Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: s2dmTSQwmjDngy1MZ/lRFMoHcoifdl+gNwffPaJw86I=
Subject key identifier: 4E:1F:9A:A6:60:32:03:6E:F0:22:4D:9E:1B:F6:03:34:9D:8F:22:94
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 019EB958A8D928331A987D79CB35DB6EDBDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0DD5
Signing time: Fri 12 Jun 2026 01:00:55 +0000
Manifest this update: Fri 12 Jun 2026 01:00:55 +0000
Manifest next update: Sat 13 Jun 2026 01:00:55 +0000
Files and hashes: 1: UCCvpf2A0w3TS01Mgi-mxKvg6Y4.roa (hash: wMobn9EgqRdgXS7vAj6osPvNRe/uCjfH5YvFicmgWAM=)
2: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: lWMDHTBplME9l9OC8WJvn9GjyT20eNpY5bzGGL7Y97A=)
3: krbPjQ7dV78artLAJHZH9VRMSb4.roa (hash: DfhzBCZr3lEjUY/BpGX15//8G6kbI+qsFYcc/tJsimw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:a8:d9:28:33:1a:98:7d:79:cb:35:db:6e:db:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Jun 12 01:00:55 2026 GMT
Not After : Jun 13 01:00:55 2026 GMT
Subject: CN=4e1f9aa66032036ef0224d9e1bf603349d8f2294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:28:24:71:3b:c6:26:ae:9c:05:e3:49:45:
47:03:06:bc:d1:92:45:c2:45:9e:1b:95:1f:02:17:
7b:d3:ec:0f:b0:dc:f7:e0:f9:0a:65:0c:5f:3f:77:
d5:b7:f1:a8:7b:1f:15:38:d6:f3:c5:a0:12:2c:88:
ae:61:76:14:b1:f6:e0:a6:50:69:6e:42:2e:37:b5:
87:05:4f:8d:2e:cd:78:93:a0:5b:86:3d:34:04:05:
e7:68:e8:16:00:f2:38:c3:c1:e9:07:83:49:5d:4f:
77:7a:43:87:63:81:5d:ca:ca:c4:4b:af:5e:02:b0:
57:c7:00:56:c3:df:c7:1b:40:6d:7a:ae:26:0e:42:
d4:74:83:1f:ae:50:a9:aa:07:84:e4:06:8b:12:2f:
31:dc:2a:0e:fe:14:9c:8b:cf:1e:3b:bb:40:e4:65:
b5:d9:73:95:59:ef:87:c3:d6:2e:0d:16:30:63:13:
d9:d3:2e:57:31:6f:22:74:f8:38:7d:02:51:7f:09:
78:ee:d0:24:e9:1f:8b:bb:bd:e9:8d:7d:82:51:d4:
d7:ac:25:03:a7:51:b4:f2:e7:ad:58:cf:fe:13:f6:
49:2e:6a:5e:0d:d4:c3:92:35:44:b1:d9:f9:79:b9:
94:0d:eb:38:a8:1b:86:3b:1e:da:e6:4c:75:6b:b3:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:9A:A6:60:32:03:6E:F0:22:4D:9E:1B:F6:03:34:9D:8F:22:94
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:14:7d:1e:b7:5e:09:44:ec:d9:e5:2a:fa:b0:9e:c6:10:
f7:b1:ca:df:c6:3d:8d:0a:a9:6f:21:b5:99:9f:a3:b8:a0:af:
25:c4:e3:63:e5:28:63:0d:a2:80:93:fe:94:47:dd:cb:87:62:
1c:9b:8c:76:ec:be:cf:84:57:ee:08:63:e5:eb:9c:ef:28:56:
2b:3d:a2:bc:ca:5f:10:d4:4f:a2:67:f3:41:45:4a:06:b8:54:
89:0e:9a:cb:94:00:a7:fb:48:fd:16:53:7b:1f:1d:5e:93:45:
a0:a7:19:4e:07:6d:8d:15:ac:b0:83:a8:4c:87:53:5f:0d:cf:
b7:85:f0:da:d2:10:90:4e:51:9e:42:63:60:bd:b8:d6:b2:23:
ca:91:43:8e:27:f2:87:44:93:b7:54:ec:d7:dc:b7:b2:c5:c9:
8b:a3:fe:c4:15:71:e6:7f:64:7a:6e:60:7e:a8:9f:a9:04:1b:
cb:9b:4e:26:5a:b6:15:99:42:a7:84:cc:85:25:48:cc:b7:49:
f6:d5:a8:2f:14:ea:7c:eb:8e:1a:8c:4a:ba:c9:63:e0:db:42:
53:53:be:f8:ec:fc:47:24:f7:4e:52:50:e1:ab:a7:26:6f:82:
6b:d7:36:18:58:5a:37:ac:7e:d6:d5:41:c8:26:2f:33:19:1d:
cf:66:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:48:15 2026 by rpki-client