Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: iBKf7rm6+AQa3ulH7OkuGZ3iIRVX6q+Jbsy7DS8BG5o=
Subject key identifier: 6F:3F:A9:FB:C1:DD:A6:81:43:BD:03:09:72:D1:D9:57:9F:71:EF:16
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019E9AE0511D27E0DF9E309C4403301928CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 03AC
Signing time: Sat 06 Jun 2026 03:00:52 +0000
Manifest this update: Sat 06 Jun 2026 03:00:52 +0000
Manifest next update: Sun 07 Jun 2026 03:00:52 +0000
Files and hashes: 1: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: k0SF2htA74M/cw+dvs3kurhNZ8mfA82Sfr2iRjbw4io=)
2: TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (hash: EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:e0:51:1d:27:e0:df:9e:30:9c:44:03:30:19:28:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Jun 6 03:00:52 2026 GMT
Not After : Jun 7 03:00:52 2026 GMT
Subject: CN=6f3fa9fbc1dda68143bd030972d1d9579f71ef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:a1:63:ef:3b:21:4b:31:5b:89:68:8f:13:
94:4a:06:8b:28:f2:f1:da:e5:d0:05:c7:7d:a6:f5:
65:31:4a:91:28:eb:20:94:c6:79:b8:0e:88:aa:cf:
aa:84:dd:8f:6a:5f:91:0c:e4:47:30:c8:89:71:74:
d0:cf:f5:50:f2:4f:d6:e7:28:bd:ee:13:89:a9:af:
8d:fa:64:0d:1b:b3:88:b1:ae:10:93:e3:51:68:3b:
c6:63:f3:47:f4:3d:48:69:36:cc:8f:b0:75:0b:f2:
5b:2a:a9:29:df:00:54:c2:31:90:9f:3a:2d:a4:90:
61:d1:57:02:d5:51:22:16:76:b8:50:c0:29:3a:5c:
65:36:eb:8b:45:8f:c6:f5:a8:47:82:9a:d7:1b:28:
10:6f:d0:68:68:f4:8d:82:6d:46:63:6e:3a:5b:ba:
32:16:26:7c:15:dd:c0:ca:14:ea:cb:42:3e:cc:75:
0a:45:1f:f4:f6:3c:71:85:f3:57:b5:56:38:3f:98:
13:6f:8e:d1:85:8e:b5:06:c6:39:67:4f:ec:f2:56:
72:c4:80:a3:50:95:af:13:65:aa:f5:c8:e6:21:2c:
6f:a5:66:da:6f:05:b3:ac:cc:bf:5a:c5:ba:e8:f0:
c4:80:1c:03:9e:0f:a0:cc:7d:cd:8b:76:3c:93:9a:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3F:A9:FB:C1:DD:A6:81:43:BD:03:09:72:D1:D9:57:9F:71:EF:16
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:75:5f:50:35:a5:d8:42:f1:6c:5c:1d:84:23:cb:1c:a2:19:
16:8e:d9:db:28:69:9a:bd:14:fb:61:2a:80:6c:c5:b1:07:41:
51:26:2f:27:c8:5b:b7:e3:e5:b9:c6:7e:6d:e4:00:9d:ca:11:
03:2a:22:c1:1f:3f:5a:df:2b:11:b9:0f:94:2b:a3:7f:87:0d:
a8:18:9e:5f:01:d1:53:fa:d3:74:84:16:bb:02:d1:0e:b7:6e:
72:cb:41:95:ad:8a:fb:24:28:5c:9d:a8:e5:e8:2a:28:19:e9:
e9:15:41:d9:99:1b:97:31:f3:2d:c6:8f:56:d4:bd:34:f3:2e:
13:d0:f0:37:cc:af:e5:13:98:9f:86:b6:8d:8d:3a:1c:9f:26:
c3:fa:7b:9d:b5:0c:88:7c:7c:c3:f3:e7:e7:61:d0:a7:73:ff:
da:d3:d9:80:f7:34:81:2d:8c:ee:a8:cc:fd:6b:6a:29:3a:ad:
b0:c0:3d:d5:51:86:10:96:e1:1c:0f:c4:90:d3:b1:a9:78:96:
34:08:8d:22:b6:de:0c:5f:76:07:2c:77:c6:f9:04:69:8d:ff:
6e:e8:e5:fe:8b:c0:31:c9:17:15:05:06:b5:03:14:48:75:7c:
04:1b:ee:79:3a:1b:f0:2a:96:59:fa:fc:3a:80:61:67:3b:66:
66:65:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:43 2026 by rpki-client