Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
File: jDath5xkWu6YrEqJ_IALmpdOlB8.mft (raw, json)
Hash identifier: 2GM9qi4hQ9sj1PJsp8eftDKIPaFilbd4FeJHp83YF78=
Subject key identifier: AA:9F:E7:08:D1:64:D1:7E:BB:62:74:87:5C:18:05:28:9F:6E:D2:AE
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 019E7D446A8C299EED142ABDF4C157F72D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
Manifest number: 1939
Signing time: Sun 31 May 2026 09:01:36 +0000
Manifest this update: Sun 31 May 2026 09:01:36 +0000
Manifest next update: Mon 01 Jun 2026 09:01:36 +0000
Files and hashes: 1: QF8uybwGJvFTI6zPZaEwMnyLJao.roa (hash: pGY0CFO2xra97YkiSL42DPsL5Et7lf+M4AGkIXR7mbM=)
2: jDath5xkWu6YrEqJ_IALmpdOlB8.crl (hash: tzSfhf77cgc6g7W2nrD6Ev9SP0x8HCoR02/ODWV26JY=)
3: sVQfoQUtytZsvgvmAfEIvvKahSg.roa (hash: bzMbXKVYhkySvKWCrR/MwrdgAwPkPzpxm3VIOmD3ao4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7d:44:6a:8c:29:9e:ed:14:2a:bd:f4:c1:57:f7:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: May 31 09:01:36 2026 GMT
Not After : Jun 1 09:01:36 2026 GMT
Subject: CN=aa9fe708d164d17ebb6274875c1805289f6ed2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:c1:33:ad:dc:f3:a5:55:39:82:71:f6:64:
1a:95:5e:fb:95:1b:75:02:75:7e:fc:18:cf:de:1a:
cc:68:62:4e:bb:44:48:ca:81:98:7e:30:08:fe:ce:
07:20:f7:46:43:09:c0:f9:aa:ff:e0:74:bf:04:9f:
ed:72:b5:00:51:92:d5:ae:ef:a8:4c:19:b9:a8:70:
30:13:c3:b8:f7:4a:cd:44:f3:c8:97:35:e5:29:83:
6b:99:d2:a9:2a:fd:7e:12:25:61:60:69:8b:c8:58:
bc:55:27:6a:7d:94:a7:4d:e7:ac:f1:87:dc:a9:64:
2d:f4:4a:17:1e:56:d4:c9:8b:52:27:7d:11:64:b6:
0c:c5:84:eb:bb:3b:7f:43:9f:d5:73:93:9b:1c:ea:
86:f4:0b:72:b3:1c:82:d0:23:de:ee:40:40:3f:d2:
0b:8d:79:6e:20:64:4a:ec:6f:e6:de:13:6d:20:ef:
57:63:b0:f8:95:d3:88:5f:7d:27:4a:a9:56:82:2f:
16:68:f5:24:dd:63:4d:5d:84:33:a4:2e:e3:4a:58:
24:06:4c:92:88:f2:b2:7d:87:be:b1:f4:37:61:5c:
b3:d1:ad:31:b3:a9:a4:51:76:30:de:96:00:17:3f:
0c:8a:1f:f7:95:77:e3:09:60:99:e3:03:5e:bd:e4:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:E7:08:D1:64:D1:7E:BB:62:74:87:5C:18:05:28:9F:6E:D2:AE
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f1:8e:d6:93:d4:2f:ab:54:f1:d1:0e:36:4b:44:ee:b2:86:
59:ea:57:54:16:9b:41:c5:e8:be:32:ba:96:f7:3a:cb:0a:1f:
80:ce:28:78:6a:83:bb:ef:ac:e6:16:a8:8c:dc:5b:fd:31:57:
b5:60:e4:b3:96:0b:ad:ee:c3:2e:4d:25:7b:70:4c:a0:80:39:
88:b3:14:cc:3b:99:a8:62:cb:20:63:c6:61:77:47:c9:9f:6d:
dc:be:aa:04:19:a6:be:a3:b0:2f:26:5d:18:2f:20:f9:92:1f:
7b:00:9b:db:59:21:5a:90:d8:79:b7:b4:ed:ee:db:8b:7a:7b:
19:57:82:44:da:2f:c1:52:9c:6d:2f:a2:c2:30:ec:e5:1f:06:
dd:88:8e:6f:f1:10:d5:fe:e1:03:0e:95:f1:42:b8:b7:65:4f:
e1:06:18:a4:a3:8b:1d:ed:d2:c1:dd:1c:ef:19:27:1a:87:f6:
59:95:c0:14:9f:4b:2a:37:1c:db:75:86:3e:0a:76:77:c1:af:
0b:76:22:8d:86:47:11:29:bc:59:d5:28:78:34:4a:ae:40:42:
2c:a8:52:6e:aa:30:75:8e:02:bf:c1:b8:60:b0:5f:c5:51:42:
cd:26:55:59:11:25:26:86:e6:28:ea:e3:da:33:32:d5:72:8e:
9f:66:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:57:04 2026 by rpki-client