Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: aurx2wP+bvjr1lG8XaeJOLIsZhub9AdIKtPOgJwsn2I=
Subject key identifier: 9A:E0:A3:F3:C9:1D:B6:F2:86:45:07:D7:8C:2B:20:58:4C:DC:6C:31
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019E8D5BC4187B667F461A089232EE8AEAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 07CF
Signing time: Wed 03 Jun 2026 12:01:01 +0000
Manifest this update: Wed 03 Jun 2026 12:01:01 +0000
Manifest next update: Thu 04 Jun 2026 12:01:01 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: HoLiA36U5padDLFPBeVzLPAcxwi4rtErSH4Ew5y1GFs=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:c4:18:7b:66:7f:46:1a:08:92:32:ee:8a:ea:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jun 3 12:01:01 2026 GMT
Not After : Jun 4 12:01:01 2026 GMT
Subject: CN=9ae0a3f3c91db6f2864507d78c2b20584cdc6c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:30:d2:df:6f:34:f7:59:d8:d6:4c:2c:b0:
76:a5:a5:a7:74:b5:23:d1:43:1a:77:65:ca:30:cd:
52:b8:02:13:c5:cd:0b:60:e1:26:c3:be:e2:e5:3e:
eb:d7:d7:c1:38:4a:06:79:eb:87:44:cd:d7:b5:29:
86:7a:55:5b:26:46:c6:6c:8a:fd:ea:43:8d:6d:93:
4c:3c:85:16:7d:2b:29:9d:5a:b0:1c:e5:fd:1a:75:
b3:26:ff:a1:d4:ee:ab:6e:9a:7e:88:c0:eb:56:47:
16:4c:87:5d:43:39:f6:91:96:72:01:38:01:d3:25:
83:e4:54:91:16:44:fb:93:d8:70:6c:c7:e3:32:75:
8e:1d:71:37:16:4b:54:8d:a2:d7:77:ae:a2:53:57:
cb:26:62:f3:48:6d:a3:07:81:ad:51:21:8c:cc:87:
e4:5c:ed:24:8e:28:79:80:cb:16:8b:4f:57:38:7c:
f9:34:69:b5:46:af:79:34:9f:0b:18:cc:7a:1b:1c:
13:35:9b:a9:3b:4c:0b:4e:ff:99:b9:54:d8:af:fd:
49:d6:7e:cf:fd:d3:b3:59:d9:21:50:91:6f:6f:3d:
e6:8a:db:15:50:62:74:ec:1c:cc:72:56:71:c7:79:
e7:bb:9e:6a:bf:ba:23:39:d3:f4:28:8d:92:f7:c0:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E0:A3:F3:C9:1D:B6:F2:86:45:07:D7:8C:2B:20:58:4C:DC:6C:31
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ae:7e:3a:6a:1a:bd:18:ff:80:26:b0:68:0f:60:e3:c5:83:
19:86:81:aa:73:bd:70:1f:e8:f0:79:c4:d0:38:e6:d9:a1:49:
f5:f0:34:a7:a2:42:a2:76:2d:e7:42:1c:12:54:f9:e6:ef:77:
0b:c8:2f:d9:e0:dd:bf:a9:85:43:eb:91:e9:f5:dc:0c:91:a1:
b1:94:f9:1c:eb:ff:8b:3d:0c:9b:79:1b:e4:75:a4:6a:e0:5f:
13:61:11:43:26:85:0a:43:5b:25:25:13:88:28:67:c2:10:27:
7b:fd:d6:55:e5:ad:18:6a:cb:e1:47:76:e8:c3:b8:52:15:20:
0e:4c:58:01:53:46:f2:67:72:ed:8f:80:fa:b8:9c:3f:cf:87:
a3:59:52:04:50:51:56:51:ee:f7:93:ce:bb:80:ec:1f:13:14:
cb:29:ad:4e:55:44:9f:8d:db:a8:c1:b5:8c:a1:90:87:d8:35:
1d:2d:b6:29:69:3c:8e:c6:68:c4:52:f4:88:8e:27:c9:56:a0:
fa:fe:16:24:fb:17:23:85:01:07:4a:37:06:52:86:44:be:36:
e8:80:ad:8f:fc:02:66:8c:3e:19:26:85:06:7f:e5:b0:42:f7:
dd:2f:5d:37:14:44:52:2d:65:7e:b1:a9:6d:44:c2:b2:05:cc:
52:26:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:00:22 2026 by rpki-client