Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: VsjXuYVtNtoi/Ykjm5LuFHJBhxHDRRovIrVJjSNAYJc=
Subject key identifier: B4:37:69:E4:48:4D:9E:55:74:00:54:DF:D8:0F:0B:0B:69:5F:F6:4D
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 019EB958D202A1F58746C1D0C921DFFFBD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 01:01:06 +0000
Manifest this update: Fri 12 Jun 2026 01:01:06 +0000
Manifest next update: Sat 13 Jun 2026 01:01:06 +0000
Files and hashes: 1: LMH0J5J7Y0BuVcxGoOL5zfyTqEg.roa (hash: YC+Err1nsYN5JZkJiiNrSk4ckkPdFmlbNmlV49Qluo4=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: jxOlzNQd0ucZvS/WVDY5qCNfkFiYP2iW77Q9MGRjAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:d2:02:a1:f5:87:46:c1:d0:c9:21:df:ff:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Jun 12 01:01:06 2026 GMT
Not After : Jun 13 01:01:06 2026 GMT
Subject: CN=b43769e4484d9e55740054dfd80f0b0b695ff64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:3c:42:d4:d1:99:cb:34:f0:4b:44:8c:f0:
a1:24:ca:87:48:50:2c:28:45:ca:43:ba:39:2c:92:
0e:19:c5:12:56:c6:e1:15:ab:32:8a:a3:93:dc:7f:
7c:85:bf:86:39:ec:e6:c5:e0:03:16:b3:ee:27:05:
8e:9d:5b:99:d6:46:49:a6:3c:c7:d0:0b:d7:82:b8:
0b:1a:fc:26:15:9d:b9:ab:1d:ea:8c:38:a2:82:8a:
a2:8b:0b:4f:07:99:df:8b:a2:33:bf:9c:e0:84:7c:
c8:51:53:ca:7f:90:09:eb:ee:65:bf:37:3e:d9:ca:
21:32:f3:32:bc:8c:d9:7b:96:20:fa:2b:1a:b2:d9:
b5:5e:ba:b5:3c:cb:58:d3:ac:bd:ee:57:50:11:9a:
82:b1:c1:b3:3e:4d:ca:bc:5d:2c:8f:e5:4e:27:68:
7f:06:08:5f:90:f3:ad:2a:fc:5a:23:35:3d:9b:d8:
27:df:de:c5:63:2f:04:89:0f:be:ac:87:c0:85:bc:
2c:4b:4a:13:df:0e:01:db:e8:91:ef:b0:b2:29:a7:
1e:21:51:40:00:73:89:73:c9:de:82:bb:39:80:ca:
43:b3:13:30:f8:2d:b5:06:6a:ff:ed:c5:c5:8c:f4:
eb:32:eb:9f:61:c8:07:b5:62:eb:ee:3e:02:c4:0b:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:37:69:E4:48:4D:9E:55:74:00:54:DF:D8:0F:0B:0B:69:5F:F6:4D
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3d:56:af:c1:43:b5:e4:95:d5:6b:0d:21:2c:c4:d7:18:09:
8e:f4:68:f2:cf:b7:38:30:6d:56:eb:f6:cb:6a:a9:9b:f7:89:
7b:3a:1f:d7:b0:55:2e:3c:d5:2c:60:d5:3a:52:8e:23:eb:11:
7b:78:3e:da:b2:ad:d5:d0:cb:5a:06:54:3d:a5:58:d0:e7:eb:
95:90:7a:e5:dd:01:ce:56:60:41:4f:60:a6:80:38:f0:44:d9:
eb:73:06:67:a5:27:90:e0:4e:4b:7c:02:00:7e:80:a1:4f:50:
e7:f0:9c:56:a7:75:63:de:de:01:81:3c:43:9a:33:47:31:6f:
46:ed:4c:fd:0a:fd:7a:94:5e:0f:d6:4d:ac:64:1a:e5:f1:94:
90:d5:a8:75:e4:c9:00:47:69:12:fd:42:70:7a:6a:cd:40:f6:
f6:31:23:c8:de:8d:f8:a0:f1:9d:af:30:f2:10:f7:9e:cd:ba:
4a:40:f1:b1:5d:35:0a:70:2e:dd:dd:b7:dc:46:b6:14:61:f9:
c2:5d:8b:96:2e:32:11:85:83:02:49:e7:66:26:cf:f1:4c:4f:
2c:87:9a:c5:c7:c8:c7:44:38:97:e9:cc:af:03:b8:46:b9:4e:
57:68:4c:a6:86:f4:f9:f3:5c:21:df:33:6e:cb:1a:91:b1:67:
68:cc:4c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:20:18 2026 by rpki-client