Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
File: JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft (raw, json)
Hash identifier: de0LDOVeIZpeDPSAVN9lYCDhP2bkDVRwzCdl2aI9wxU=
Subject key identifier: AF:B7:6B:33:7A:29:02:90:05:15:EA:CE:11:60:5B:BE:AC:AA:F2:FA
Authority key identifier: 24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
Certificate issuer: /CN=240b32cd6b5797bba8de75710d2263858909f386
Certificate serial: 019EF4C91D7B87565C0B861848A298886B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
Manifest number: 13
Signing time: Tue 23 Jun 2026 14:01:21 +0000
Manifest this update: Tue 23 Jun 2026 14:01:21 +0000
Manifest next update: Wed 24 Jun 2026 14:01:21 +0000
Files and hashes: 1: FROPYkM5ktQTS4wOQF6SJwJLwig.roa (hash: AuHjIMdxNo/GZjrCi+DZLonZ7eKRGgLWjts+JzfgAeI=)
2: JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl (hash: kpbkKkPz6k7UxAfk9XgF5T7Fo8ObIa4qaXphkDDEjIk=)
3: f80qjYnyCwfdNMKj1DsnAZ5cv9c.roa (hash: zngQrOsaQfFZfvx/BqG2rXEHHOh99MujSkajem83cE4=)
4: igCk7oNrHtLfxuau9vPZGAQvZ_M.roa (hash: Ur8FR9IN0yI1c69evJkfyoGd+ghZTySnXPRPUeZRMAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 13:08:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:c9:1d:7b:87:56:5c:0b:86:18:48:a2:98:88:6b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240b32cd6b5797bba8de75710d2263858909f386
Validity
Not Before: Jun 23 14:01:21 2026 GMT
Not After : Jun 24 14:01:21 2026 GMT
Subject: CN=afb76b337a2902900515eace11605bbeacaaf2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:cd:fe:17:cf:eb:c3:5d:87:1e:45:dd:ee:
af:96:ce:95:5d:a4:24:a7:30:73:b0:4a:92:37:a7:
aa:7f:3e:02:b5:46:c7:bd:c5:bc:6c:34:55:6f:4d:
c8:7e:bf:c6:d4:38:e7:0b:0a:6a:f9:6d:a5:54:60:
b5:1d:9f:3a:f0:50:98:dc:9d:db:c7:b8:93:c5:19:
a8:a9:24:a1:72:ce:8c:c4:32:fe:f9:e3:77:d8:2a:
46:80:0b:3c:e4:10:4c:0e:ba:d6:a4:d1:f2:ad:46:
9c:48:fd:d1:3e:8f:84:1e:22:84:21:fc:e2:08:96:
e9:14:0c:23:ce:8b:cd:64:42:34:24:7a:75:b7:47:
e0:d9:5d:51:7a:ab:c1:85:f9:cd:83:80:8f:89:70:
ec:90:ae:1c:55:bc:6a:75:fb:34:50:0d:42:8e:e4:
15:ec:60:52:ba:1a:ff:9c:5f:e7:6d:3b:3b:fe:89:
22:4b:d1:70:4c:99:d2:0f:58:dc:53:00:a5:da:b9:
7f:ca:fe:10:8e:ee:b2:fb:eb:2c:19:8f:e1:bb:ac:
84:80:78:68:50:9c:4f:3f:40:5d:7a:10:dc:a8:e6:
58:43:ca:02:66:75:f8:1d:19:c1:ca:46:49:8c:9f:
4c:ec:02:87:3b:76:fd:b5:e8:5c:e5:05:dd:14:5f:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B7:6B:33:7A:29:02:90:05:15:EA:CE:11:60:5B:BE:AC:AA:F2:FA
X509v3 Authority Key Identifier:
keyid:24:0B:32:CD:6B:57:97:BB:A8:DE:75:71:0D:22:63:85:89:09:F3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/03325f-234e-42d8-bccc-ae65f0e6d866/1/JAsyzWtXl7uo3nVxDSJjhYkJ84Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:b0:c3:33:d4:4e:94:70:b1:11:5a:d0:71:64:5b:66:f4:
cd:59:61:77:58:11:a8:02:73:3b:06:7d:c2:71:03:a3:ed:2b:
e1:e0:43:b9:a6:3d:f8:ce:aa:b4:32:c9:90:d9:85:c6:ae:9b:
0f:fa:71:2a:e9:7a:f5:e7:bb:0b:3d:2a:54:f1:74:e9:c1:89:
d9:79:8e:cd:d0:8b:d4:2e:a9:f8:5c:70:8a:b2:cf:a3:28:e3:
be:1e:43:90:f7:8b:82:85:57:bb:b6:33:e2:28:0c:f1:2f:46:
e3:5c:48:e8:65:54:73:73:e7:68:eb:49:9e:c3:19:ba:e4:23:
49:c7:4f:8a:ec:99:30:14:78:e7:3b:b4:9c:8d:ad:22:e4:08:
cf:9a:38:c8:6f:f5:a5:7e:08:2f:87:cc:33:64:46:43:42:65:
8b:5f:cd:40:c3:fc:50:bd:17:18:b1:87:af:99:c2:6b:c2:1c:
3a:39:4b:55:9d:02:7e:8d:50:18:2f:43:82:a6:60:27:75:49:
4f:6e:92:21:25:4d:0f:74:67:94:e5:88:39:b3:18:78:c6:54:
96:83:ae:5a:fe:45:cd:ab:f5:47:61:7e:6f:29:40:ec:8b:a3:
43:70:a3:78:bf:24:3b:f2:b1:c7:2e:a7:8f:fc:6a:e3:4b:0e:
61:2e:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 19:46:06 2026 by rpki-client