Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
File: jAfs12ZszvkegvfsvOC6KFM2-0U.mft (raw, json)
Hash identifier: 032WvdeocEhultQqKDgcY90+GvX9FC8zZCrxucqiQp0=
Subject key identifier: E3:E6:4E:37:66:05:7A:A9:72:8F:50:7F:21:9A:43:BE:70:79:68:3A
Authority key identifier: 8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
Certificate issuer: /CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Certificate serial: 019EB9FD5AC9AEE548D3BDB10B7A5728F4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
Manifest number: 15F1
Signing time: Fri 12 Jun 2026 04:00:49 +0000
Manifest this update: Fri 12 Jun 2026 04:00:49 +0000
Manifest next update: Sat 13 Jun 2026 04:00:49 +0000
Files and hashes: 1: 4LLVtuowBMlt-elcg04sJ4SEZ4U.roa (hash: 9EzE57I9U9jlMNZnR2WQt4Ucc7HAdhe5JFz8hozLIH0=)
2: jAfs12ZszvkegvfsvOC6KFM2-0U.crl (hash: FKgBkc/EXUHzjG7dugUlOjeFTvQSzI71XXDpUvrDd7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:5a:c9:ae:e5:48:d3:bd:b1:0b:7a:57:28:f4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c07ecd7666ccef91e82f7ecbce0ba285336fb45
Validity
Not Before: Jun 12 04:00:49 2026 GMT
Not After : Jun 13 04:00:49 2026 GMT
Subject: CN=e3e64e3766057aa9728f507f219a43be7079683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:0e:44:fd:b1:86:02:aa:16:7f:f0:25:01:
16:d4:87:8a:a9:32:87:8a:44:bd:d0:8d:5b:d2:58:
ad:8b:51:1a:7d:27:b8:70:7d:03:c8:78:fd:b8:dc:
c5:87:36:70:f4:f0:0d:b4:c3:d1:c5:56:76:6b:f1:
c0:ca:de:70:2e:f2:81:36:75:5f:42:85:fa:59:01:
95:4b:ad:cd:fe:4a:c1:b8:00:f5:48:f5:e9:51:23:
ad:f5:87:0e:95:45:a5:13:30:79:ef:14:8c:94:c8:
76:18:80:76:c1:12:9f:cd:3d:50:a6:cf:ca:cf:cc:
b7:3e:c1:16:dd:56:ec:d4:e8:d3:7d:a1:1e:4a:06:
71:e7:e2:29:fe:b5:0c:ff:02:14:e3:0a:57:6c:06:
27:e2:53:c8:60:0d:c4:a8:62:65:77:cc:61:e9:9b:
57:35:77:82:0b:9f:6a:42:42:91:49:0a:43:8e:e1:
01:06:17:47:f1:ba:eb:c0:aa:4a:86:b5:e6:31:35:
72:74:05:9d:ff:bb:b0:68:18:59:2b:6e:0d:52:1a:
f7:a0:e6:ab:51:4a:b0:c3:d0:2c:28:48:47:61:a0:
a7:79:ae:41:88:ca:73:bc:bf:1f:7b:77:e0:ec:18:
ce:28:3f:e7:2a:f9:53:d8:e3:26:29:db:10:b5:53:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E6:4E:37:66:05:7A:A9:72:8F:50:7F:21:9A:43:BE:70:79:68:3A
X509v3 Authority Key Identifier:
keyid:8C:07:EC:D7:66:6C:CE:F9:1E:82:F7:EC:BC:E0:BA:28:53:36:FB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAfs12ZszvkegvfsvOC6KFM2-0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/848406-5826-4dbc-b93e-5d27c75aae6f/1/jAfs12ZszvkegvfsvOC6KFM2-0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:67:fd:0e:84:6f:78:71:5a:20:4a:6b:ad:47:9b:73:1b:6c:
4c:cd:47:18:ba:d7:08:a1:54:09:2b:00:2a:a5:ab:b5:5f:b4:
3b:b0:64:03:b6:86:4d:31:ec:1b:53:e0:db:fb:fa:22:cc:79:
e5:9d:10:d5:93:07:81:79:da:02:1a:da:b7:68:35:b1:86:b6:
ef:cb:db:50:d6:a4:58:bc:8a:da:b2:0d:33:d8:99:1c:f6:aa:
a4:49:12:51:ca:cf:42:cf:5a:11:48:4c:86:07:24:c3:01:d8:
60:7a:73:11:76:3e:40:63:1c:83:b7:73:64:b8:fb:a8:e6:8c:
5b:0b:30:24:fe:0f:80:59:20:e5:dd:db:5e:10:dc:96:b6:12:
89:8c:59:d9:fa:ad:5f:7e:16:39:18:29:e2:e1:02:e2:d8:2d:
cf:af:61:94:72:82:40:42:2c:02:12:55:a4:ea:94:c9:6f:38:
5a:61:3c:61:ea:62:8f:a0:bc:85:d4:02:99:28:f5:7f:72:d9:
4d:70:10:b5:7c:7d:99:a9:c4:8e:56:38:27:c7:56:ae:63:77:
5a:d4:a6:4b:ce:a6:37:69:66:9c:19:a8:73:91:92:77:e4:77:
2a:29:6d:d0:79:97:45:63:cf:40:09:f0:b1:9f:49:f1:22:08:
ed:e1:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:32 2026 by rpki-client