Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
File: jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft (raw, json)
Hash identifier: YuzN1mrSpO0L+6M1L5GBXlW3Us2tdyS8M+L6foZJGk0=
Subject key identifier: 4E:61:3C:4A:47:1C:2B:F9:4E:E1:A2:94:C0:2F:7A:A3:D2:82:B8:EF
Authority key identifier: 8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
Certificate issuer: /CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Certificate serial: 019EB7A122AFE0811EC8B47676C3C6AA9F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
Manifest number: 12A9
Signing time: Thu 11 Jun 2026 17:00:51 +0000
Manifest this update: Thu 11 Jun 2026 17:00:51 +0000
Manifest next update: Fri 12 Jun 2026 17:00:51 +0000
Files and hashes: 1: 7JyQ0DDZ_uriVr1_R-qqSbjcNCI.roa (hash: Z91Be9fMnlCk9EcCA8UjSbIMFHHE/PnW3Mwi2btNcCM=)
2: jIeFhJZd4hnKN5qOPFYJyLelG2U.roa (hash: FLT9m7JPrJS5aMnwU7tXsALsvI1wqlNumVY/Ni2QnbM=)
3: jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl (hash: iVATOCs1xMwhPU8/ywKTUFOBYNG30ibatWbgRtKoyR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:22:af:e0:81:1e:c8:b4:76:76:c3:c6:aa:9f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb2f81b8c47c2b588f451d4037c6837870b397f
Validity
Not Before: Jun 11 17:00:51 2026 GMT
Not After : Jun 12 17:00:51 2026 GMT
Subject: CN=4e613c4a471c2bf94ee1a294c02f7aa3d282b8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:27:67:04:60:81:7a:63:d9:31:c4:e1:0c:
f9:d3:a0:65:1a:28:58:46:fe:02:69:88:ba:89:63:
f7:bc:41:3f:97:a2:f3:55:26:d1:53:42:73:17:8a:
d9:39:29:53:e0:23:03:ed:c9:3c:f2:7e:30:e7:f7:
da:ec:f1:48:14:1a:af:a8:cc:47:2c:12:a1:ef:e5:
68:7a:d0:56:9e:87:fc:c0:3c:a2:e9:3d:66:e7:ce:
61:d0:59:5b:78:0a:da:1c:39:c3:34:24:b8:74:e9:
74:4b:ab:26:4a:41:2e:da:e1:53:ac:c5:be:87:7d:
e4:da:4d:4b:4e:8a:e5:15:ee:e9:c3:4d:bf:67:dc:
ce:e2:db:5e:50:30:44:06:84:c2:29:0f:94:90:31:
0c:74:ee:bb:40:fd:de:88:99:93:2b:22:c8:8f:29:
d0:3e:46:26:73:e1:17:58:b9:26:b3:3a:e0:85:e3:
7b:2a:db:fe:da:dc:94:3b:0a:ea:87:e3:83:a4:93:
dc:5d:ad:6e:47:8a:8e:22:06:b4:ae:3c:7c:6c:38:
c2:c6:15:b5:f5:a8:a4:0a:67:f7:6c:9e:16:2c:54:
c4:b9:93:87:37:86:73:af:c5:52:de:46:df:7c:cd:
f0:ed:f7:fd:ea:27:6c:8e:af:18:ab:45:35:48:e4:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:3C:4A:47:1C:2B:F9:4E:E1:A2:94:C0:2F:7A:A3:D2:82:B8:EF
X509v3 Authority Key Identifier:
keyid:8E:B2:F8:1B:8C:47:C2:B5:88:F4:51:D4:03:7C:68:37:87:0B:39:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrL4G4xHwrWI9FHUA3xoN4cLOX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9e1f46-802b-49d1-91b8-483fc90708d5/1/jrL4G4xHwrWI9FHUA3xoN4cLOX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3a:4c:27:20:a8:d8:46:fb:31:f6:d6:90:65:e0:20:a5:40:
52:2d:59:70:02:2f:60:f7:89:5c:e4:25:ac:c2:3f:33:67:45:
34:ba:56:91:50:89:9b:e2:67:91:3b:46:7e:16:1f:31:d5:e7:
00:7e:24:1c:df:b3:0e:e3:b3:87:25:f0:d0:56:c1:11:00:31:
e2:03:a0:41:8c:42:cf:f9:31:03:b0:8a:2a:c6:92:7d:df:fd:
45:b9:bc:ce:fa:6b:8e:3d:c6:ca:8b:cb:bb:b0:e8:9b:b3:e7:
ac:3d:04:10:30:e5:0a:26:9e:dd:fc:18:9c:50:72:e0:5a:64:
0f:11:03:a6:5e:66:98:9b:cd:2b:5a:15:46:67:8a:cb:12:fe:
8f:7d:16:65:9c:3d:e1:b7:ca:e7:a3:68:7a:6c:3c:e8:75:26:
a9:53:a9:1b:af:74:98:ac:0f:88:4a:63:27:f3:c0:a5:29:e4:
ef:8a:d1:4a:2c:a3:c4:25:d2:e8:08:0a:25:ac:de:c6:ec:67:
c3:59:a9:2b:d6:96:fe:ad:ad:b1:e5:c1:f6:3e:ae:8d:38:3e:
0d:9c:2e:20:fb:23:c1:49:7c:53:3a:32:93:5b:66:29:26:11:
f8:59:07:a1:30:45:83:58:5b:cc:18:26:7b:2e:7a:96:81:bc:
dc:88:81:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:28:38 2026 by rpki-client