Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: d7rocs5acxhdC+4JGyzRiUEJnLimdBiSUzPA/MegEq4=
Subject key identifier: 6D:6F:93:BD:BA:6F:16:99:46:D5:73:74:67:F0:05:77:D3:80:B1:E6
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019F134165A1596AD9DE036410DFCB558BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 125F
Signing time: Mon 29 Jun 2026 12:01:20 +0000
Manifest this update: Mon 29 Jun 2026 12:01:20 +0000
Manifest next update: Tue 30 Jun 2026 12:01:20 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: ebovqJfDSgs8Ar6mukFGRiOzjKxLeTDUVVFlimQMgmM=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:41:65:a1:59:6a:d9:de:03:64:10:df:cb:55:8b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jun 29 12:01:20 2026 GMT
Not After : Jun 30 12:01:20 2026 GMT
Subject: CN=6d6f93bdba6f169946d5737467f00577d380b1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:53:97:5c:f0:55:8b:4d:f3:3d:24:f4:4c:
0d:27:4f:b7:75:3e:4c:b3:82:df:c8:69:07:05:ec:
36:d5:aa:9e:20:c9:4a:e5:0c:2e:2f:ca:96:27:7d:
43:d8:d0:46:4a:e8:1e:a8:13:90:75:bb:d9:20:cf:
6f:ca:d4:d9:ad:85:98:d0:4e:43:40:8b:6e:39:7a:
f5:7d:11:96:d3:ec:04:8e:16:e2:68:23:34:cf:cc:
53:77:d5:0b:cc:4b:71:08:15:60:fe:a4:de:08:e7:
bc:37:d9:02:7e:7b:a3:fa:66:1d:16:13:ba:53:98:
99:60:7c:13:38:6f:c5:2d:af:e5:fa:cf:9d:da:71:
39:31:b4:60:d9:13:f7:18:e2:d1:5e:22:96:d1:fc:
db:93:d6:35:01:40:f0:33:2f:0f:8a:51:e7:7c:f6:
48:40:e4:89:58:12:d4:4f:c3:8a:4c:d7:65:69:48:
aa:6c:52:17:25:af:a0:a9:d5:08:57:c6:2b:ac:5a:
ba:e8:bd:0e:ca:e9:63:9b:35:89:4f:c2:b2:ee:7e:
d5:eb:bd:97:c1:8e:69:f0:4c:d3:d2:ce:83:ce:dc:
7c:e1:18:d6:ac:36:3a:13:9f:1d:a6:83:02:0e:94:
01:5f:32:cb:75:45:c2:b5:6f:1c:6a:c8:63:5c:6e:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:93:BD:BA:6F:16:99:46:D5:73:74:67:F0:05:77:D3:80:B1:E6
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e5:c7:94:2c:ed:31:f7:01:87:8f:1f:3a:2d:5a:32:99:f6:
3e:9b:01:d3:9a:22:fc:c0:d8:ac:55:e1:ce:92:fb:f1:2f:d5:
6e:36:22:14:33:29:a8:e0:3b:ec:2f:0a:c1:8e:4a:42:04:43:
96:4f:b9:7c:ce:70:06:10:47:1c:fc:30:11:e6:ae:1f:6a:b1:
a9:c6:df:0e:c5:14:ae:69:ec:9e:f9:1f:43:a0:d5:82:51:fb:
65:5f:71:15:30:b5:06:12:c9:13:ce:a8:68:8d:d2:e2:94:61:
69:60:72:bc:35:7a:9e:ae:95:09:64:f3:02:0a:14:e4:22:a6:
f4:cc:63:9b:b5:01:24:b9:94:b0:08:a2:37:f0:88:70:95:66:
18:e0:17:4e:1f:c6:7b:5c:7f:5b:7b:63:06:be:3a:0a:b3:8b:
34:b1:4a:f2:95:ab:b5:78:d2:6a:db:4a:f4:b8:29:fc:45:84:
3e:d1:c0:cf:18:0e:72:8a:8b:52:3e:df:61:49:37:3f:b1:7b:
49:9d:5a:a6:9b:bb:6c:20:e0:31:f3:6a:1d:ab:90:54:f7:77:
d2:5f:b7:c7:80:37:92:a6:fc:56:16:63:98:69:cd:46:1f:8a:
35:a4:b4:6f:e2:d0:53:80:58:75:f8:0b:80:ce:97:08:8a:11:
63:ba:02:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TQWWhWWrZ3gNkEN/LVYuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjYwNjI5MTIwMTIwWhcNMjYwNjMwMTIwMTIwWjAzMTEwLwYDVQQD
Eyg2ZDZmOTNiZGJhNmYxNjk5NDZkNTczNzQ2N2YwMDU3N2QzODBiMWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0JTl1zwVYtN8z0k9EwNJ0+3dT5M
s4LfyGkHBew21aqeIMlK5QwuL8qWJ31D2NBGSugeqBOQdbvZIM9vytTZrYWY0E5D
QItuOXr1fRGW0+wEjhbiaCM0z8xTd9ULzEtxCBVg/qTeCOe8N9kCfnuj+mYdFhO6
U5iZYHwTOG/FLa/l+s+d2nE5MbRg2RP3GOLRXiKW0fzbk9Y1AUDwMy8PilHnfPZI
QOSJWBLUT8OKTNdlaUiqbFIXJa+gqdUIV8YrrFq66L0OyuljmzWJT8Ky7n7V672X
wY5p8EzT0s6Dztx84RjWrDY6E58dpoMCDpQBXzLLdUXCtW8cashjXG65DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1vk726bxaZRtVzdGfwBXfTgLHmMB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeXHlCzt
MfcBh48fOi1aMpn2PpsB05oi/MDYrFXhzpL78S/VbjYiFDMpqOA77C8KwY5KQgRD
lk+5fM5wBhBHHPwwEeauH2qxqcbfDsUUrmnsnvkfQ6DVglH7ZV9xFTC1BhLJE86o
aI3S4pRhaWByvDV6nq6VCWTzAgoU5CKm9Mxjm7UBJLmUsAiiN/CIcJVmGOAXTh/G
e1x/W3tjBr46CrOLNLFK8pWrtXjSattK9Lgp/EWEPtHAzxgOcoqLUj7fYUk3P7F7
SZ1appu7bCDgMfNqHauQVPd30l+3x4A3kqb8VhZjmGnNRh+KNaS0b+LQU4BYdfgL
gM6XCIoRY7oCLQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:46:33 2026 by rpki-client