Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: QxU+lCJqBfvH3jdTfkXfYL1bT+CWkQaPJMaB/F4wzCg=
Subject key identifier: 7A:EF:E2:FA:15:C7:9F:F4:68:19:D5:E7:BA:C4:CF:43:89:2C:DC:6A
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019EFCF27FD186ECFDA1759303A583309D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 197B
Signing time: Thu 25 Jun 2026 04:03:31 +0000
Manifest this update: Thu 25 Jun 2026 04:03:31 +0000
Manifest next update: Fri 26 Jun 2026 04:03:31 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: u2jSNWpRihRWDSecnDkWrPPhJNEMQ5krnOLG0Rcm8FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 04:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:7f:d1:86:ec:fd:a1:75:93:03:a5:83:30:9d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Jun 25 04:03:31 2026 GMT
Not After : Jun 26 04:03:31 2026 GMT
Subject: CN=7aefe2fa15c79ff46819d5e7bac4cf43892cdc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7b:e4:6e:ec:b6:c6:8d:b1:66:71:3b:72:d5:
b0:06:8e:53:81:66:3d:20:3c:27:de:ef:da:39:86:
b5:9c:86:0b:0c:1b:ec:ee:76:2b:fa:d1:28:99:db:
3c:6c:22:c2:45:36:e2:74:a2:88:96:ee:08:1b:74:
32:1f:4f:9c:d6:51:0f:15:5a:4e:9f:25:bf:ed:c9:
96:ef:3a:68:72:56:32:50:25:95:35:9e:a4:a9:46:
7f:53:42:63:2c:56:43:8c:7f:d5:81:ec:26:fb:6d:
16:d3:a9:60:fd:b4:f6:78:51:67:75:34:32:49:08:
4d:c9:97:30:a5:18:20:e5:42:2e:01:eb:65:ac:a5:
fb:7e:35:81:b3:94:5e:32:7e:bd:c8:33:02:69:6c:
d4:34:d8:2f:d8:7f:5b:f9:66:05:04:7c:62:56:60:
5b:af:c5:53:94:ec:de:05:7a:2a:ed:90:75:cb:9f:
97:e0:8b:fe:09:ea:82:10:a4:e6:62:92:98:ad:51:
8b:18:0a:cd:cf:ec:a2:63:b7:bb:70:55:0e:46:6f:
20:3d:09:a7:ab:fd:e5:d9:b4:8c:aa:d6:9c:11:9f:
e0:f6:6a:f9:c5:e2:1d:67:06:bb:79:48:2f:d2:87:
67:23:9b:3d:a4:a5:49:b1:88:40:7c:ee:32:f2:e5:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:E2:FA:15:C7:9F:F4:68:19:D5:E7:BA:C4:CF:43:89:2C:DC:6A
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:cb:2f:30:f2:2c:74:d7:20:4d:9c:bd:be:56:f2:25:c9:
f7:16:f8:bb:75:79:fc:a7:82:1a:e3:0a:35:90:76:72:7f:5d:
da:41:d5:9c:de:83:1a:cc:b2:22:1d:b4:5c:86:9c:5b:f4:69:
5d:0b:73:ed:e6:9c:4b:2b:37:e4:0f:8f:fe:18:bb:ee:02:11:
21:a3:d9:e6:20:12:84:ff:6c:97:e6:5e:0d:21:4c:cf:5f:fd:
99:9b:31:65:0e:2f:be:63:0d:82:ac:15:eb:7d:2c:74:af:73:
37:33:fa:67:8b:b5:4e:f5:87:25:c5:bb:f3:b6:cb:f9:e0:66:
12:19:ef:56:da:cf:25:21:b3:22:05:f0:b1:41:84:7e:c9:3a:
c9:3e:5a:0d:e7:e8:0d:c3:1c:1f:23:3b:a4:87:84:f1:48:7b:
8e:67:33:10:af:c1:0a:e1:14:8f:2e:7f:45:38:89:9f:7a:cc:
80:9d:8b:f2:0a:94:bb:c5:a7:10:94:c1:b6:66:f7:1a:55:74:
db:c2:bd:17:39:8b:9e:d8:9a:26:9b:93:e5:1b:04:b7:f2:47:
d9:a5:9a:3b:40:23:72:a3:8a:2b:e0:1c:b3:16:0e:33:19:2a:
86:df:5e:72:48:5d:1a:8d:e9:72:c9:43:1d:34:c2:d6:88:e0:
cb:6b:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 12:47:07 2026 by rpki-client