Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: i56Yj8rBAo/Dfnq6G8bn8/AU+JxhoRUMA2587Wmp+Q4=
Subject key identifier: 2A:26:E1:7C:6A:27:7E:95:2B:B9:B1:2D:B1:CF:BA:78:5B:7D:A6:7B
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019EBFFF98233A96C70F3565DFC944744E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0E0B
Signing time: Sat 13 Jun 2026 08:00:59 +0000
Manifest this update: Sat 13 Jun 2026 08:00:59 +0000
Manifest next update: Sun 14 Jun 2026 08:00:59 +0000
Files and hashes: 1: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: MBTjY/pQn8WStCDoYndPS4oQ3BA11TCj2QQfEBJ0Kfg=)
2: d9acVyGvY-GRHIzPw-VB2s24I5s.asa (hash: esYk9Pb0POVT9uiF3eUMv0Ryu0HQ4twGzvmF2wBgL8w=)
3: sQhlhQF42dcocq5duZHLdQzBA9g.roa (hash: akgpfGx0nQxJk8TcEmTS0m+MwP660iAv5arUAH9NKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:98:23:3a:96:c7:0f:35:65:df:c9:44:74:4e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Jun 13 08:00:59 2026 GMT
Not After : Jun 14 08:00:59 2026 GMT
Subject: CN=2a26e17c6a277e952bb9b12db1cfba785b7da67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:45:c1:9a:5c:0b:3c:de:d5:69:53:62:13:
0f:b9:a4:bd:e2:30:40:89:01:bd:b0:e6:58:14:67:
bb:41:ac:a1:3e:98:8e:3b:58:53:15:68:a7:1b:9f:
d0:e6:53:2d:79:1a:c9:46:46:2a:d9:09:71:a2:12:
12:01:bc:20:81:4f:0d:2f:77:0c:42:35:90:bc:6c:
39:a2:57:49:14:a4:f3:e9:4a:d1:3f:9e:40:cd:9f:
ad:18:77:39:83:b7:ac:74:c8:07:3f:65:2b:d1:c9:
28:c9:21:88:7f:29:13:e9:67:46:b0:2b:cd:a3:a3:
5e:0b:21:f4:21:48:29:09:3f:96:a9:3d:2c:d3:e8:
e8:cb:c1:94:7a:4e:7e:dd:93:1a:ba:14:01:66:ce:
6a:2a:75:a2:30:82:29:3c:9c:8b:be:bc:b6:89:e6:
e0:ed:a3:f6:81:77:d2:c8:ba:95:1c:9f:e8:5c:04:
87:71:19:a2:a1:d2:bf:1f:67:e3:f0:69:6c:cf:d9:
c6:89:26:fb:75:7f:db:16:b1:ac:62:88:08:4b:8f:
59:85:c0:37:59:de:af:23:b3:aa:1a:8a:49:f3:a5:
1f:15:77:d3:8c:95:f0:4d:90:0e:e3:55:49:dd:4c:
89:e0:82:a1:d5:71:59:39:cf:bb:04:08:c1:65:88:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:26:E1:7C:6A:27:7E:95:2B:B9:B1:2D:B1:CF:BA:78:5B:7D:A6:7B
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:dc:a5:8d:d9:fc:ec:38:4b:a3:4a:f6:4a:97:3b:e5:97:
0e:59:c2:2d:96:53:30:44:9d:36:57:fd:53:ac:e0:47:a2:d1:
e3:9c:fc:33:aa:19:bc:87:72:84:7b:1b:d3:e3:c2:43:d2:5b:
a9:cc:35:90:14:66:ba:be:50:d8:a6:3c:9f:3c:d0:32:fe:08:
fb:b0:fb:24:e0:4b:c8:73:e6:05:e7:d3:7d:a0:85:6c:c2:76:
05:36:9c:9b:b2:44:de:58:73:f2:2d:64:05:62:7b:9f:ea:c9:
68:e7:a0:f4:90:27:1b:ac:fc:2c:7b:b5:e0:21:6f:35:04:2e:
83:b2:9a:d7:50:6a:71:05:4c:07:62:bd:15:2c:db:c8:73:b1:
b8:6b:0f:42:52:9d:e2:e0:46:ee:ff:55:2d:9b:b2:f3:55:c0:
c2:eb:75:5e:2f:62:f9:08:d8:6d:a3:f8:6e:53:04:6b:12:dc:
37:3d:d0:9a:13:14:ea:03:01:1b:57:db:f9:da:9c:80:79:68:
06:39:29:78:90:54:81:00:3f:c5:7f:72:97:fb:2c:1f:bc:7e:
f8:6f:c3:ec:3c:26:0d:48:ea:1e:e9:c6:61:4c:21:af:97:cf:
ab:ba:e3:f3:bf:41:fe:f9:ef:1a:4f:00:91:ef:a2:51:d4:61:
51:fd:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:58 2026 by rpki-client