Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
File: J5M1a3LBBBztecoRRZUreMtGb8A.mft (raw, json)
Hash identifier: uMhYyg9ysh6gJPRQkqKgO5Xd0kK9QahDIkR/yUW6zHk=
Subject key identifier: 34:AD:78:43:15:20:95:62:8B:51:2C:8E:B8:1C:10:AA:0C:4A:44:E2
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019EC0DB09AA963096BB2EAA414AAA748F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
Manifest number: A0
Signing time: Sat 13 Jun 2026 12:00:40 +0000
Manifest this update: Sat 13 Jun 2026 12:00:40 +0000
Manifest next update: Sun 14 Jun 2026 12:00:40 +0000
Files and hashes: 1: J5M1a3LBBBztecoRRZUreMtGb8A.crl (hash: IpPUL03jTJAGnqrjfcNG7lHCFDB6YzMr295IKOO5Grk=)
2: iXFt1KY0aqsyx-9Vdc9e4RKOA5Y.asa (hash: UPxLBpOmrMbXDNQ7hogNRA77L99FxDK6/MOEI7JjMOY=)
3: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (hash: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:09:aa:96:30:96:bb:2e:aa:41:4a:aa:74:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Jun 13 12:00:40 2026 GMT
Not After : Jun 14 12:00:40 2026 GMT
Subject: CN=34ad7843152095628b512c8eb81c10aa0c4a44e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:4a:80:fe:b0:32:17:63:7e:8c:40:dc:7c:
69:e7:08:e8:3d:eb:2e:a4:be:77:ab:93:e5:9c:3f:
79:8e:10:c8:13:bd:ca:95:35:bf:72:57:6f:e5:55:
93:9d:44:68:2a:b7:ad:07:64:64:95:2b:51:87:85:
45:35:1c:fc:a3:a7:3b:31:42:fa:4f:87:2f:6b:e5:
fd:62:dd:18:a7:3c:ad:5e:c6:73:c1:5d:a3:b9:9b:
52:86:a0:23:90:ad:65:fa:6f:53:7a:c1:35:db:23:
6b:87:7b:d2:ae:14:57:0f:44:90:96:9d:e3:ad:d2:
62:7d:49:86:cc:c9:f3:70:c5:bf:1b:42:4d:2b:40:
21:ed:2c:a4:85:b9:09:8a:e0:cb:d3:66:56:88:36:
de:a8:d0:fe:cf:90:b0:cb:fa:6f:01:bc:e2:a2:0e:
81:9c:fe:c4:5f:4b:77:7c:7b:cd:d9:e2:98:ed:21:
a2:c9:29:2d:b1:61:56:5b:e3:e5:34:1d:ad:4c:04:
a7:d9:8d:7b:97:b9:64:a8:77:1d:83:73:09:17:9a:
ab:00:15:88:c0:29:1b:02:23:df:9e:57:91:06:d0:
c9:29:1d:bc:bc:56:82:d7:66:ec:c2:12:53:10:e2:
87:fb:33:e9:6e:37:7a:8a:53:8c:1c:71:bd:12:08:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:78:43:15:20:95:62:8B:51:2C:8E:B8:1C:10:AA:0C:4A:44:E2
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:2d:0d:72:8a:ef:55:94:52:0f:27:c6:a1:84:5e:1d:3f:
ae:85:a6:d0:e1:db:ae:51:10:62:cc:1a:76:de:f7:c9:ae:86:
8a:a9:c1:44:f1:d4:90:96:29:07:01:cd:88:91:a2:e6:ba:7c:
9e:1c:31:2b:b6:f1:0d:c5:9f:58:86:2a:85:71:7a:bd:f3:c9:
08:7f:26:23:c7:d5:1c:e4:43:d3:fb:7c:41:f0:35:ca:ce:be:
76:40:29:f9:9a:a1:64:66:19:7b:34:17:c4:7a:fc:36:50:a1:
a0:59:63:06:e2:3e:17:e0:3a:0b:5c:c8:a1:c9:59:b1:a4:96:
49:bc:02:f8:8a:03:dc:49:e6:a8:d8:f0:3f:99:4e:10:16:a1:
1a:61:b7:43:89:59:96:55:a1:48:93:f7:26:7a:67:a0:8e:06:
ec:24:78:62:c7:80:60:8e:81:3a:23:87:af:f0:b3:b4:18:8e:
75:ef:41:d9:ec:9e:85:58:5f:01:13:8f:6a:db:dd:f3:56:86:
eb:79:91:70:06:c6:46:5b:29:b9:ff:3e:1c:c9:6b:dc:c2:5f:
90:3f:ce:52:3e:c0:ea:16:23:c4:32:ce:bb:82:a2:eb:bd:c6:
e4:eb:92:c9:46:d0:16:3f:3d:37:81:30:18:d7:51:4c:18:8b:
d1:0d:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:32:25 2026 by rpki-client