Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: rHZFssY0q8zkFa5RoSF6eVlbg4Q8DGfU1AlkISDmmE0=
Subject key identifier: 4A:C1:65:4D:55:8E:96:1E:D4:15:07:CF:8B:EF:BE:5A:50:30:EB:0A
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019EF801349EB78D7178C8A03AE3BC475D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 1976
Signing time: Wed 24 Jun 2026 05:01:28 +0000
Manifest this update: Wed 24 Jun 2026 05:01:28 +0000
Manifest next update: Thu 25 Jun 2026 05:01:28 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: aF3CoYVSRFbbkWjJExy81qWlJHRVSgLIDLEge6v0LLk=)
2: psZNmPYVql98KxRd5_J9v8TyFDo.roa (hash: 83pmxITkPLNCEyrAljxQNeti1DcWIEULoY0Jkfv3Y08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:01:34:9e:b7:8d:71:78:c8:a0:3a:e3:bc:47:5d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Jun 24 05:01:28 2026 GMT
Not After : Jun 25 05:01:28 2026 GMT
Subject: CN=4ac1654d558e961ed41507cf8befbe5a5030eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:0f:83:7a:b7:dc:eb:fa:67:3d:01:4d:e5:
b4:93:95:21:86:a9:4c:65:8e:e2:f6:2e:e2:c9:ac:
37:f8:3c:ee:e2:09:75:e1:3a:e0:62:81:1c:a2:aa:
1f:58:80:a4:81:87:d5:55:26:97:b4:27:1a:00:f3:
fc:74:63:7a:72:d2:eb:9b:39:65:9a:46:75:35:49:
33:17:98:d8:0e:4d:4c:fc:ad:45:05:09:64:86:98:
9d:aa:ab:03:07:5b:23:96:a7:78:6c:a5:a3:ab:e3:
00:01:50:6a:45:47:34:72:5f:e6:5a:49:77:9a:d6:
60:fb:bb:0c:5d:d7:61:a0:6f:87:a2:11:05:ac:af:
1b:cd:8a:38:2f:c0:9d:b5:ca:cc:d6:50:68:d5:c8:
68:ec:33:4b:f3:a6:70:bb:c2:f4:54:aa:f2:b6:61:
e3:73:d7:5c:5b:73:39:2b:4e:19:ed:43:ea:4f:c4:
32:b8:36:48:34:98:65:a6:74:f9:bd:95:bc:44:48:
5f:d4:26:ea:f4:5d:2b:0e:ee:d9:3f:e8:21:53:d5:
38:9a:53:86:d9:92:03:f1:d1:d0:d5:05:b4:75:0e:
a0:72:9b:56:a7:a8:2d:16:84:b1:ab:a1:c7:c7:4f:
5d:e7:92:26:38:77:9d:2b:9c:b6:79:a0:28:70:a7:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C1:65:4D:55:8E:96:1E:D4:15:07:CF:8B:EF:BE:5A:50:30:EB:0A
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:56:14:04:e7:69:36:7b:e3:12:99:79:5b:1e:66:eb:5f:28:
c6:87:87:b3:a5:56:b8:21:7d:7e:ad:17:4c:a2:c1:48:fe:63:
60:83:f2:0d:4b:c3:53:32:b9:16:4f:fe:86:56:3e:74:4e:92:
2b:1b:69:3d:df:18:e0:c1:f7:dd:4f:06:b7:99:24:db:e7:d1:
b8:56:66:ae:d3:c5:22:cf:6c:36:1c:e2:47:49:83:f2:f8:7e:
84:3f:71:9e:7f:df:0e:c6:c2:5e:44:a3:da:b1:93:f5:41:40:
d9:1c:54:ed:4c:7c:f1:18:a3:91:d0:6f:b1:f7:72:b8:81:93:
9f:b3:d6:e2:c5:21:3e:eb:5e:55:9c:bb:14:dd:49:10:c6:47:
ca:bf:06:18:9b:cf:d1:da:36:1e:93:42:3b:cf:ca:ec:1a:5e:
7f:d4:3c:9b:d9:dd:ef:f2:22:b5:47:34:8c:92:dd:e1:d5:60:
4d:30:82:1c:63:16:94:60:12:16:9a:10:07:82:56:b6:04:35:
2e:01:4a:21:0a:32:6a:b9:cb:74:57:30:5e:fb:c1:a3:c7:f5:
f7:cc:ab:e1:2d:2f:1a:98:64:44:89:63:69:a5:86:71:11:44:
85:d9:54:74:7f:ac:aa:db:2a:ae:97:cc:62:dd:14:f7:2d:40:
00:5a:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:29:59 2026 by rpki-client