Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: HgrfgOUmW68K4+L4/5O9DOEUduJgA+2eVVtSkJOeAxw=
Subject key identifier: 52:94:22:36:8F:7E:E3:95:D8:3B:AD:8E:65:19:A1:7E:BA:B4:78:38
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019EC148D00DAFC90FDB4257C53F5EDC6537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 17B5
Signing time: Sat 13 Jun 2026 14:00:34 +0000
Manifest this update: Sat 13 Jun 2026 14:00:34 +0000
Manifest next update: Sun 14 Jun 2026 14:00:34 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: XTDfih0xChOX8d4Ov3knZIDMjjfByXyNwTx913/tHDk=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:d0:0d:af:c9:0f:db:42:57:c5:3f:5e:dc:65:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jun 13 14:00:34 2026 GMT
Not After : Jun 14 14:00:34 2026 GMT
Subject: CN=529422368f7ee395d83bad8e6519a17ebab47838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:3c:95:d9:51:5b:64:cc:fc:23:7b:81:03:
12:99:1b:b5:3f:38:bb:95:d6:8d:1a:06:ca:ad:bb:
be:fe:dd:d6:97:e5:d0:43:0b:b4:4f:d5:2c:46:16:
1b:81:2d:f9:74:e9:3e:b2:0c:eb:d9:28:31:ad:7f:
ff:78:c7:74:2d:a0:dc:a6:8a:d3:0a:0d:52:e3:62:
5a:2b:8c:33:82:0c:cf:63:58:d9:34:7a:2d:6b:28:
c1:80:2d:fa:e7:b8:58:c2:52:e5:ce:16:da:d4:0c:
ca:9c:6b:36:3d:8a:5d:0f:9d:46:a6:e2:c0:3b:76:
29:93:56:3b:8d:e6:2b:37:82:a0:b5:be:36:50:2c:
82:ed:b7:88:aa:ad:1d:9a:73:0b:3f:db:c5:32:96:
d2:ca:b1:e6:26:d1:f0:7e:6f:17:2b:69:8c:b5:ce:
76:71:6f:42:93:9f:2b:b3:30:eb:5b:41:82:0c:7c:
c7:87:f6:a5:04:79:93:0c:01:33:f0:c9:d7:9f:f7:
2b:1c:2d:b8:ec:42:49:71:be:2e:8c:39:dc:a8:65:
ca:42:19:62:56:5e:50:16:b6:d0:89:2d:d6:d2:c2:
51:d7:89:a9:48:de:18:f6:27:48:f9:00:bc:2d:c9:
65:f6:91:18:d8:6e:9b:3d:fa:6d:4e:3b:57:46:1c:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:94:22:36:8F:7E:E3:95:D8:3B:AD:8E:65:19:A1:7E:BA:B4:78:38
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:c2:76:ad:df:72:b1:cd:41:e9:33:90:dc:4c:eb:ff:8b:
08:06:39:ad:60:81:15:f8:c2:33:05:de:d7:0f:cd:e0:b3:34:
77:b7:91:c2:78:55:86:52:96:7f:68:86:a2:e0:ff:fb:d6:de:
de:a9:49:30:68:30:d7:f2:b0:08:d7:f9:29:60:06:fa:4a:57:
06:de:67:02:7d:b1:78:a0:2a:9b:a0:8a:23:b5:36:47:bb:d1:
05:d2:42:a4:cf:89:6f:7d:72:89:30:c4:fc:4e:ee:1f:9f:35:
b2:23:08:13:0c:97:c6:ae:88:30:3a:80:56:67:76:82:49:b6:
6b:30:89:38:3b:7f:0c:4a:6d:b2:3c:ac:fd:7d:d0:4f:83:f7:
d4:13:00:1a:7d:aa:31:ec:59:bd:5b:e4:90:b9:31:e9:00:db:
7c:22:54:77:34:ce:2c:e5:11:f9:8a:23:db:b4:ea:ba:ee:69:
bf:d9:4c:74:dd:7b:d6:fc:29:13:b9:08:00:43:32:05:2e:ac:
3f:5c:a4:65:fd:2f:eb:19:71:51:f5:3d:24:1c:ea:55:a3:d7:
b8:9b:34:59:4e:6c:10:40:ff:42:91:57:1a:93:5e:6b:1a:65:
48:41:dd:c9:51:27:89:76:78:c2:92:0b:68:d4:13:06:f4:2a:
39:90:51:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:01 2026 by rpki-client