Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: CUfsU8P0y+6p/JO5dB1g4vHfTB62TVVjpmrOxh6YHxw=
Subject key identifier: 75:04:A0:44:39:9C:B0:17:B5:AD:D3:33:87:0B:C9:A1:86:A7:84:83
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019EC06DAA770D362B053E454B2399403C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 142A
Signing time: Sat 13 Jun 2026 10:01:12 +0000
Manifest this update: Sat 13 Jun 2026 10:01:12 +0000
Manifest next update: Sun 14 Jun 2026 10:01:12 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: R+PC1gHS7INwilAmLisFRi/B4vgKjwVzhMzmIHUNDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:aa:77:0d:36:2b:05:3e:45:4b:23:99:40:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jun 13 10:01:12 2026 GMT
Not After : Jun 14 10:01:12 2026 GMT
Subject: CN=7504a044399cb017b5add333870bc9a186a78483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:2a:20:39:48:15:f6:54:26:70:be:1a:4b:
c3:f0:79:71:0e:c0:ff:d8:43:b4:a1:0e:ae:94:dc:
58:b9:34:6a:7e:ab:4d:b2:74:7d:58:cf:6b:cc:79:
58:47:cf:eb:f2:09:ee:13:3c:37:71:d3:30:9f:0b:
be:85:68:d9:38:2e:a1:a6:1a:6c:6d:f7:21:3d:c0:
c2:f2:af:91:a9:5f:24:9e:86:a4:e8:1e:83:d0:95:
33:b1:7b:e3:5d:ad:12:6e:2a:d5:67:9f:c9:94:aa:
9d:8f:df:e8:90:01:80:e0:60:cc:28:76:bb:c1:6d:
17:a7:15:e9:42:e4:59:c3:0f:ed:e6:e0:25:18:88:
df:8a:bb:23:73:77:d4:fc:13:00:fc:ec:43:19:bb:
ef:93:db:79:e1:bf:ea:05:dc:16:9b:be:c0:1a:03:
1c:23:16:dc:08:0b:71:97:6b:21:ed:9e:d9:5e:18:
75:96:b2:ff:8f:9d:68:8d:9c:d6:62:97:69:fc:d8:
07:79:45:45:fe:7c:1b:f8:23:5c:bf:82:f4:8c:e3:
97:96:d1:6d:5d:da:d3:07:5b:4a:86:0a:f3:55:4b:
20:f9:81:e5:1d:ba:f8:71:6b:bd:f8:50:36:3b:db:
11:a5:9e:27:6c:03:51:8a:46:6e:05:b8:8c:db:ef:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:04:A0:44:39:9C:B0:17:B5:AD:D3:33:87:0B:C9:A1:86:A7:84:83
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ed:6f:66:b9:8d:ad:c7:7b:e2:a8:da:4d:ec:8d:45:ec:b2:
99:79:c4:0b:c1:15:ff:4b:0c:9d:22:7c:f6:68:b4:a7:14:62:
03:2c:1f:0e:0d:a6:40:ff:15:d7:ad:3a:8a:ea:d0:f6:0e:f0:
c3:e6:9d:8f:9b:0e:ad:ae:1a:79:d2:2d:11:0e:86:1d:fa:ef:
e2:58:41:fe:42:7d:9d:18:a7:4b:26:11:a7:e7:c1:97:4a:09:
df:11:b7:89:31:33:61:9a:a0:41:ac:e9:db:af:18:db:de:65:
15:ee:b9:60:6f:c9:93:fc:7b:78:af:03:91:00:ae:18:54:08:
6d:ed:62:60:58:06:a7:d3:da:be:b4:0d:7d:3f:ed:c0:a1:eb:
be:79:8a:ed:1f:5e:04:e9:eb:af:51:34:12:bc:08:48:5e:41:
65:46:44:62:11:82:af:59:22:d4:a0:e4:49:2f:1e:31:57:8e:
4a:6a:9f:07:d1:95:b0:7a:35:d5:a1:e5:04:18:e8:9e:e8:93:
00:89:9c:de:71:bf:6b:dc:ff:41:d4:e5:17:e6:54:e2:64:67:
37:ab:58:4c:71:bc:eb:63:b5:c9:c6:ae:eb:3e:b7:36:92:04:
f5:13:77:5c:3f:2a:a5:8d:1a:a3:8f:2e:c0:52:35:9b:67:1a:
67:08:16:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:46 2026 by rpki-client