Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
File: jxpRl9YyTu7SVrJoYeGiSshjXTc.mft (raw, json)
Hash identifier: dccWVIM7xegZVamUSJVuimDTyEUyXqd5giK13QGSw9U=
Subject key identifier: C0:F6:BB:A5:E3:DD:94:68:74:E3:87:8F:70:1E:57:0B:87:92:04:59
Authority key identifier: 8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
Certificate issuer: /CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Certificate serial: 019F11F8A5E9452ADF2D61580CAF190AFFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
Manifest number: 067C
Signing time: Mon 29 Jun 2026 06:02:15 +0000
Manifest this update: Mon 29 Jun 2026 06:02:15 +0000
Manifest next update: Tue 30 Jun 2026 06:02:15 +0000
Files and hashes: 1: 1mBr9qM8BaNGTVxWWG-3AL-6aKo.asa (hash: NmnXm1UkUh4+zMI0tM7r+DaLRQDNnioKlhBZDFPOibA=)
2: EO45mJpwo3EeFrckKnmDBhkeeTY.roa (hash: Khku2szHPHCEtCEgn2TtWXecH2vJHsJWVn9GOGsCAsI=)
3: jxpRl9YyTu7SVrJoYeGiSshjXTc.crl (hash: 6GMftEhbQVy8OFkn7aPm0zQS0Crp62Z2+PqC7Ko7b3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:a5:e9:45:2a:df:2d:61:58:0c:af:19:0a:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f1a5197d6324eeed256b26861e1a24ac8635d37
Validity
Not Before: Jun 29 06:02:15 2026 GMT
Not After : Jun 30 06:02:15 2026 GMT
Subject: CN=c0f6bba5e3dd946874e3878f701e570b87920459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:d0:1e:28:23:fb:5a:51:de:be:a6:1f:07:
e5:18:83:c7:ff:e9:d7:bc:81:d9:9c:21:db:85:ea:
8c:24:64:b5:2d:b5:4e:38:6a:e9:12:d9:bc:89:c2:
9f:9d:59:bf:83:3b:86:77:65:66:f6:9e:11:1f:a0:
06:30:83:0c:c5:bd:4b:6b:40:56:70:13:a0:11:57:
7c:aa:b6:53:88:ff:e8:c9:f3:3e:28:37:fe:c2:82:
f8:6e:59:32:c5:7f:f3:63:5c:ad:64:6a:c2:aa:d9:
80:3e:01:ec:0b:ea:49:a1:62:74:e1:1b:d1:23:1a:
4e:e3:55:62:1f:43:9a:17:68:10:9e:4f:e0:55:4e:
ea:ea:fa:6e:fb:a7:7e:15:b0:a5:ce:78:8a:46:50:
19:f6:31:7a:4a:77:ea:95:fc:97:39:32:4d:90:b8:
3f:7a:5a:bd:98:91:b3:15:a1:b3:8c:6f:20:30:0f:
ed:2f:5b:fa:67:63:37:58:54:36:20:96:54:49:19:
90:2d:83:d4:89:3d:c1:c4:c8:5a:2e:a6:9b:e2:b6:
63:18:c7:df:64:af:0d:ef:44:5a:9d:fb:be:1c:1c:
cb:14:9c:66:d6:d7:af:ba:26:fd:0a:36:89:35:f1:
20:07:59:fe:3e:66:36:4a:27:eb:db:8c:37:8a:ca:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:BB:A5:E3:DD:94:68:74:E3:87:8F:70:1E:57:0B:87:92:04:59
X509v3 Authority Key Identifier:
keyid:8F:1A:51:97:D6:32:4E:EE:D2:56:B2:68:61:E1:A2:4A:C8:63:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxpRl9YyTu7SVrJoYeGiSshjXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f15e4d-80c3-4ca0-8790-a4de9dff5ed2/1/jxpRl9YyTu7SVrJoYeGiSshjXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:0b:ba:f3:c2:48:36:e3:40:64:1f:19:22:87:f9:b9:ec:
1e:28:86:80:02:0c:7f:05:0b:17:0b:a2:9f:d0:1b:81:97:53:
a2:de:f2:9a:1e:21:1e:3d:cf:e6:c6:bb:2c:aa:45:ca:4b:a4:
38:bc:2e:42:2d:80:57:92:27:45:8c:30:da:42:05:79:49:67:
08:f0:12:fd:da:75:b1:1b:8d:6c:17:ba:67:52:b4:9c:63:14:
4c:64:ba:fa:81:c8:9d:1e:da:3d:70:86:29:8f:35:c0:e6:20:
2e:be:fb:37:9d:08:3e:ef:13:c4:86:a2:f3:ab:e3:b1:57:26:
45:64:c3:4c:7e:3d:d3:08:53:bf:6b:09:3e:a0:39:ac:f4:e9:
02:a7:66:6d:bb:b5:d9:97:bc:10:cc:bc:cb:a3:d2:53:3b:7b:
71:cb:83:e7:d4:09:5b:5c:bb:5b:e9:d9:27:39:05:13:01:fd:
6b:ca:50:1b:3e:f3:fa:27:2a:53:a5:e9:bb:23:84:0d:ae:7f:
a4:74:50:92:8f:d7:eb:21:72:10:96:b8:94:7f:f5:fb:5b:9a:
3c:62:4b:04:11:5c:7d:ac:26:c3:21:76:de:db:bb:fd:4a:25:
72:f1:6c:d4:5d:d5:0a:36:c9:47:27:46:4b:81:4a:29:e6:b3:
1c:a2:fd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:02 2026 by rpki-client