:d8:47:86:de:94:bb:8a:95:3e:09:19:fe:
a9:d8:73:4c:8c:e6:ee:11:60:34:80:ea:4b:d6:7d:e5:27:26:
08:9b:8b:08:2d:2e:a6:26:ec:0d:5c:ae:aa:1a:29:5b:bd:46:
36:bf:03:c2:4b:c1:7d:ab:7d:a6:f8:18:59:c0:a4:86:8e:c6:
19:74:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:18 2026 by rpki-client