Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: S59hEEK28dm6XZ9dDWHt1KpQXgykqZ42oj+VpugIWoA=
Subject key identifier: EC:07:DD:12:5E:D9:CE:C0:D7:72:66:5A:D1:A3:61:4B:F0:6D:6A:FF
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019F0F9B76E6813DEF6F969E15C873DBCBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: 0368
Signing time: Sun 28 Jun 2026 19:01:14 +0000
Manifest this update: Sun 28 Jun 2026 19:01:14 +0000
Manifest next update: Mon 29 Jun 2026 19:01:14 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: bU8MAVLYwQa5AZdu67W7tLPH+Sv8fd1OyJE8y0fOZi4=)
2: LPtgrCTtvqxu3cjuNnJKHmVe1hU.roa (hash: BGV23TnfOPa93rWNrPOH2klHvaD0qSg8RA6zxqAnbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:9b:76:e6:81:3d:ef:6f:96:9e:15:c8:73:db:cb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Jun 28 19:01:14 2026 GMT
Not After : Jun 29 19:01:14 2026 GMT
Subject: CN=ec07dd125ed9cec0d772665ad1a3614bf06d6aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:33:58:0e:f2:99:d4:4b:25:e8:67:9f:e2:
33:39:21:c9:62:37:6e:97:dc:52:ff:52:8f:c1:fc:
82:e5:2d:cc:97:f0:92:5f:aa:e7:29:d9:70:89:01:
8b:e6:87:d7:53:2f:f1:07:18:21:d5:ca:48:cb:35:
81:d1:f0:6a:37:e0:ce:01:cc:cf:f8:45:12:6f:21:
db:3b:0a:f7:f0:4e:1a:fe:74:79:8a:cc:2d:94:01:
12:da:4a:ef:5c:f0:f6:f0:32:58:7c:ac:fd:fa:0b:
8c:16:48:23:e9:d6:61:78:c6:46:fb:d9:df:f0:6f:
0c:e9:06:53:33:e3:4e:61:17:5e:0d:74:af:83:76:
8a:d5:bb:30:67:df:e0:72:e0:f4:f0:b2:f1:8c:98:
03:2a:ef:09:9d:2b:e8:fb:2d:b4:7e:87:2d:71:68:
0a:a0:f3:cb:5b:56:e9:7b:3a:3c:b3:01:2b:00:ea:
a6:9c:2a:64:8b:88:bc:f5:5b:10:9c:43:bd:aa:bb:
33:39:5f:d5:93:40:c9:e7:bd:85:03:a8:8a:d9:ca:
43:92:93:b0:bb:84:56:32:af:a9:66:df:7c:0c:58:
1c:06:2d:57:23:41:f3:20:a3:36:66:b9:75:d4:c3:
ee:5d:98:75:0c:92:c4:31:79:e9:eb:c7:f8:81:7f:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:07:DD:12:5E:D9:CE:C0:D7:72:66:5A:D1:A3:61:4B:F0:6D:6A:FF
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ef:ab:16:4f:96:01:44:82:4a:4e:ae:55:2b:8e:8d:a8:8b:
1a:82:70:79:12:e3:00:e7:b9:22:ab:cf:84:30:75:83:4f:fa:
da:11:09:56:ef:43:8c:54:a3:b2:f9:0b:58:50:93:76:d9:f3:
f4:e8:bf:e7:04:f7:d0:cd:dd:52:51:ac:8f:94:78:48:d0:67:
40:4b:c5:d2:bd:a4:f5:82:33:7f:42:c2:41:3f:b7:ea:67:a3:
e5:e1:df:fc:68:91:7a:54:31:05:f9:3e:a5:b8:c9:a4:e9:e1:
16:6e:c3:cf:0c:fb:94:f4:ca:cd:d2:2f:4d:fc:27:c0:db:ab:
99:b4:d6:6e:09:7f:34:65:83:57:12:3f:09:c1:c9:55:35:6a:
c9:68:1b:a6:b9:5b:2e:92:1d:ff:eb:62:5a:24:15:62:e6:cb:
48:6b:01:2a:1d:a8:1d:de:5d:0d:b7:f2:0f:2b:a2:8d:fe:44:
44:07:85:84:90:98:d9:5c:d5:d7:38:ae:ed:17:f6:0c:25:b0:
b7:d9:80:5e:e5:ec:c1:ce:f2:50:be:09:5f:ac:32:78:5f:15:
85:d9:83:9b:d1:04:ea:01:5b:b8:51:94:de:61:2d:47:87:2e:
e2:f5:a3:70:ad:9c:ad:b3:99:29:8a:f6:9d:ba:d0:0d:6b:fd:
2a:dc:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 04:00:20 2026 by rpki-client