Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: kn6s+dHMR/a1y1TaHjusojGtKtViOdb4se3Y96eLtFQ=
Subject key identifier: 01:DF:8A:EC:47:01:04:83:24:FA:1F:7B:6C:9C:84:11:2B:E2:34:0A
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019EC06D3AA99F55EF2AE40F76A7002E7151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 0C28
Signing time: Sat 13 Jun 2026 10:00:44 +0000
Manifest this update: Sat 13 Jun 2026 10:00:44 +0000
Manifest next update: Sun 14 Jun 2026 10:00:44 +0000
Files and hashes: 1: VonIBij0yRwrRDr8qNAy1e4NkTc.asa (hash: XHC+gatrojCnYMfiZp2We5SigI6aUJwD2ilzVv+oSzo=)
2: i-2Qajd4m8riLuobvPBkDzzfa5s.roa (hash: kJTbL3ROqa3RXxMLEUptXN8oatw6z/BtfYm3rGnRJXI=)
3: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: aYkvL56djM259Lrv2gC8NkmI0GEKhB+4k8tBGQ6mZ8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:3a:a9:9f:55:ef:2a:e4:0f:76:a7:00:2e:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Jun 13 10:00:44 2026 GMT
Not After : Jun 14 10:00:44 2026 GMT
Subject: CN=01df8aec4701048324fa1f7b6c9c84112be2340a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f7:2e:13:20:c0:63:f6:d6:65:5a:ea:2a:cd:
df:41:56:32:50:97:af:1a:b1:f8:bb:ec:0d:31:7f:
e9:c3:c8:4b:8e:a2:52:1d:35:63:b5:01:cc:df:24:
ed:d9:f0:3d:3b:f6:2b:78:d2:93:28:a7:f0:c5:15:
93:bf:05:c3:49:7f:e9:c2:3c:6d:68:14:7b:33:08:
10:42:32:48:3d:3f:3b:5d:5a:bd:83:81:d0:4a:80:
4e:7a:e2:cb:9a:e5:33:a7:ce:92:2e:b2:8f:af:86:
64:b7:f8:75:d5:e2:a9:ca:3f:8a:16:ac:d9:5e:cf:
62:69:ee:9b:3c:b4:49:36:9f:77:b8:dc:47:e7:4f:
15:10:02:d8:c7:33:b8:c9:6e:8f:f6:d4:ca:86:22:
d2:82:50:87:86:6d:a9:2f:a2:f5:2d:a3:d0:da:6c:
e9:7e:f0:52:9d:e0:72:f6:ae:3a:6e:28:f3:4f:94:
2e:08:82:3f:fb:7d:d1:3b:be:74:5d:ba:4e:36:32:
0a:b3:4c:d9:9d:5c:ec:2e:50:2d:38:3a:c3:8b:2a:
07:f6:7a:b2:a0:93:50:9c:95:f1:8d:43:c5:df:60:
fa:84:18:6d:da:52:cf:21:73:15:16:87:02:04:94:
76:28:3d:c1:96:e5:3c:24:db:84:0e:ed:d8:14:47:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:8A:EC:47:01:04:83:24:FA:1F:7B:6C:9C:84:11:2B:E2:34:0A
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:56:f5:78:b5:84:c5:78:4e:8c:2e:73:65:0c:e4:e0:69:15:
4c:30:67:85:e5:0f:d3:74:e3:ca:35:f4:c1:8a:57:7d:c8:1d:
7d:a4:48:f0:2e:a0:3f:53:76:d0:df:28:b6:09:29:7e:d2:73:
35:7b:6b:54:fd:1a:34:fc:68:2b:ca:b4:35:38:f4:fd:d0:b2:
51:cb:16:41:c6:01:84:30:d9:a2:5a:41:77:96:66:e8:87:6c:
78:08:39:9b:17:a6:dd:84:67:55:c9:9a:9b:9f:0c:a4:c4:78:
8c:96:75:17:7f:02:0c:d1:66:aa:02:e2:3a:a3:73:ad:94:14:
06:a0:10:90:5c:b1:30:84:45:53:36:16:5e:0b:8a:38:c9:e8:
70:76:f2:f2:dc:46:65:be:4d:b2:b7:59:ae:81:63:78:d5:f8:
cd:88:11:c6:7e:d3:30:37:cd:75:c9:8e:50:59:c2:57:81:8d:
40:8e:92:01:6b:bc:54:5c:1b:18:50:24:26:27:77:37:47:07:
be:54:1c:a9:9b:46:56:31:be:e8:2e:a8:d3:cb:6b:3b:f3:c6:
1d:a2:a3:88:b8:88:60:2c:ed:52:8c:84:89:a1:eb:05:d8:b0:
98:ec:bd:31:ec:b5:c2:b0:8c:58:05:fd:57:22:bc:d1:d6:26:
8d:ed:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:21:55 2026 by rpki-client