Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File: rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier: SuKHCP6h1fBKNnwnmoNJBBhem0nzNAQoItA5fVzYSfM=
Subject key identifier: 4D:AE:34:3A:D8:B0:36:13:EE:0E:86:B9:59:42:89:FA:25:E7:B9:EB
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer: /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial: 019E6C506A8758D14D741810A43FBD50B6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number: 12AA
Signing time: Thu 28 May 2026 02:01:09 +0000
Manifest this update: Thu 28 May 2026 02:01:09 +0000
Manifest next update: Fri 29 May 2026 02:01:09 +0000
Files and hashes: 1: 2Kmu0cLG-L1kMQzDBhEI947wC7k.roa (hash: bDHuJC+CusB1PkTp9s9X+HAoLv5WHt/aI7X+YlNDFLc=)
2: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: TM7AtS1oaSPk+TJsoQQ+YXOIDv5CIqFyu4rgcWTIF2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6c:50:6a:87:58:d1:4d:74:18:10:a4:3f:bd:50:b6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Validity
Not Before: May 28 02:01:09 2026 GMT
Not After : May 29 02:01:09 2026 GMT
Subject: CN=4dae343ad8b03613ee0e86b9594289fa25e7b9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:72:88:32:bb:2c:56:93:c7:8b:1a:8d:e3:
df:69:d4:cd:4f:e9:9b:3a:ff:64:ba:94:1a:32:1b:
41:7c:c1:83:90:9e:12:ce:6b:7b:19:53:19:76:7d:
15:3d:88:7c:55:23:63:15:35:e7:3e:00:a7:80:b3:
21:80:65:ef:c3:78:9e:3a:73:16:59:f8:25:67:9f:
2f:5f:09:38:d7:11:8f:5e:54:3f:40:f9:09:5f:18:
de:48:af:d6:0a:78:0c:9a:64:ce:41:8e:53:19:86:
c7:08:0e:55:93:95:d6:f2:ab:27:d3:e8:99:2e:90:
d7:34:fd:fe:64:72:11:77:56:58:0a:1b:f1:b6:66:
f5:49:eb:2a:f3:16:2e:af:2a:86:50:9f:7c:38:90:
34:bf:8d:e7:0b:a8:ff:ed:4c:33:bc:99:55:d8:b3:
55:71:e3:8d:d7:73:50:14:82:9f:41:bd:bf:d0:93:
05:ba:11:87:44:da:93:2f:26:08:f8:7b:a8:21:2c:
87:26:34:b5:da:55:d9:0b:4c:3b:49:29:0d:04:ba:
00:6c:42:34:08:ed:b8:70:28:71:61:ce:0a:e2:40:
9c:f6:30:da:93:73:09:20:92:88:3d:98:23:d9:2e:
3a:9b:44:5b:57:fb:bf:a2:8d:9c:5c:9e:fb:aa:47:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AE:34:3A:D8:B0:36:13:EE:0E:86:B9:59:42:89:FA:25:E7:B9:EB
X509v3 Authority Key Identifier:
keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f8:15:18:76:e1:cf:f4:67:ee:62:fa:95:c9:95:db:65:f1:
b3:77:2c:1e:8e:a7:63:fc:84:47:cc:ea:b9:e6:00:82:d4:2c:
ed:b9:06:b5:4c:63:c2:a1:a7:a7:f0:e1:d7:df:9e:d8:f4:e7:
6f:a3:a2:d9:4c:9d:41:90:89:ea:7c:46:d7:41:15:80:e8:fa:
5c:ce:aa:1a:4a:d2:46:7f:d4:88:c9:e8:52:8c:8d:21:10:07:
0a:93:6e:1d:26:b2:67:ab:a0:d2:73:d6:56:11:36:10:43:60:
4f:a9:c1:e7:8a:46:a0:cf:b6:4e:79:d2:ee:f0:d1:64:a3:b1:
08:9b:da:1a:a4:59:d9:d5:fa:21:57:54:48:06:72:74:21:a6:
cf:9b:60:3d:1e:01:99:33:39:cc:32:84:e0:a1:c1:07:4b:73:
c4:1d:8e:78:4d:dd:48:94:e8:16:85:d7:5b:58:84:39:08:1b:
c1:51:9f:c9:aa:7a:10:b1:0f:57:23:aa:19:86:d9:66:18:3c:
32:e5:41:d1:fe:e7:30:ab:8d:aa:f1:c7:71:a8:50:25:46:96:
3c:34:17:20:e0:a3:4a:68:e1:e2:3c:bd:6a:d1:a0:74:cd:e0:
d0:bf:38:c3:6f:40:d3:3b:5b:33:09:7e:35:da:67:ca:35:9f:
e4:7c:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 10:15:24 2026 by rpki-client