Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: l+dlx7VgSCfuSKM3vm8oyE++hF+Ch0NFBPr4vOkj/uU=
Subject key identifier: 14:6A:AA:1C:10:B4:14:AF:7A:7F:E6:17:3F:2B:6F:11:F5:50:B0:3D
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019EB9C649A3435A34C73BC7AD34D70431EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 03:00:40 +0000
Manifest this update: Fri 12 Jun 2026 03:00:40 +0000
Manifest next update: Sat 13 Jun 2026 03:00:40 +0000
Files and hashes: 1: 7T34cJ5eXiFw90xTsWzMsemczZ8.roa (hash: NcAToPYCid0elghK3kb2vGJyDpECmqdoqEPgawgtyeg=)
2: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: mgNAcIEEE5DNnAjlGy0vuooyiOWgrua4vCGrFZhEhGs=)
3: _Sg-Ok67OaoyeP-hghZrij9Q1F8.roa (hash: lBGTEGK+kOeRMB1Hj50S1sF2hEOSmV/Hxb+g9yqzKMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:49:a3:43:5a:34:c7:3b:c7:ad:34:d7:04:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Jun 12 03:00:40 2026 GMT
Not After : Jun 13 03:00:40 2026 GMT
Subject: CN=146aaa1c10b414af7a7fe6173f2b6f11f550b03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:66:ce:bb:12:3f:af:ef:6e:a7:d4:58:cc:
0f:42:b0:6d:96:41:54:c1:7c:5d:c2:34:42:09:bb:
df:be:9f:9c:0f:e4:5f:a4:4b:05:80:e2:2d:75:bf:
d0:75:76:c2:4d:bd:e3:0b:a1:6f:f0:a4:ae:2a:93:
0f:ae:8c:70:9b:15:55:b2:86:7b:a5:1e:b1:bc:fc:
56:d0:1a:e7:38:72:d6:38:db:92:5e:cc:90:ee:da:
6b:d6:ef:5a:ab:59:14:e1:40:fd:c9:01:5d:38:36:
b8:0e:98:5a:1c:99:e8:63:00:1c:86:2f:85:cf:bc:
c9:5e:bc:9a:e5:44:c8:d4:9e:4a:7c:41:c6:e8:64:
b4:ab:bb:29:0f:eb:e0:33:27:e2:2e:9f:82:57:20:
6f:b9:6e:c0:41:45:ac:28:5d:20:ab:ab:0c:76:c2:
df:77:00:74:d8:c7:46:67:71:6f:de:ac:65:82:da:
0d:3b:81:9e:2e:14:0b:16:da:16:7c:13:d6:87:f3:
88:dd:3b:92:90:9f:60:52:05:52:d0:03:16:90:90:
98:93:59:60:54:15:f4:67:3a:31:1c:26:54:c0:c0:
a1:42:be:8a:86:73:04:d2:19:3a:09:0c:0b:df:a8:
e9:c5:c9:2e:f8:eb:d5:9f:87:a6:d4:3b:48:3d:06:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:AA:1C:10:B4:14:AF:7A:7F:E6:17:3F:2B:6F:11:F5:50:B0:3D
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:05:cc:75:03:24:6e:5d:e6:fd:01:9f:c7:bb:0b:cf:b6:ec:
8e:63:89:b6:fa:ea:07:18:a5:38:be:27:a3:67:99:43:74:c3:
c4:d1:33:04:3a:99:7a:b8:5e:7a:e8:61:4a:ea:39:9d:07:72:
79:a6:35:2d:6a:9b:7c:2e:4b:2d:da:9c:cf:29:56:17:74:45:
20:8f:83:77:2a:d9:4f:e5:cb:c2:4d:05:56:e8:56:f3:6f:15:
22:92:3f:e8:45:79:f8:a9:ae:38:29:94:64:6d:96:08:ad:0b:
38:1c:0e:8f:22:98:cb:55:be:2e:aa:c5:c2:dc:ee:25:c3:d2:
20:df:5f:7b:6f:ec:be:ae:d4:0c:a6:55:f9:b1:a2:12:4f:66:
01:4a:c7:8c:b2:02:ba:b7:e2:e6:4b:11:25:67:19:d6:c0:c5:
fa:dd:bc:83:d6:e3:bc:66:32:52:8e:2b:e8:bf:a6:07:90:ae:
ef:02:9b:60:fc:8a:02:61:bf:4b:34:2b:ec:81:52:6c:16:cf:
8b:6f:97:d8:2a:05:db:fa:84:75:45:dd:88:88:43:dd:cd:4a:
e4:9f:bb:3a:5f:6c:c1:f2:3a:0a:f9:49:7f:f0:aa:33:0c:52:
98:40:93:01:15:fd:22:80:cb:b9:82:b9:e6:36:97:06:8b:26:
82:85:c7:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xkmjQ1o0xzvHrTTXBDHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmRlYzk5ZDg5NTY1YTYzNGE3YjJjNTQwMWZlZDdhYzQ3
YmYyMzIwHhcNMjYwNjEyMDMwMDQwWhcNMjYwNjEzMDMwMDQwWjAzMTEwLwYDVQQD
EygxNDZhYWExYzEwYjQxNGFmN2E3ZmU2MTczZjJiNmYxMWY1NTBiMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPNmzrsSP6/vbqfUWMwPQrBtlkFU
wXxdwjRCCbvfvp+cD+RfpEsFgOItdb/QdXbCTb3jC6Fv8KSuKpMProxwmxVVsoZ7
pR6xvPxW0BrnOHLWONuSXsyQ7tpr1u9aq1kU4UD9yQFdODa4DphaHJnoYwAchi+F
z7zJXrya5UTI1J5KfEHG6GS0q7spD+vgMyfiLp+CVyBvuW7AQUWsKF0gq6sMdsLf
dwB02MdGZ3Fv3qxlgtoNO4GeLhQLFtoWfBPWh/OI3TuSkJ9gUgVS0AMWkJCYk1lg
VBX0ZzoxHCZUwMChQr6KhnME0hk6CQwL36jpxcku+OvVn4em1DtIPQauRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRqqhwQtBSven/mFz8rbxH1ULA9MB8GA1UdIwQY
MBaAFCa97JnYlWWmNKeyxUAf7XrEe/IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5Yzct
N2YyMDEyMTJkODgzLzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jNTdkYzItY2ZhOS00MmI5LWI5YzctN2YyMDEyMTJkODgz
LzEvSnIzc21kaVZaYVkwcDdMRlFCX3Rlc1I3OGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxAXMdQMk
bl3m/QGfx7sLz7bsjmOJtvrqBxilOL4no2eZQ3TDxNEzBDqZerheeuhhSuo5nQdy
eaY1LWqbfC5LLdqczylWF3RFII+DdyrZT+XLwk0FVuhW828VIpI/6EV5+KmuOCmU
ZG2WCK0LOBwOjyKYy1W+LqrFwtzuJcPSIN9fe2/svq7UDKZV+bGiEk9mAUrHjLIC
urfi5ksRJWcZ1sDF+t28g9bjvGYyUo4r6L+mB5Cu7wKbYPyKAmG/SzQr7IFSbBbP
i2+X2CoF2/qEdUXdiIhD3c1K5J+7Ol9swfI6CvlJf/CqMwxSmECTARX9IoDLuYK5
5jaXBosmgoXHSQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 13:24:11 2026 by rpki-client