Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: 0IQwG3a+4GP06o/t9mKOizVREC87Q6znF+KldhNGAv0=
Subject key identifier: 71:6A:8C:6E:79:FC:F7:7F:4E:39:F8:9B:3E:9A:47:E4:63:3D:82:A0
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019EBB0FDE86523B1D0148FC4DFBE6EF0A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 09:00:39 +0000
Manifest this update: Fri 12 Jun 2026 09:00:39 +0000
Manifest next update: Sat 13 Jun 2026 09:00:39 +0000
Files and hashes: 1: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: NuaEehZOEfdIvSRTEvQNhEhFbu15jb3QnYd0qvn0p0E=)
2: zSwQGbw5eUrS_VmyS0eNcuYgWQM.roa (hash: KhztEjdKKCUwFxaKlQfytzrfu+bmSSNX/+mFfUrHfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:0f:de:86:52:3b:1d:01:48:fc:4d:fb:e6:ef:0a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Jun 12 09:00:39 2026 GMT
Not After : Jun 13 09:00:39 2026 GMT
Subject: CN=716a8c6e79fcf77f4e39f89b3e9a47e4633d82a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:d1:8d:2c:d8:75:01:ff:1c:e9:3d:a0:4f:
2e:e8:6c:6d:a8:dc:77:57:49:e5:88:ee:0a:50:1e:
1a:7e:c9:8e:b2:e3:0b:8c:5b:38:8c:ff:2d:c0:a6:
33:40:8c:8e:76:28:8e:11:08:8b:6f:c2:69:27:8a:
ad:31:f7:23:03:a6:20:40:ee:74:f7:2e:b1:86:7b:
2a:a0:16:8a:a4:7a:2c:11:79:67:0f:42:f0:f6:10:
fd:0a:16:f5:9e:08:1c:04:89:48:d0:4f:ff:6f:da:
db:d4:fa:a5:50:25:2f:0d:12:10:e1:7a:85:01:09:
a0:62:77:fd:74:e1:32:ae:41:68:02:56:cc:51:bf:
bf:dd:a5:27:34:a2:b6:a5:d8:6b:3a:b9:0c:92:8c:
e8:b0:79:38:e3:df:a9:30:39:c3:de:e5:9c:4a:ac:
15:15:34:a6:c2:69:86:28:04:02:12:c3:69:5b:ab:
4f:16:cc:7b:c4:e3:a9:58:e9:fd:e1:b6:78:60:87:
92:16:09:30:07:49:bc:19:33:56:2c:7f:82:c4:97:
bd:77:b6:34:a0:54:e1:4c:68:da:d0:59:c9:51:f0:
7d:11:af:4e:0a:cb:a2:3a:c9:4c:6f:97:fe:3a:5f:
a2:87:b8:dd:f3:9b:6d:bd:c8:a6:54:a4:31:af:1f:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:8C:6E:79:FC:F7:7F:4E:39:F8:9B:3E:9A:47:E4:63:3D:82:A0
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:eb:7c:6a:41:76:a6:f7:4e:7b:3f:c6:6b:48:90:94:da:eb:
40:07:da:0a:ba:80:09:25:9c:63:2b:3c:cf:60:81:97:8a:44:
18:a4:49:87:00:85:0f:0b:56:21:36:e3:c5:16:67:3a:21:6b:
ea:3a:99:d6:14:c9:d9:6e:81:17:3f:16:eb:c5:4c:b1:70:87:
d5:2a:db:44:c0:dd:90:e4:31:09:8c:0e:f0:d3:37:57:e3:fc:
76:24:b4:be:87:13:d3:e8:d8:dc:8f:e5:11:3f:a6:65:69:76:
d8:34:5e:6a:7f:1a:a9:dc:49:73:8e:91:5a:31:42:f7:44:9c:
de:bd:6f:5c:0b:f5:67:f8:f8:90:4c:9b:71:82:aa:68:b6:78:
dd:b0:b3:15:d0:ab:24:c1:f0:c2:90:26:7d:b0:ca:83:7e:c4:
17:93:ad:35:72:d9:f0:ac:ac:ed:bd:0e:4a:38:29:56:f4:ce:
d5:d9:08:56:3e:2a:bf:32:f4:d2:c0:56:53:ca:95:e1:23:de:
40:f1:c6:36:81:0a:e1:9f:21:15:ce:7e:8e:4c:50:f6:bf:56:
cb:ca:1f:97:fe:96:a7:4f:40:e4:00:0a:5d:e4:03:e7:5a:06:
4b:ba:fd:d8:30:89:b0:c1:e7:50:ef:7f:da:8d:76:f7:cd:20:
86:38:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:50:29 2026 by rpki-client