Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
File: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft (raw, json)
Hash identifier: JL6TsJPZAmRhcGsSoJCdcIXIxTuhQ6s2GquQHOTdOUI=
Subject key identifier: 3B:22:0F:0B:59:33:54:CF:1D:4A:5B:4F:E3:63:60:05:6E:84:3D:A1
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 019EC149A2A9F7CA5803CB4B1A68DF14F379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 14:01:28 +0000
Manifest this update: Sat 13 Jun 2026 14:01:28 +0000
Manifest next update: Sun 14 Jun 2026 14:01:28 +0000
Files and hashes: 1: 7UycSOA2fNBupvFy-hFdJV1v7Io.roa (hash: 5kwOqNqNs3Py67MnZDjj6z2WyhVaijv3n26KPo38psM=)
2: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (hash: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk=)
3: VHAZMRbuJy6K49Zh7bvrBNs8QHU.asa (hash: erFKugp76cbDaqZL6jbZ+AatD/saCuONTcWq0wMAJBI=)
4: arHeDdPCjS_AVATAetTx45LL1Dk.roa (hash: wzrmHuwOdDJUETKg+nffMJxHljjlvyXkAo4P+Hrjp2w=)
5: bhbbDS-1fRi0YZYd4HQcXgCmraM.roa (hash: Oc1LIi9fo5CXFk5Nkm2KdL+/MECS7o+E4CeQBySDINk=)
6: gugoFb8q0SHtyIBkY0PLePdn0z4.roa (hash: PfJgvUjin+qon9RPc3E2cAaH5BLLpJd7HD9BJAEBX68=)
7: pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl (hash: 1XdnYTwAP9tm7ryT7SJy+gjvJicre1R7irIWWcS9RTk=)
8: xoRDajz4eJy11O_J5fLAv4U4v9E.roa (hash: CkGw0sLJe5mjxRbSsZKMcGEgfVdDoPyOYU+L3J4izT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:a2:a9:f7:ca:58:03:cb:4b:1a:68:df:14:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Jun 13 14:01:28 2026 GMT
Not After : Jun 14 14:01:28 2026 GMT
Subject: CN=3b220f0b593354cf1d4a5b4fe36360056e843da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:24:a7:fe:f8:cc:c8:20:98:3f:5c:10:3c:
9e:e5:c7:f3:7f:69:ca:04:93:75:ba:cc:30:22:ab:
a3:d0:f1:54:50:0a:c7:72:5f:69:6a:d3:84:e3:b9:
21:ff:af:90:28:06:93:a8:db:12:c7:f9:41:0c:f4:
b2:fc:ad:6f:84:10:ce:20:fd:bc:ff:10:12:25:96:
1f:ed:09:94:2d:f9:22:10:02:1d:2d:b4:c9:65:7b:
11:00:0a:73:0f:c2:5e:49:a9:1f:ed:35:61:cf:ed:
a8:72:d6:da:08:84:5d:e1:3d:20:0e:b8:88:9a:13:
cf:84:16:ee:91:32:ea:8b:0f:c6:c0:4d:56:05:8f:
d4:73:de:3f:35:b9:d5:df:9a:95:f8:97:ad:b3:70:
0f:ad:c9:f9:14:16:9d:0b:9f:0c:94:76:d2:84:f3:
2a:31:2a:2a:97:a2:72:49:86:29:22:b9:36:79:48:
b1:0a:66:52:ef:27:57:e4:45:4f:f3:71:91:75:08:
ce:6c:b3:e9:b6:df:f9:2b:61:92:95:d5:61:a1:83:
8e:a5:fe:01:d0:7f:2c:66:36:13:e2:77:1a:38:a5:
e4:f7:4a:83:1d:e6:04:2b:fe:86:74:43:cb:f6:ba:
e3:2f:77:b5:e2:9a:07:da:bb:4f:3e:5c:2c:9a:10:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:0F:0B:59:33:54:CF:1D:4A:5B:4F:E3:63:60:05:6E:84:3D:A1
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e7:05:14:2d:f5:ca:ef:bc:96:80:f2:ec:cb:e3:c6:a5:db:
21:73:d7:a2:ad:70:05:7b:28:6d:6c:6e:22:e0:1d:62:32:af:
15:89:60:8c:90:a5:16:be:84:12:8e:7d:0e:fc:d9:cf:eb:a6:
8c:97:cf:ff:05:e8:fd:ed:8d:0d:a3:b6:f6:ae:8a:87:4f:99:
6a:c1:8e:cd:f2:54:6e:e0:c2:46:a3:7d:24:6e:fa:ef:e1:c6:
55:0f:7a:ec:ff:57:c0:b6:40:df:07:2c:e1:4d:39:fb:85:cf:
ee:61:44:af:35:d3:9f:0c:4c:f6:bb:b2:2c:59:ea:e5:d8:e7:
0c:c7:ac:d1:f5:ba:97:f6:93:cb:a5:38:93:63:d4:0f:e9:8d:
1d:03:99:3e:31:36:e0:e7:6c:c8:b2:88:0f:c0:ee:0b:7f:a8:
07:ad:99:87:cc:7a:c6:0e:85:90:3c:2c:ed:f1:e0:86:dd:43:
b0:5d:9a:44:73:6a:e8:68:7d:26:cc:5c:ac:9f:39:e6:fa:f3:
6b:29:cf:28:84:e5:36:75:22:b7:2c:e8:80:b9:da:4b:ef:d5:
ae:e8:99:36:28:ed:b0:c7:5f:cf:ff:f1:8e:f9:bb:b6:3b:40:
5b:08:d7:7d:52:83:b7:d9:5a:45:f4:7e:7b:bc:41:52:4c:b7:
b7:84:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:45 2026 by rpki-client