Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
File: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft (raw, json)
Hash identifier: zbfGu2YI+N4XCkLb9bUrpmArXUWc3zfeCQ4oqXoR9Pk=
Subject key identifier: F4:A3:70:AE:16:56:BD:64:07:75:68:44:18:A5:C3:5B:F0:5E:70:78
Authority key identifier: 25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
Certificate issuer: /CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Certificate serial: 019F1153284FF0B9B29DBEA3758BBB543006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
Manifest number: 0221
Signing time: Mon 29 Jun 2026 03:01:30 +0000
Manifest this update: Mon 29 Jun 2026 03:01:30 +0000
Manifest next update: Tue 30 Jun 2026 03:01:30 +0000
Files and hashes: 1: 9GBMji4OPDhRJLd-DlLdqVfKcus.asa (hash: 6NMpenXQXi5qKq7l5TGlC240gKGHF30b3eWuVh0xgdg=)
2: JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl (hash: gZh2nt8vukp1kHIwMCHpOSwwHhPUwi4YGzA36BG3zUE=)
3: kKS6KloPbQfk_MqDgcm0FtJjzs0.roa (hash: 6OLn7a+dahEkyNoliy/foyipMpplcVkPCSuLTDS5rdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:28:4f:f0:b9:b2:9d:be:a3:75:8b:bb:54:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c15d8ec47a2b0e2043a7822db67ac23117cc87
Validity
Not Before: Jun 29 03:01:30 2026 GMT
Not After : Jun 30 03:01:30 2026 GMT
Subject: CN=f4a370ae1656bd640775684418a5c35bf05e7078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:2d:4a:b4:f5:e5:0b:fa:63:16:fb:ed:34:
f1:39:1a:57:9f:52:17:ae:98:9f:75:3a:4c:28:9d:
5d:0e:05:f0:f5:4c:95:ef:ec:3c:0d:94:0e:7c:8e:
63:36:6d:3c:42:32:db:30:02:08:c9:28:61:c0:c6:
70:af:9e:43:38:42:b9:a0:e2:0c:2f:e2:58:db:07:
81:f5:83:64:c0:8c:0c:43:77:e5:bc:16:84:a6:ac:
48:72:53:84:68:d7:a1:02:29:a8:15:13:9e:d2:76:
91:c4:91:fb:a8:7b:39:50:93:0a:82:d9:fe:6a:04:
b4:09:64:ce:6e:d2:22:48:89:5a:3c:1b:ce:52:6d:
4f:b5:c9:96:62:4d:0b:da:ad:71:d6:7c:26:75:30:
20:89:65:91:13:cc:3c:34:c0:5c:7c:b9:10:3f:18:
8e:eb:5f:bc:23:82:5d:ab:93:53:d0:ca:83:c1:81:
30:c6:6c:34:8d:09:d5:51:28:f5:e8:3a:a0:37:2f:
4a:62:99:9d:34:6c:e1:b7:4a:69:a0:23:ff:51:94:
14:a0:63:a7:83:3a:53:40:1a:33:5e:6b:9d:2a:41:
db:a3:ec:0e:40:c0:61:8f:95:1d:2f:69:dc:32:ce:
f1:25:49:c6:98:b9:e2:59:da:db:0d:21:3e:e2:52:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:70:AE:16:56:BD:64:07:75:68:44:18:A5:C3:5B:F0:5E:70:78
X509v3 Authority Key Identifier:
keyid:25:C1:5D:8E:C4:7A:2B:0E:20:43:A7:82:2D:B6:7A:C2:31:17:CC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7c2e8-4f25-4030-a1c6-43e2b159657d/1/JcFdjsR6Kw4gQ6eCLbZ6wjEXzIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:20:e3:ab:ad:2f:3b:05:84:e6:ac:59:ad:25:23:23:e1:
8c:96:be:96:4a:20:b3:c6:3e:06:65:11:4a:fb:be:16:6e:fe:
cf:71:04:72:84:30:66:6c:ac:af:3a:1f:af:82:86:f2:9b:b1:
8b:d6:7a:c0:65:62:f2:fb:55:3d:ad:4f:f9:89:89:8f:ee:d2:
8c:32:21:86:ee:ae:6c:44:95:02:52:31:45:19:19:27:62:ad:
e3:2f:4c:74:6e:ce:01:9d:6b:e5:2e:bf:eb:ee:3f:36:11:8c:
b5:b6:15:6c:aa:ae:51:d7:4c:c1:23:c6:99:7e:a2:85:55:24:
39:10:32:c1:3e:f5:6b:e6:fa:5b:bd:51:1a:48:65:5f:07:9c:
41:1f:4b:67:96:a4:0b:76:3a:a4:0a:df:61:6e:d5:03:23:aa:
cd:0c:1e:e3:32:5d:29:45:fd:56:8e:04:f2:85:b9:47:69:96:
e3:c1:eb:f6:35:58:65:be:94:fa:36:20:29:46:0d:7c:92:0b:
16:a5:53:26:89:48:3a:e2:c1:1e:41:2c:21:c7:38:83:2f:c6:
67:0e:73:40:b8:e5:8e:bb:4c:15:17:a9:b0:6a:f3:55:73:8f:
c9:cc:a0:6c:af:be:ab:ef:c2:24:e7:ca:a4:76:e0:2c:7a:5d:
dd:40:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:51 2026 by rpki-client