Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File: cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier: D42BKufwMuLS6uw/fH44wVqr2nTQntnmDq4jvFek+Y8=
Subject key identifier: 61:E5:E1:B1:DE:27:63:25:5E:42:86:0C:55:95:56:39:86:8A:34:A9
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer: /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial: 019EB98FE568561D9C0879B7DE068FAC662F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number: 0D9A
Signing time: Fri 12 Jun 2026 02:01:15 +0000
Manifest this update: Fri 12 Jun 2026 02:01:15 +0000
Manifest next update: Sat 13 Jun 2026 02:01:15 +0000
Files and hashes: 1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: tJkvRS0QoCeTAJq+J0isWX+SItGixxxdbT6JkhxTHuI=)
2: xyOkTXVPZjz9JAhos1QM2vsm3W4.roa (hash: QXjoMKDwi6j1vpZqYsBGzsQGgoo9dIBXi5WlfEHsxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:e5:68:56:1d:9c:08:79:b7:de:06:8f:ac:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Validity
Not Before: Jun 12 02:01:15 2026 GMT
Not After : Jun 13 02:01:15 2026 GMT
Subject: CN=61e5e1b1de2763255e42860c55955639868a34a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:e5:9d:93:80:17:9d:f8:1d:ac:bc:48:7a:
45:3f:4b:04:4e:dc:01:cc:36:2c:62:06:8f:55:5e:
ba:74:cc:28:65:4d:a5:fe:e8:81:a0:72:46:17:26:
f8:a9:44:6e:d9:cf:4a:e5:12:95:52:5c:9f:14:8c:
f8:36:54:88:12:6b:9c:c0:16:8e:1c:fb:2f:9f:f7:
62:f9:5f:2b:66:bb:aa:ab:ca:70:15:e0:ee:be:da:
20:3c:f3:ac:fe:8f:47:27:c4:b7:2f:17:de:44:df:
0f:44:8e:10:36:2c:43:5b:bf:06:b3:57:f4:c9:0c:
51:cc:cf:58:f1:bf:08:ca:ac:b6:1c:83:8d:60:0e:
2e:28:18:07:e5:f0:06:ac:7f:65:16:67:57:05:f0:
28:f5:8a:f3:9e:b4:a7:f1:ab:33:fe:61:a2:63:c3:
4c:05:2c:a7:3e:69:6b:6a:d3:79:ee:bd:3c:24:ac:
78:19:6d:0e:59:8a:f8:0b:7f:11:24:67:26:af:2a:
a4:96:50:43:26:1b:7b:6e:1a:b9:78:6c:c1:0a:38:
68:51:1d:9e:cc:27:65:5e:b5:42:89:0d:2f:ed:fe:
a7:af:fb:90:95:68:10:da:5c:97:33:34:7a:60:ee:
4b:2a:5d:7e:a2:27:c1:58:d6:8f:39:a5:06:9b:08:
7c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E5:E1:B1:DE:27:63:25:5E:42:86:0C:55:95:56:39:86:8A:34:A9
X509v3 Authority Key Identifier:
keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fd:1e:f6:f8:23:95:f2:4f:d5:21:c1:55:bc:56:ea:27:38:
5e:4c:e8:92:22:48:ad:32:6d:ae:9c:c3:c0:53:a5:b9:87:46:
3d:63:5f:f6:ff:94:5f:3d:80:35:31:38:12:25:4c:ae:8e:ec:
7e:8b:39:da:88:64:8a:eb:b8:ca:95:89:6f:21:71:f2:31:bd:
43:3f:0a:9f:ca:19:c4:e1:b0:3c:37:a0:e9:3f:29:7e:f2:8a:
7d:84:05:43:7f:72:49:ed:61:46:b7:48:33:4c:86:25:8e:6f:
93:64:c6:6a:3b:9b:50:59:1b:49:ed:7e:7a:fe:c6:53:6e:ce:
c5:2b:17:f6:ed:1c:cc:b0:04:68:1c:43:91:3c:8d:3c:ce:d5:
20:ab:c4:23:29:1c:8f:e5:e9:f0:7f:c0:5f:71:19:48:fb:d3:
52:b7:8f:36:35:57:1c:66:9d:a7:42:b7:d5:99:aa:a6:8a:fb:
01:85:10:af:0b:00:cc:81:42:76:9c:9f:67:9d:b3:ba:25:e6:
8d:86:5e:30:86:6e:92:b9:ad:e6:e3:04:39:7a:70:af:48:5b:
85:76:7d:3c:29:24:e0:87:e3:e7:28:4b:76:88:43:61:af:ba:
7d:eb:4a:1e:83:f5:bf:83:3d:6e:7b:75:ac:99:59:3f:74:ef:
9b:de:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:45 2026 by rpki-client