Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: pqE6pVpnbfsUrEplFRGwCDkRwrPlZczPaAT7ftsY7BE=
Subject key identifier: 05:E4:81:1F:A8:11:E9:A5:20:94:C8:81:26:FB:83:10:9D:D1:75:EA
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 019EB6C5D411BD5FE45AB6B268F6178B9E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 0825
Signing time: Thu 11 Jun 2026 13:01:18 +0000
Manifest this update: Thu 11 Jun 2026 13:01:18 +0000
Manifest next update: Fri 12 Jun 2026 13:01:18 +0000
Files and hashes: 1: lYt4DFfegeY6kX95tBgC3KVg5q8.roa (hash: bEOFUEDLGBQ2u4IKEUROQygsHO4jTV8/hosvv/Vn9W0=)
2: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: 5c9CO0v8uWYdUtz1p6GuyWJpqJRRwrCu+4zx/uRcdGw=)
3: xBcE8nAEMqTD2iGlQACamVGhmNg.roa (hash: KhKp1WrOTdmHGTe+0SDFi9bJLf7uCYAcXngMYMhtk8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:d4:11:bd:5f:e4:5a:b6:b2:68:f6:17:8b:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jun 11 13:01:18 2026 GMT
Not After : Jun 12 13:01:18 2026 GMT
Subject: CN=05e4811fa811e9a52094c88126fb83109dd175ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:f5:18:e7:ea:51:d7:72:22:94:2b:6d:99:
5c:ad:96:29:a7:6d:86:e1:07:32:41:d7:b7:a8:0c:
8a:cd:f4:ec:1e:39:9a:60:78:3e:60:fb:35:9b:36:
b8:ba:6d:a2:63:7b:94:88:79:5b:0e:fa:a3:93:41:
a7:34:d9:68:08:c1:bc:bb:db:68:80:7c:27:09:d2:
ed:ed:c0:28:14:93:b9:a8:c5:f3:de:10:77:fd:f9:
33:85:41:f7:d1:6d:8d:ec:01:35:95:e4:ba:2c:1f:
a9:37:ee:75:d8:4b:45:36:24:ef:8e:0e:83:ed:1d:
8e:72:53:7a:9c:24:bc:37:ba:7b:55:ed:92:b6:2e:
f8:b7:77:3c:4a:68:ca:16:fa:87:ea:25:6c:81:ce:
e3:5e:5d:22:20:d3:1e:23:d9:4b:a2:d4:6f:ac:32:
a8:2e:98:20:5d:60:42:c3:c9:25:04:e0:48:fb:8d:
a2:f8:6e:54:20:43:f9:06:c0:a4:cb:9c:b8:44:1b:
8b:32:46:8e:67:de:4d:58:9a:f7:b2:32:8a:39:51:
12:f4:d9:e6:0f:be:5d:1a:85:7c:28:21:c9:ec:b9:
df:92:66:f9:c2:07:06:51:e7:49:2e:7a:ac:fc:d6:
c8:c8:12:21:79:60:7c:f8:8b:63:53:6e:6e:66:a7:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E4:81:1F:A8:11:E9:A5:20:94:C8:81:26:FB:83:10:9D:D1:75:EA
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:48:87:31:21:23:76:64:29:d7:55:18:dd:87:cc:21:f1:46:
de:7d:27:b5:f2:37:34:cf:3f:28:70:2a:dd:54:a6:32:63:31:
79:29:63:50:a0:8d:ae:a7:92:1f:8f:25:53:3f:2c:ec:c8:d5:
85:75:d2:32:7b:7a:21:0d:37:4a:87:9e:2c:af:89:2d:b3:35:
f1:94:90:1b:11:41:0b:23:b8:1f:8a:66:b3:c0:0f:56:e8:11:
45:38:2f:4c:cb:bc:1d:f5:2c:eb:d0:95:89:93:12:8c:9a:94:
15:02:0b:07:88:80:3c:fc:e0:64:90:18:c8:c5:32:b5:64:ae:
f7:8f:12:73:5d:af:1a:59:3a:b0:76:6c:73:1c:e6:38:fe:d4:
7a:13:48:a6:33:37:aa:8b:e3:00:66:70:13:c7:b6:8d:32:aa:
37:0f:85:4d:5d:ca:45:c6:b6:a4:35:56:59:b1:25:7c:93:8a:
02:32:6d:b0:42:41:be:ec:e3:30:34:74:60:6b:75:63:34:0f:
b4:eb:27:32:d3:b4:f6:78:1d:89:c1:ef:cd:bc:22:2c:24:db:
d8:6b:50:5b:c3:b0:80:16:c8:47:16:c7:a3:eb:9f:f2:2a:a2:
f6:e9:95:c2:d6:35:b4:51:38:1f:0b:1b:5e:40:24:a6:3b:b2:
9e:94:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:36 2026 by rpki-client