Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: lzYLQ+4qixrQ7OV6hRvvFXN3uy7vJkZmsDxRjs02nvo=
Subject key identifier: 90:10:66:FD:BA:F3:4F:48:50:CB:A1:39:32:48:23:69:49:23:31:5F
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019EE39E6D22600686ED7A6F66C85DABB785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 1971
Signing time: Sat 20 Jun 2026 06:01:11 +0000
Manifest this update: Sat 20 Jun 2026 06:01:11 +0000
Manifest next update: Sun 21 Jun 2026 06:01:11 +0000
Files and hashes: 1: 3pF8IhqwUxmlbr6s48L9oPema6M.roa (hash: dwMpIPqTUrQBexVcKq3XaTovbIKuATLe+PvFHdYURt8=)
2: BsDV5gEChvqJlOEUL1parquidSQ.roa (hash: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts=)
3: FhKAoau0JjukzC47olP9U847XGI.roa (hash: 3F1NNCOQC9ZPD91aPkyQm6i6mrnOfMArj9YcvlMVCtY=)
4: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: miFk5RvJ6nbXJXOO5JmT1Hwo+CHW1swTkTm1gssjg18=)
5: Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa (hash: y3g1ixBFrS6jt/5ELqww8HbbFtrwY3FruCtmtguhTkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9e:6d:22:60:06:86:ed:7a:6f:66:c8:5d:ab:b7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Jun 20 06:01:11 2026 GMT
Not After : Jun 21 06:01:11 2026 GMT
Subject: CN=901066fdbaf34f4850cba139324823694923315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:a8:61:01:1a:5a:a0:c3:e9:f8:83:e7:7d:
d2:d2:21:91:27:71:20:00:e2:5f:30:b5:d5:f4:9d:
b2:ce:b3:af:62:be:55:f2:bb:8b:f4:a6:03:f8:75:
52:ef:5a:f0:4f:5f:98:b1:5a:40:c2:dd:ef:d7:3f:
cd:8e:b1:07:36:cc:32:71:6a:b0:a7:d6:16:a5:c9:
09:b0:92:2b:8f:8d:bd:ff:94:2b:0f:a3:ec:50:2f:
5a:47:d7:59:0a:87:ee:0f:3b:ca:85:e7:c4:65:c1:
be:54:26:69:91:62:1c:25:a6:29:63:f1:5f:6e:aa:
de:c0:e0:e0:ec:46:ad:5c:87:49:51:34:cf:8e:e3:
d5:cf:e6:ca:a1:20:32:d5:f1:3c:7b:be:97:7d:8e:
e9:72:b9:1c:96:1b:cb:db:03:49:d7:5d:3f:9a:1f:
2c:35:d7:ed:1b:5a:64:d1:72:4a:78:e1:ca:a8:47:
ab:c2:2a:9b:da:55:f1:be:88:e0:52:15:95:ed:23:
3a:f3:7b:fc:78:b4:a0:bf:13:38:cf:56:19:4f:b1:
14:c4:bd:d6:ac:28:c5:0e:ee:bb:61:18:4a:0f:3e:
c4:c2:a3:17:67:97:e8:e1:d6:4f:e1:9c:53:7d:6b:
ba:be:2b:37:89:c3:33:a7:07:d0:6b:16:73:27:d1:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:10:66:FD:BA:F3:4F:48:50:CB:A1:39:32:48:23:69:49:23:31:5F
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:77:44:4c:d2:0b:ea:ed:a1:aa:f1:47:a2:8d:d9:f0:49:
76:06:92:57:28:77:b5:97:b6:42:5b:cf:bb:3d:d9:df:66:21:
2a:82:ee:03:82:0f:b1:c5:fc:d7:79:a2:90:aa:4e:76:9d:a6:
da:00:71:1d:37:9f:8a:c7:30:f5:99:76:2e:13:f2:e9:23:f0:
7e:41:e9:d9:09:26:34:59:2f:01:4a:c7:7a:cb:13:ee:b1:00:
39:61:79:94:7e:f1:2a:55:66:6d:18:22:5a:0e:ee:9a:c7:03:
1d:be:4a:c6:a3:70:aa:be:dc:16:6d:88:17:06:5d:37:81:7f:
5f:2d:c5:e7:de:99:a9:50:ce:4f:d8:df:cc:ae:df:26:3d:4e:
ca:7f:d7:b8:66:64:55:76:49:07:41:2d:b0:28:c9:db:c8:b9:
de:60:3b:4f:62:17:87:5d:c2:bc:44:e4:ac:e7:0f:e4:6a:ff:
0c:ab:5f:5b:ce:8c:1a:d5:1a:59:50:ec:4e:e3:ce:9c:ad:56:
32:94:fd:a6:f0:ef:c6:2f:2b:e1:10:f1:63:c1:85:75:59:f1:
83:48:28:6a:01:cf:1b:57:28:ae:8c:76:f7:0b:b2:55:0a:95:
de:df:d2:96:2e:68:1c:7a:90:f5:b3:fc:a9:22:18:38:4e:0b:
a9:02:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:21:18 2026 by rpki-client