Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: yXopttnEsRNx6YyDmxH2cSMqpj3QsfDhzoTUQIC/3Ss=
Subject key identifier: 60:4B:E7:60:D2:A6:2B:F6:43:9E:9B:01:8B:14:83:1B:73:94:B3:E1
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019EBE10A5A1F541B91821B641ABBE99E650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 03F3
Signing time: Fri 12 Jun 2026 23:00:22 +0000
Manifest this update: Fri 12 Jun 2026 23:00:22 +0000
Manifest next update: Sat 13 Jun 2026 23:00:22 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: Id/Kqx/zrIsd++oG0S6JVpjdiOs4pJuFbS83TfY7KbU=)
2: xqDiTE82VfBKD9rVWVzUaZpsTPI.roa (hash: 9m/z8uOFFSLz+xo2V7/xt7po1ubSIknfY+Jf0uQ8ei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 16:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:a5:a1:f5:41:b9:18:21:b6:41:ab:be:99:e6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Jun 12 23:00:22 2026 GMT
Not After : Jun 13 23:00:22 2026 GMT
Subject: CN=604be760d2a62bf6439e9b018b14831b7394b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f9:97:51:7d:fb:54:c2:87:4d:b1:28:e4:fc:
61:61:ac:e5:6f:89:df:a5:09:3b:25:56:09:f4:6d:
39:52:b6:f8:40:74:60:18:5a:09:0d:db:25:e4:98:
13:2c:06:e5:b6:9f:d1:c8:f6:71:34:5f:bd:5f:6f:
5a:9b:57:b1:1b:05:3b:49:74:fc:65:77:36:ed:a1:
e6:a7:fb:7a:2e:43:e5:0d:ec:e7:f7:4b:07:fe:d5:
24:c6:06:ad:c0:06:2f:ed:c2:26:d7:5d:09:88:75:
11:11:a0:2f:df:83:64:7c:0d:d1:95:18:16:26:ca:
0f:bd:24:7f:79:81:bd:c2:50:26:f9:65:45:d4:a5:
4c:2a:d4:4c:14:c4:55:2d:22:a9:3f:82:5b:bf:58:
c7:32:86:ea:23:f0:16:a1:7b:0c:91:e8:77:89:34:
53:ac:b8:79:c9:15:59:04:af:56:43:51:a0:92:bc:
23:0a:81:3f:28:59:4f:e6:f8:27:47:bf:c2:cb:25:
99:c5:aa:3e:6d:da:e0:e4:79:0b:f0:16:f3:09:98:
a9:49:cf:96:c5:fc:ee:64:e3:f7:dd:a6:a1:fc:ae:
c6:18:c5:ee:ca:dd:42:11:4a:c3:dc:5f:68:31:59:
89:20:a2:c6:73:a0:b1:9c:92:a7:37:99:b0:cb:95:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:E7:60:D2:A6:2B:F6:43:9E:9B:01:8B:14:83:1B:73:94:B3:E1
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c1:af:d1:75:1d:b4:df:66:eb:5e:1a:06:92:a8:f5:88:69:
3f:1a:78:0c:c4:bb:db:f3:eb:ca:27:f1:6f:9d:15:4c:b7:87:
0f:1b:25:06:d8:6b:b8:4c:a2:92:59:52:58:48:f7:80:e0:b6:
ab:77:0f:78:8d:7a:e9:b2:ad:83:d2:67:08:97:c4:dd:c1:cb:
bd:4d:0c:80:f6:c9:29:42:a7:d2:70:78:d5:f2:80:03:25:87:
2d:8e:12:cd:db:8f:8f:8b:67:66:fc:d9:73:90:47:e8:f3:4c:
20:92:47:24:be:d3:05:a0:e0:78:f1:4f:67:8c:aa:65:ca:c3:
b1:5c:28:52:d2:32:6c:c0:e6:b5:a7:84:f4:06:fd:73:5f:a8:
cd:b0:5f:63:8d:39:04:e9:85:e5:fc:0c:e2:fc:e0:8b:75:3e:
09:c8:43:07:b5:07:36:4e:f1:5c:d2:7f:0c:e3:53:ec:43:c9:
94:40:98:ef:3e:c8:ff:4f:dd:24:e7:0b:64:de:a6:6e:5f:e4:
e2:9f:a5:2e:25:08:37:b6:10:e8:e6:e2:d1:41:f9:27:f1:0a:
8b:ff:a1:3f:e7:94:78:ed:04:74:5c:40:a1:48:33:17:43:cf:
17:b4:ea:cf:11:28:68:7f:3f:02:17:d6:67:89:4f:f4:1c:e9:
26:f5:fe:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:21:56 2026 by rpki-client