Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: tm+Mb2Zd1bxORQjvVsWjp/g821M1c9Zl33hEV4wkWcA=
Subject key identifier: 8F:42:E9:3C:E0:E5:7E:77:FD:51:4A:C7:52:4E:EC:CE:0C:91:8F:E3
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019EBF9162CBDB2456929A8199A3705D47E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 147C
Signing time: Sat 13 Jun 2026 06:00:36 +0000
Manifest this update: Sat 13 Jun 2026 06:00:36 +0000
Manifest next update: Sun 14 Jun 2026 06:00:36 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: HMJmdTDso2ABW2wEk01p79QMdMCpPw+zfnTSR6jKqXk=)
2: hWkmko9vUlZH-VtlGHJ4hUuAaoY.roa (hash: WFu8HTGZdnXJYLpBmsk/WG3sNIIitKWRuo38WyAjDOU=)
3: rHfKeO-9l9W24wGxoHPVca3O4oc.roa (hash: DOnDxDR60+CHvKP7QQ/+3OYee8LrWlLSO/yOlx6md0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:62:cb:db:24:56:92:9a:81:99:a3:70:5d:47:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jun 13 06:00:36 2026 GMT
Not After : Jun 14 06:00:36 2026 GMT
Subject: CN=8f42e93ce0e57e77fd514ac7524eecce0c918fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:c3:7a:89:90:6b:70:9c:0c:7b:e6:d1:c1:
54:6a:eb:de:36:ff:97:fa:35:6a:c3:72:9e:ab:35:
21:a7:59:b1:46:4e:85:89:d0:39:fa:f6:52:0b:0e:
72:c1:59:0f:0d:d2:17:c1:bf:35:72:cd:83:17:cc:
92:1f:0a:d6:53:cc:6e:87:a4:2e:ef:11:73:34:c7:
4f:5b:59:c4:bf:28:81:e0:ed:b8:c1:fa:d4:15:b7:
ff:6e:ec:ca:77:0e:34:da:b9:f6:ee:98:bc:3e:08:
c3:b3:e3:f1:3d:e5:7c:58:d4:2a:8a:0f:90:a3:2c:
54:d4:60:1f:c9:70:0c:28:67:b9:76:fa:87:c8:92:
dc:9a:34:85:09:11:c7:bd:c4:23:9b:d9:d2:fc:e5:
18:1f:a6:5f:6d:7a:ae:09:7d:c5:a4:d7:62:f6:40:
9f:ea:89:dd:37:d5:2f:5b:a1:d8:07:f5:92:29:6d:
76:e0:66:e3:88:25:cb:5b:d5:96:21:a6:e6:b1:69:
2c:e1:4e:60:5a:cd:99:72:c6:e2:d7:db:91:a9:d9:
4b:be:0d:36:09:30:7d:9e:01:a8:09:1a:fb:a0:74:
06:1d:fe:25:c5:41:d8:fd:8d:09:31:7d:41:92:55:
5c:a2:0e:71:ce:7c:f7:b1:d9:9f:73:67:e4:5c:dc:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:E9:3C:E0:E5:7E:77:FD:51:4A:C7:52:4E:EC:CE:0C:91:8F:E3
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:60:e0:36:fc:a5:11:2d:36:4f:08:e8:88:95:df:e4:79:6b:
64:9c:02:b5:86:d8:96:0a:30:6c:99:6d:35:3c:2b:9d:50:dc:
e2:6d:a8:80:10:4b:e5:4c:91:49:3c:1c:b5:f7:7e:1d:77:83:
9c:79:de:c7:95:26:09:41:b7:35:73:93:b9:df:4a:e2:77:14:
5e:14:96:64:ef:db:4d:4f:2d:c8:cf:13:37:74:2e:5f:8c:1c:
46:0b:d0:3e:e6:58:0b:4a:61:a4:52:39:86:23:81:35:fb:1c:
dc:4f:f0:3e:94:05:77:35:c2:58:50:f5:a7:23:9c:51:7f:d1:
66:59:d2:11:fd:41:55:56:ab:49:85:3d:e5:c1:66:cb:81:fb:
9c:24:17:75:a6:91:e1:0a:63:f4:6d:86:81:46:3c:35:c7:4b:
61:c3:7d:9e:a7:df:07:df:9a:bf:6e:20:1e:f7:87:93:4a:f7:
65:cf:4c:8e:9a:d2:5d:db:cc:41:b2:65:1b:82:cb:f3:05:42:
45:ef:02:7f:a0:a1:5c:14:0f:26:58:0c:f4:3a:9d:9c:5e:4f:
ac:a8:35:2c:fe:e3:af:91:ed:43:88:97:4e:b5:f8:56:d1:86:
4a:9e:3c:73:41:16:d8:fa:36:9f:b5:e1:f2:0d:41:3b:e2:d1:
39:4f:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:31 2026 by rpki-client