Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: /OKQgKO/wVlNAhX3hPcYVRqOGWcUKOKAGnrjZziSYS0=
Subject key identifier: 61:EF:7E:A2:21:CC:43:75:08:6B:CC:2F:B6:5C:01:6B:1A:F1:2D:94
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 019EB8B40E58F9D26901EF0A1CCEEF3192EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 22:01:08 +0000
Manifest this update: Thu 11 Jun 2026 22:01:08 +0000
Manifest next update: Fri 12 Jun 2026 22:01:08 +0000
Files and hashes: 1: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: cTm0TZr0XnzChOAJc+k6eaCv6Iyj2kR5UrziV+IJFVg=)
2: vyyOv-ascCpg6vzLP5yhXC1Yn0U.roa (hash: QGwJqLzYBQrI7ZQVyRyoIjXKsPdPV3MLHZM6uCuAXZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:0e:58:f9:d2:69:01:ef:0a:1c:ce:ef:31:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Jun 11 22:01:08 2026 GMT
Not After : Jun 12 22:01:08 2026 GMT
Subject: CN=61ef7ea221cc4375086bcc2fb65c016b1af12d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:14:d7:22:f5:f1:41:5c:4e:81:68:6f:e5:
57:ad:c6:0d:0e:d4:79:73:4b:f7:9d:c7:6e:4b:74:
35:19:42:fc:2b:42:c4:96:e0:4b:3c:43:db:5b:fb:
77:eb:a7:fc:6b:df:0e:58:73:54:cb:21:a7:f9:87:
89:61:a1:fc:f5:89:c1:5a:27:fd:65:58:65:62:98:
79:aa:81:9b:53:e4:ed:15:98:5e:c0:f7:0a:34:b7:
2f:1d:cf:aa:42:21:3f:34:88:9a:65:91:b7:71:48:
1a:c6:62:ea:89:a5:8c:ff:7f:b4:94:55:50:2f:4e:
51:e8:a5:15:94:5e:f4:5a:c0:db:6a:17:50:b5:87:
cf:e7:e8:48:d1:ce:ae:20:ae:d1:fc:2a:d6:c7:17:
55:86:c5:cc:44:60:e1:3d:06:60:eb:9a:41:ae:dd:
4e:38:2f:1e:76:50:35:0c:5f:0e:e9:00:04:19:b7:
d1:93:d5:a9:34:72:65:8f:a3:bd:52:bb:61:3f:a4:
65:6c:a5:62:9e:1a:d6:8f:e1:f0:1c:5f:ae:54:23:
73:98:be:04:d0:2e:6f:53:9f:e3:fd:79:7a:40:72:
92:38:60:ca:d9:8a:de:f9:0a:ae:03:ab:16:eb:ec:
d2:81:88:de:6f:cf:f0:55:c2:2b:cc:05:6b:c2:41:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:7E:A2:21:CC:43:75:08:6B:CC:2F:B6:5C:01:6B:1A:F1:2D:94
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:06:a8:73:7e:97:de:e9:63:54:96:69:73:7b:a4:61:b2:
c5:eb:b3:d3:c2:c8:0b:42:fe:38:92:07:d1:e8:22:f7:a8:db:
d4:3d:b1:63:53:6b:f8:00:46:f8:b0:81:ac:13:64:72:d6:cc:
1c:f4:06:ee:a1:a8:fc:1c:44:20:ed:8a:29:7c:f5:48:34:84:
83:1e:cf:36:1a:e0:3c:08:d1:e2:1e:f7:90:63:52:04:f4:59:
61:1f:e2:03:67:2b:ab:f0:d1:9c:79:9b:b6:f3:88:28:b3:b8:
a6:c0:30:ae:e1:19:09:5c:9e:77:6d:bc:d3:0d:80:3e:d8:8b:
df:cf:cc:c2:67:52:17:6e:ff:75:b3:0c:9f:db:4d:52:7b:c4:
f2:da:47:5e:00:33:59:ee:07:ef:5e:e2:1d:28:25:66:5b:3f:
ea:13:a2:b3:55:60:b7:10:9c:64:be:41:26:8b:62:aa:4d:ac:
03:05:f8:5d:be:c2:b4:26:46:b6:7f:53:88:d2:06:5b:b9:ce:
cc:f0:07:7e:78:11:3d:b8:8d:05:d1:41:fd:2e:95:5c:1e:94:
62:7c:9c:2d:14:5d:47:78:2b:ee:90:46:7d:fc:15:14:a9:70:
43:f0:27:c5:80:17:4c:41:aa:4b:a4:f7:f5:74:e7:49:9b:79:
80:b5:a7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tA5Y+dJpAe8KHM7vMZLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2I0OTZlYTdjZjc2M2QwNTgzMDgzNzFlMWJmNjdlNTNi
YzdiYTMwHhcNMjYwNjExMjIwMTA4WhcNMjYwNjEyMjIwMTA4WjAzMTEwLwYDVQQD
Eyg2MWVmN2VhMjIxY2M0Mzc1MDg2YmNjMmZiNjVjMDE2YjFhZjEyZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjMU1yL18UFcToFob+VXrcYNDtR5
c0v3ncduS3Q1GUL8K0LEluBLPEPbW/t366f8a98OWHNUyyGn+YeJYaH89YnBWif9
ZVhlYph5qoGbU+TtFZhewPcKNLcvHc+qQiE/NIiaZZG3cUgaxmLqiaWM/3+0lFVQ
L05R6KUVlF70WsDbahdQtYfP5+hI0c6uIK7R/CrWxxdVhsXMRGDhPQZg65pBrt1O
OC8edlA1DF8O6QAEGbfRk9WpNHJlj6O9UrthP6RlbKVinhrWj+HwHF+uVCNzmL4E
0C5vU5/j/Xl6QHKSOGDK2Yre+QquA6sW6+zSgYjeb8/wVcIrzAVrwkFfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHvfqIhzEN1CGvML7ZcAWsa8S2UMB8GA1UdIwQY
MBaAFI97SW6nz3Y9BYMINx4b9n5TvHujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUt
MjUxYjAxOWQ1MWE4LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85ZWZkOTQtMDUxNi00ZTY2LTk4ZDUtMjUxYjAxOWQ1MWE4
LzEvajN0SmJxZlBkajBGZ3dnM0hodjJmbE84ZTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5sGqHN+
l97pY1SWaXN7pGGyxeuz08LIC0L+OJIH0egi96jb1D2xY1Nr+ABG+LCBrBNkctbM
HPQG7qGo/BxEIO2KKXz1SDSEgx7PNhrgPAjR4h73kGNSBPRZYR/iA2crq/DRnHmb
tvOIKLO4psAwruEZCVyed2280w2APtiL38/MwmdSF27/dbMMn9tNUnvE8tpHXgAz
We4H717iHSglZls/6hOis1VgtxCcZL5BJotiqk2sAwX4Xb7CtCZGtn9TiNIGW7nO
zPAHfngRPbiNBdFB/S6VXB6UYnycLRRdR3gr7pBGffwVFKlwQ/AnxYAXTEGqS6T3
9XTnSZt5gLWnUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:53 2026 by rpki-client