Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
File: J00tUy6xkrSkwQbK-s0azJzigmY.mft (raw, json)
Hash identifier: kenD4SMX1fmI5j7UQbB8fvkk3I4f1/OwC7epUNN5E14=
Subject key identifier: 82:7A:2C:6C:07:FD:A9:F8:9E:4B:2D:F4:FB:73:2A:D5:C8:70:C9:AC
Authority key identifier: 27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
Certificate issuer: /CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Certificate serial: 019EFEB0367B0CECA0DABAF29DEFB2D1E253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
Manifest number: 65
Signing time: Thu 25 Jun 2026 12:10:21 +0000
Manifest this update: Thu 25 Jun 2026 12:10:21 +0000
Manifest next update: Fri 26 Jun 2026 12:10:21 +0000
Files and hashes: 1: J00tUy6xkrSkwQbK-s0azJzigmY.crl (hash: srR9Ghb4MoVhXxVPAGsmgPwf56H9yKGCJkTyVQujdZM=)
2: WqTa0JhUlwD47GWUIjmOx-TScFM.roa (hash: IhUy25qRsqJskZ2tm1yEV5hor/VM+uGZR/a3T7YbtHc=)
3: aOYeOR8kNpGhgTGa065oNDHViOM.roa (hash: 1L5hbywEgKLH28eaUqvwqyWB43iSkzvvBeWctA6+Ewc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 08:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b0:36:7b:0c:ec:a0:da:ba:f2:9d:ef:b2:d1:e2:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d2d532eb192b4a4c106cafacd1acc9ce28266
Validity
Not Before: Jun 25 12:10:21 2026 GMT
Not After : Jun 26 12:10:21 2026 GMT
Subject: CN=827a2c6c07fda9f89e4b2df4fb732ad5c870c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:4d:8b:4a:75:a0:d0:9d:ff:e3:36:56:b2:
9b:d6:23:d2:c2:dc:95:3c:d0:69:7b:ee:4c:2b:9d:
8d:01:28:76:6a:45:6a:fd:5b:73:75:58:d3:6f:da:
61:26:b2:9f:86:bb:0e:1f:e5:e1:f2:d7:93:b0:b4:
19:8c:fb:20:7d:a5:13:4a:29:93:5a:ff:2b:df:9d:
0e:a5:3a:06:08:2e:dc:d8:c3:be:39:9d:00:dc:a8:
ff:a1:fb:37:25:bf:4a:6e:06:14:6c:38:88:29:8e:
09:5b:22:25:16:93:bf:c6:2e:f3:6a:1e:ed:a5:80:
3d:90:89:0d:b4:60:d1:09:74:6b:73:72:e8:e1:e7:
9e:72:01:d4:66:1f:41:d1:5f:23:b9:73:d7:1a:1d:
31:0b:38:af:8a:88:fb:30:81:46:65:4e:9c:9a:f9:
89:dd:65:93:05:ed:a2:f1:67:1d:c5:5a:5b:7e:4c:
6e:1e:9b:ef:58:66:a8:30:40:bc:77:83:d9:c6:da:
66:9b:77:0b:37:f3:2c:e3:b9:5c:69:fe:77:bb:43:
4e:21:02:b1:1d:4a:dd:b1:de:95:a8:39:41:02:40:
0b:ad:3a:54:ce:70:86:c2:47:da:d5:1c:8a:77:ee:
d2:34:e2:54:66:0b:a3:e5:b1:07:e0:a2:f0:4f:01:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:2C:6C:07:FD:A9:F8:9E:4B:2D:F4:FB:73:2A:D5:C8:70:C9:AC
X509v3 Authority Key Identifier:
keyid:27:4D:2D:53:2E:B1:92:B4:A4:C1:06:CA:FA:CD:1A:CC:9C:E2:82:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J00tUy6xkrSkwQbK-s0azJzigmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/567b26-cea2-4718-9ed9-1f11d6548e47/1/J00tUy6xkrSkwQbK-s0azJzigmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:29:79:ac:ad:87:13:e7:e9:2a:2d:f3:08:9c:f5:79:9e:21:
46:76:0a:31:28:51:88:6e:f1:f0:14:32:ed:1d:8e:9e:0c:d1:
39:9f:a4:ab:93:4a:4d:17:b0:bc:a9:49:54:7e:40:50:7d:d3:
25:d0:18:0f:c7:d5:f8:7e:52:61:f6:b9:0a:79:37:b9:c2:6f:
49:25:34:50:66:be:b4:c8:62:71:7f:1d:6e:c7:27:f4:2a:63:
05:e1:f1:44:a7:c2:4d:b3:dd:cf:a4:20:cc:e1:f2:39:02:73:
fd:9f:fc:3f:3c:5c:6c:ba:c8:ee:1c:42:9a:57:f0:df:ef:de:
22:87:fd:1d:5a:a9:c3:d5:03:73:f1:af:7d:63:7a:41:fd:1f:
20:51:f3:5f:c5:1e:58:12:f1:bd:7c:e6:03:f7:46:57:49:9f:
82:6a:a1:27:e7:6f:4e:34:1f:c1:a8:43:a9:40:1b:5f:f3:f6:
8d:da:2d:f4:ac:80:38:6d:82:15:3b:78:5c:2b:6a:d1:c9:13:
8d:37:a7:ab:4c:b1:d7:a1:10:34:75:08:94:71:0f:f6:ff:aa:
89:c4:d3:da:63:93:5d:75:d8:2e:e1:b0:eb:46:f7:cd:ac:79:
8c:b9:05:f7:cc:2d:12:68:54:96:28:fe:4f:83:de:0f:91:fd:
74:5f:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 15:12:41 2026 by rpki-client