
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: 1XNPMf2g5t61r7RKv9iLfTJaVgSfcHOqfQ86b/ndEMw=
Subject key identifier: DC:6A:D2:35:DE:5C:96:0F:2C:DC:61:E4:10:FC:4D:C4:BE:31:88:D2
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019F122E7E35C9532687CCC627CE9321BCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 12B3
Signing time: Mon 29 Jun 2026 07:01:04 +0000
Manifest this update: Mon 29 Jun 2026 07:01:04 +0000
Manifest next update: Tue 30 Jun 2026 07:01:04 +0000
Files and hashes: 1: NXxqC7ZgztzVzcexbun7_Lf1ORI.asa (hash: hDWGAaxWxsEMgjQ3LkLeP6k+P9+38fD0qphy6cwfTe4=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: 7b0CZwAGJXyVR6JjL8+d6RcRyhCaDoEjKCoMkZvaEok=)
3: r_qY6TIFDc-2C46p1mCYOq9l7j4.roa (hash: eoGRneGgUw90MpEMiAODUHzFCL/oN3PFTCCGwv4cx5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:7e:35:c9:53:26:87:cc:c6:27:ce:93:21:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jun 29 07:01:04 2026 GMT
Not After : Jun 30 07:01:04 2026 GMT
Subject: CN=dc6ad235de5c960f2cdc61e410fc4dc4be3188d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:d7:3a:34:d7:13:56:59:24:8c:08:51:3b:
ba:d4:33:27:40:78:13:a0:18:29:fc:0b:ef:13:79:
f6:80:04:0a:20:53:04:b3:4f:e6:67:0b:5a:2f:53:
d6:1d:eb:a6:e0:37:1a:08:6c:e9:46:58:8a:65:81:
e2:8c:9d:e9:4c:d9:e5:f1:1c:85:44:2f:93:76:ec:
d9:74:53:43:4f:ab:e9:3c:29:73:2f:8c:67:f7:90:
48:fc:d2:1b:60:87:1f:b4:e8:68:5b:34:f8:19:be:
6c:c3:d5:4d:c8:7f:7c:fe:82:ba:9e:a7:4a:e8:96:
ff:0f:11:25:3d:b3:2d:0c:2e:ae:8a:2c:a8:db:eb:
26:4b:4f:4d:1b:1c:4b:d0:34:af:02:18:81:88:4b:
8d:c7:d5:50:5c:2c:44:18:9e:80:8b:48:b4:0c:09:
5b:9c:57:22:c6:a3:1e:fd:2f:3c:33:6c:27:eb:6c:
5a:f0:26:8f:c2:df:25:22:fa:1c:d3:79:69:f1:b5:
8d:71:4c:1c:b9:a7:f1:1f:f1:87:ac:5b:b9:a2:95:
80:f3:0e:89:46:b4:cf:97:ff:9a:79:62:b2:8d:cc:
bb:ef:4f:a1:8d:bf:25:7e:52:dc:58:17:ea:a0:c2:
53:ef:e6:cc:61:12:2d:92:35:2a:40:ef:d3:7f:b1:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6A:D2:35:DE:5C:96:0F:2C:DC:61:E4:10:FC:4D:C4:BE:31:88:D2
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3d:e4:59:eb:41:ca:31:b5:45:b6:9d:2e:69:5b:93:76:73:
71:ea:2a:21:21:6f:ee:5a:df:54:16:cc:e7:5c:d7:3e:e0:11:
b8:0a:32:38:5c:53:06:a4:07:12:99:21:58:f0:54:4f:ec:fa:
2e:b9:cb:26:26:bd:11:d1:aa:d9:45:6c:a9:e9:de:7d:ed:7b:
8f:99:74:5c:18:a0:eb:e2:76:58:00:16:4f:49:2a:00:da:55:
cb:a5:60:e2:c6:0d:26:e3:cf:fc:e9:0c:38:35:2e:dc:9b:76:
a8:62:9a:e7:3f:5a:66:aa:b2:a7:8c:9b:44:47:97:d8:ba:48:
5e:76:90:d9:74:c8:d9:5b:a7:8d:91:be:6a:64:08:bd:68:a1:
27:5d:3d:d8:89:d9:80:95:46:db:a7:18:82:5e:c4:f3:18:d9:
1e:70:52:c0:6f:e7:1c:91:cb:b8:0e:ec:da:72:77:bc:44:63:
ea:10:44:21:54:bc:3e:ff:c9:c0:50:14:0d:19:63:f8:40:5c:
9e:54:12:7f:60:44:ae:1a:db:6d:84:35:a2:0b:b8:65:8c:8c:
d8:a1:e9:b4:a8:0e:54:61:8d:ed:23:ae:4f:56:56:4a:98:cd:
cd:e1:66:e7:ef:2d:97:5a:4b:8f:81:3d:fd:a3:33:04:f5:79:
23:4b:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:30 2026 by rpki-client