Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: +vm5/p0zSP8vh+aZgSl5z5961BNrJz146uxhUIuzyqc=
Subject key identifier: DA:EA:8A:D4:49:89:DD:08:D1:3C:10:0C:AA:7D:50:5B:05:11:53:7B
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 019EB7A180EF82F8A1A181F2373E909A60B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 1041
Signing time: Thu 11 Jun 2026 17:01:15 +0000
Manifest this update: Thu 11 Jun 2026 17:01:15 +0000
Manifest next update: Fri 12 Jun 2026 17:01:15 +0000
Files and hashes: 1: 1fpQlBlZNTYlkF-qEKj33K1FJqM.roa (hash: S56U8pRP1AVtpcAW66WhCd3vXonP456VUW1c22wHBzM=)
2: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: B5eX2vKSbHEqszm/FQT4BRUDvQbErTqhM+S7OMoB2kE=)
3: Y4zsoHDrVMPcu-R8PV2UYMlFVJs.roa (hash: /HK4f/kDKpNIzHK5rblbzw+upNbRr54CVkE3fI0aAtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:80:ef:82:f8:a1:a1:81:f2:37:3e:90:9a:60:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Jun 11 17:01:15 2026 GMT
Not After : Jun 12 17:01:15 2026 GMT
Subject: CN=daea8ad44989dd08d13c100caa7d505b0511537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:08:71:54:f1:21:e9:69:70:45:5e:60:a5:
0b:65:1b:50:24:3f:be:17:4c:ea:82:f7:45:15:16:
c3:fb:f3:73:97:0e:35:3a:30:13:a6:0f:74:74:82:
dc:62:05:25:79:16:04:b1:48:9b:43:fb:f0:67:26:
b7:03:b2:67:86:bb:fd:12:dd:5a:03:d6:4a:e1:12:
3d:b4:fe:b3:48:2f:9a:22:10:fe:9b:28:99:e0:6d:
99:08:9c:29:02:92:95:cc:49:f1:c1:3a:90:3c:64:
83:9b:10:90:b3:36:87:96:7f:29:08:a8:0f:a4:47:
24:2f:42:99:54:77:22:27:5e:62:55:d2:16:ce:79:
1c:30:ae:41:bf:4f:93:94:8f:59:39:05:2b:8f:4e:
d3:d3:70:80:27:b2:ed:45:3f:3e:fe:1a:ab:d6:2a:
b4:f2:f7:e7:e8:d5:22:55:b1:9b:f3:63:8b:b5:f8:
68:33:e0:ae:ac:86:c0:77:f0:22:db:fb:b6:b2:86:
9f:dc:09:0e:4b:c3:47:b3:dc:ab:e9:53:ea:3f:00:
30:2d:21:e4:1c:1c:68:1b:1e:78:a9:09:38:ef:5c:
61:c5:bb:b5:8e:de:39:f0:ef:3e:34:13:1f:ae:26:
b1:e2:1d:c7:81:2b:88:14:7e:70:b2:7c:2e:38:bb:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:8A:D4:49:89:DD:08:D1:3C:10:0C:AA:7D:50:5B:05:11:53:7B
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9f:d5:d5:fc:2f:38:61:38:29:92:88:97:4f:f7:3f:ce:d3:
1f:57:84:b1:3e:51:c4:da:c6:60:56:fa:9e:25:e4:e7:58:15:
8c:2c:7e:c1:8b:4d:a3:53:cd:d4:aa:ee:d6:a8:7f:30:23:d2:
c7:e6:ac:ce:29:2f:9e:e2:23:25:75:34:79:00:25:29:1f:d6:
5c:b6:b1:59:c9:60:41:b8:23:d6:4a:6f:d4:6d:52:dc:45:98:
c4:ef:e3:99:a0:60:40:26:0e:03:9e:73:8f:fa:6c:d3:14:af:
01:1d:7c:b4:05:ac:bd:6a:32:57:de:32:ca:49:fc:35:74:1c:
18:bc:42:b3:3b:7b:c7:9a:fa:9f:73:d4:2d:54:69:fb:72:8e:
77:68:f7:88:1e:01:79:87:2b:28:f1:c9:2c:30:2f:e4:7f:46:
03:05:be:87:7c:8f:c6:ac:1b:07:ec:15:a7:36:a5:27:c7:a4:
9e:a5:99:ed:b1:59:11:73:76:57:52:cf:3b:13:ac:7c:eb:a6:
b1:5a:b4:f3:12:74:f8:69:09:48:d0:36:0d:c6:6c:8e:e5:1a:
08:a0:49:8b:0a:25:f1:61:a0:12:0d:b5:05:5c:cf:8f:50:da:
3e:f8:da:b9:23:14:c9:4b:e8:63:a1:81:81:c8:b9:77:91:51:
15:79:db:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oYDvgvihoYHyNz6QmmCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTM2N2Q4ZGVjZjdkNjI2ZTU0NzgwZjgwZTU3MzYwZDJj
MDc4Y2QwHhcNMjYwNjExMTcwMTE1WhcNMjYwNjEyMTcwMTE1WjAzMTEwLwYDVQQD
EyhkYWVhOGFkNDQ5ODlkZDA4ZDEzYzEwMGNhYTdkNTA1YjA1MTE1MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2gIcVTxIelpcEVeYKULZRtQJD++
F0zqgvdFFRbD+/Nzlw41OjATpg90dILcYgUleRYEsUibQ/vwZya3A7Jnhrv9Et1a
A9ZK4RI9tP6zSC+aIhD+myiZ4G2ZCJwpApKVzEnxwTqQPGSDmxCQszaHln8pCKgP
pEckL0KZVHciJ15iVdIWznkcMK5Bv0+TlI9ZOQUrj07T03CAJ7LtRT8+/hqr1iq0
8vfn6NUiVbGb82OLtfhoM+CurIbAd/Ai2/u2soaf3AkOS8NHs9yr6VPqPwAwLSHk
HBxoGx54qQk471xhxbu1jt458O8+NBMfriax4h3HgSuIFH5wsnwuOLvWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrqitRJid0I0TwQDKp9UFsFEVN7MB8GA1UdIwQY
MBaAFCfjZ9jez31iblR4D4Dlc2DSwHjNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgt
YTQzNGZkMDg4ZmQwLzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81ZjA1NzktMGVmYS00MjJiLWFhNjgtYTQzNGZkMDg4ZmQw
LzEvSi1ObjJON1BmV0p1VkhnUGdPVnpZTkxBZU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEp/V1fwv
OGE4KZKIl0/3P87TH1eEsT5RxNrGYFb6niXk51gVjCx+wYtNo1PN1Kru1qh/MCPS
x+aszikvnuIjJXU0eQAlKR/WXLaxWclgQbgj1kpv1G1S3EWYxO/jmaBgQCYOA55z
j/ps0xSvAR18tAWsvWoyV94yykn8NXQcGLxCszt7x5r6n3PULVRp+3KOd2j3iB4B
eYcrKPHJLDAv5H9GAwW+h3yPxqwbB+wVpzalJ8eknqWZ7bFZEXN2V1LPOxOsfOum
sVq08xJ0+GkJSNA2DcZsjuUaCKBJiwol8WGgEg21BVzPj1DaPvjauSMUyUvoY6GB
gci5d5FRFXnbLA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:19 2026 by rpki-client