Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
File: jixqlU7QBSEWyinuD89V91LY5HY.mft (raw, json)
Hash identifier: yPDZOgJIG2fELsW8niBCVIfRXTBri96+rDK3Ul9N71g=
Subject key identifier: 99:DC:7E:11:11:6F:72:0E:FF:C2:E7:66:52:0A:12:D5:C2:A0:FB:76
Authority key identifier: 8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
Certificate issuer: /CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Certificate serial: 019EB6C5F94CCE102E42991A27598FB9928C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
Manifest number: 1952
Signing time: Thu 11 Jun 2026 13:01:28 +0000
Manifest this update: Thu 11 Jun 2026 13:01:28 +0000
Manifest next update: Fri 12 Jun 2026 13:01:28 +0000
Files and hashes: 1: jixqlU7QBSEWyinuD89V91LY5HY.crl (hash: o9CJl+o3zeHnk5Omm3lJg7AycsUFcJCqmBrqmH7Pp7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:f9:4c:ce:10:2e:42:99:1a:27:59:8f:b9:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c6a954ed0052116ca29ee0fcf55f752d8e476
Validity
Not Before: Jun 11 13:01:28 2026 GMT
Not After : Jun 12 13:01:28 2026 GMT
Subject: CN=99dc7e11116f720effc2e766520a12d5c2a0fb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:27:85:14:07:9a:9f:af:be:36:46:c5:96:
3d:3a:8b:82:93:97:55:79:bb:35:87:7b:24:16:e1:
ed:57:85:2f:c5:ad:43:4a:3b:a8:54:9f:48:a2:cc:
20:4f:93:aa:bd:a5:77:70:39:04:df:8a:9a:a0:71:
d4:94:5b:c6:b1:9a:86:4d:2a:76:0f:60:b1:56:ed:
ea:42:eb:03:5b:85:bb:86:5d:05:ad:01:d0:48:b4:
72:ab:b8:e9:15:07:2c:c9:3a:10:46:3f:2c:6c:c1:
6a:96:fe:d6:12:d6:8d:4f:75:56:4a:ff:78:1e:60:
30:05:20:91:22:11:86:bc:62:a5:c0:34:19:94:a2:
0b:23:41:2b:5b:83:3a:ac:9f:aa:58:d7:93:5b:98:
c1:9e:b9:94:67:96:7c:de:3a:97:76:d1:e0:42:7b:
0b:3d:31:64:be:cc:d5:39:06:ed:26:9b:9a:ea:e4:
29:85:48:af:7f:4d:28:c1:c7:12:9e:54:8d:2f:2c:
d0:39:19:06:33:55:c8:8e:52:d5:a8:cc:41:cb:08:
e2:a8:fd:b4:6c:c9:8a:ee:f8:60:d7:75:34:94:0b:
67:1c:89:63:64:54:da:33:3b:59:44:e0:e8:25:dc:
ee:d0:6d:6e:07:f2:91:b4:5c:c1:fe:c9:be:b1:6e:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:7E:11:11:6F:72:0E:FF:C2:E7:66:52:0A:12:D5:C2:A0:FB:76
X509v3 Authority Key Identifier:
keyid:8E:2C:6A:95:4E:D0:05:21:16:CA:29:EE:0F:CF:55:F7:52:D8:E4:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixqlU7QBSEWyinuD89V91LY5HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b2e56c-eec7-406b-9516-34e8a9cdf218/1/jixqlU7QBSEWyinuD89V91LY5HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:48:46:a1:17:82:2c:7a:9c:a5:34:93:5a:2d:73:bf:09:
a4:ed:1c:40:a4:ac:ce:89:4d:86:19:5c:7a:d9:e8:00:17:42:
82:ed:74:51:75:f4:00:22:48:4f:7d:96:c8:37:e3:45:02:bd:
88:de:f7:dc:1a:96:b9:6b:09:fc:af:b5:20:3c:a4:48:8a:67:
cc:0b:9b:30:a0:42:4f:56:a8:15:48:44:ad:19:b8:59:a6:45:
6f:40:9a:32:ff:a9:0f:e3:86:8c:bb:fa:ae:17:4f:f6:22:62:
2c:d6:db:23:a4:6a:83:1d:ba:42:fe:1a:f8:27:3b:bd:12:4a:
ea:60:be:a0:6f:7f:f5:07:42:17:39:d2:4c:e9:34:cf:53:76:
ed:18:1e:13:a2:a1:55:9e:96:ef:7e:25:9c:4e:b0:84:54:15:
9e:19:39:67:87:a2:21:71:10:15:84:65:b7:9d:67:ef:08:28:
2c:94:3e:02:eb:02:7e:f5:4a:01:74:15:b0:6a:ac:8a:b8:9c:
53:94:89:18:c5:d3:2f:61:25:25:58:77:f2:a4:4c:e7:e1:7d:
8f:63:9a:ac:55:90:39:50:68:dd:cc:fe:0d:96:bd:05:f5:7a:
ce:2d:48:d9:4b:c0:74:3b:fc:9d:c8:c5:08:59:bc:7c:dc:97:
ac:48:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:22 2026 by rpki-client