Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: MSL70Dnq0vt7BdA4+c0QElHAdC0XdJQwK/ew9Kz2FvQ=
Subject key identifier: 66:86:42:DE:70:CF:70:8F:4E:0A:B5:18:58:BB:ED:00:02:E3:7E:3F
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019F189ED974FFD3B61D94FEFECBE52C1646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 11FC
Signing time: Tue 30 Jun 2026 13:01:31 +0000
Manifest this update: Tue 30 Jun 2026 13:01:31 +0000
Manifest next update: Wed 01 Jul 2026 13:01:31 +0000
Files and hashes: 1: hJ4yBwRAkPSn0hZDZUYf9X3bnuA.roa (hash: SieYkKpzIy6oq5VVbN7rTFUvyMh99g+Bi6wzQEIEdkQ=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: f+M/xDx6vYKxUkkXBu3hEvYAAKBfhILeLWVZQ1pnEgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:d9:74:ff:d3:b6:1d:94:fe:fe:cb:e5:2c:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Jun 30 13:01:31 2026 GMT
Not After : Jul 1 13:01:31 2026 GMT
Subject: CN=668642de70cf708f4e0ab51858bbed0002e37e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:9c:c3:3d:69:0b:a6:84:f8:1e:27:c3:6b:
8e:a0:77:84:82:28:4a:a5:33:f2:d5:29:14:e3:e9:
83:ca:01:e7:74:22:56:85:e1:27:f5:6b:e0:d5:7b:
a7:d9:90:d7:13:15:b6:30:b6:15:d1:2a:42:e5:b1:
5b:73:d5:f5:69:17:fb:60:41:4d:7c:7f:64:22:e9:
38:2f:71:69:4e:fd:23:19:7c:aa:75:31:27:f8:f5:
0b:b9:86:d3:7c:fb:72:5e:14:c5:30:e9:4d:06:5f:
2b:10:ff:fd:3a:c9:67:26:cf:48:80:6b:06:ce:c8:
ee:77:71:6c:76:c8:21:de:2a:bb:43:7a:00:1b:92:
c2:7a:8f:bc:7e:a2:c0:27:cf:06:44:96:50:36:21:
7f:b1:ee:7f:b8:bb:cb:97:a7:0b:74:67:c1:2a:07:
1b:8d:9e:46:a3:c9:0a:7f:83:17:ae:e7:fd:ef:22:
40:e1:c0:6f:08:c6:b2:47:b8:42:e2:6c:74:95:c6:
5f:d1:86:04:16:7e:79:fe:e1:86:a5:81:7b:63:18:
db:6b:4f:e6:4d:95:00:8e:ed:8d:47:cb:10:78:c5:
c1:39:92:a7:7e:70:e7:2e:be:dc:5a:88:9e:8e:17:
e4:68:19:9c:4a:28:d5:6d:22:2c:b0:cd:8c:33:1e:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:42:DE:70:CF:70:8F:4E:0A:B5:18:58:BB:ED:00:02:E3:7E:3F
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:07:6b:0a:d7:e9:14:d8:ec:13:7e:59:7b:f6:a0:7e:2b:ca:
12:03:d5:96:0d:6c:55:e8:61:3e:22:61:4d:71:dc:8b:26:9f:
f4:77:d4:c1:22:cc:e3:e6:2a:6b:5b:70:12:8a:f9:b4:8a:66:
45:a1:fa:ba:a2:5b:58:e0:8d:38:c7:58:1a:cf:10:aa:11:57:
d8:f9:27:e0:49:e9:0f:91:ed:8e:22:31:a6:d9:ee:3c:63:01:
be:84:51:b0:07:b0:6a:53:ac:b4:8c:30:04:0f:65:f3:c8:0f:
d2:15:7e:95:30:61:27:f5:0e:e9:81:e3:51:8f:d2:fb:66:00:
ce:82:e0:17:d4:8c:78:3c:4d:d9:f9:81:5f:68:c4:f9:38:f5:
80:84:67:f1:25:7f:dd:7f:9d:78:b6:20:ed:3d:99:b8:33:35:
74:db:e8:a6:66:4f:0b:a3:d6:bd:74:7a:ac:f8:3c:84:f3:4e:
3c:97:f8:6e:46:62:c4:0d:a8:73:bd:8f:35:e8:3d:d7:ad:0d:
9d:a2:fb:7f:d5:c8:92:02:c2:13:c2:4d:85:e7:3c:ce:4b:b0:
79:2a:0e:29:2b:2a:b8:27:63:9c:6c:4e:d4:07:e2:24:9f:8c:
44:3e:70:58:63:91:3a:07:b8:ba:01:54:c0:17:67:73:4a:b2:
b5:a5:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:27 2026 by rpki-client