Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: gIrtXZRS7VkDRdl3GXiwnB6SqqkJEKdVPdNQ9tVImoU=
Subject key identifier: 07:2A:80:A6:EB:9F:76:2C:84:21:E0:AC:64:13:EE:03:63:E7:EA:5A
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 019EC2C9F35D73E0A051B866E7D2123EF935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 1509
Signing time: Sat 13 Jun 2026 21:01:15 +0000
Manifest this update: Sat 13 Jun 2026 21:01:15 +0000
Manifest next update: Sun 14 Jun 2026 21:01:15 +0000
Files and hashes: 1: 2zatrSnboczgSJyqZMZSlWLUtgU.roa (hash: X83ll2h7XLvQkyBb5b0DZRoRK6wcb/CaXhRs2FxEIUI=)
2: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: 8FHpXXFhJkyNdXkD4/V6phKNLdrQsppCYWqfx5nJM7k=)
3: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (hash: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:f3:5d:73:e0:a0:51:b8:66:e7:d2:12:3e:f9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Jun 13 21:01:15 2026 GMT
Not After : Jun 14 21:01:15 2026 GMT
Subject: CN=072a80a6eb9f762c8421e0ac6413ee0363e7ea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:6a:b0:8c:0a:96:15:22:39:8a:fe:96:4b:
b0:31:24:4f:14:b7:a0:8e:1a:bd:1a:d5:3e:2d:bd:
05:55:df:16:66:e5:c6:4e:ba:e3:55:a9:36:4b:de:
34:e6:93:22:9a:5e:95:0f:c7:c6:fc:31:06:45:07:
a9:55:55:02:68:0e:ca:c0:4b:9d:7e:d5:df:86:5b:
00:c8:38:63:a5:41:0c:52:65:55:4c:ad:b4:6f:60:
97:97:a6:5f:69:aa:07:cd:de:e7:78:b0:d4:92:f4:
b7:4b:44:06:2e:c1:f1:b3:97:88:e2:75:a3:d0:91:
b5:c5:8d:83:24:cf:32:c3:8b:7d:26:09:14:70:41:
2b:d9:f4:56:15:79:e9:25:fa:7c:f8:10:cb:55:e7:
c6:cb:a8:9c:0f:2e:ae:f5:1d:e2:63:dc:a9:35:07:
1f:d8:6e:5a:24:fc:93:6a:91:67:24:9d:8e:2e:ba:
14:c8:35:ea:e5:e0:5d:e5:15:16:c9:a1:ae:41:45:
98:05:59:fc:62:85:1c:b5:1c:b2:9a:00:05:13:d8:
a2:08:5f:bd:ff:8d:88:de:76:87:92:c4:b6:81:39:
bd:d9:56:56:71:bb:e9:54:38:fc:84:67:72:3e:e8:
f3:45:7f:45:75:70:b3:e9:b1:b7:64:c5:f1:0e:6b:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:80:A6:EB:9F:76:2C:84:21:E0:AC:64:13:EE:03:63:E7:EA:5A
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7f:ad:bc:12:71:69:60:c3:23:a6:f8:37:b3:ba:21:52:4e:
56:8b:a4:5c:35:33:07:49:63:ab:76:38:94:fa:4a:3a:b0:54:
62:42:4c:18:18:1a:cd:6b:38:78:2c:05:4a:04:5f:66:ba:c0:
87:d6:70:da:89:d0:6b:28:98:e0:7e:04:d1:60:31:28:e1:2b:
70:67:53:3e:c1:e1:9b:78:d2:63:6b:39:e1:f0:19:17:1c:3f:
ef:14:41:22:11:ce:a2:44:1a:14:17:c2:cc:a5:df:63:6d:fb:
b3:74:30:dd:18:eb:d5:8b:97:d6:1b:12:bd:10:82:2d:b9:e9:
ae:ae:0e:cc:ae:7d:1f:34:70:cd:19:a2:3d:64:71:1b:c5:66:
5e:b7:76:c0:04:52:da:c2:14:43:13:3d:08:94:05:e4:3e:21:
74:24:e6:18:50:8c:ac:11:85:d8:84:fb:4f:54:99:a1:bd:79:
8b:04:a3:9d:d0:89:99:c2:b8:ba:bc:92:14:26:b3:42:ed:8e:
c0:af:5a:6f:27:5c:9d:58:86:e3:86:af:76:00:93:e2:2a:8c:
b1:c2:58:40:4f:e4:51:d8:65:4c:ed:71:0d:58:2d:18:94:ae:
ba:6e:9f:cb:22:7f:26:bc:21:13:d9:3f:d3:06:69:72:4a:a3:
a6:c0:9c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyfNdc+CgUbhm59ISPvk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz
NTMwZmUwHhcNMjYwNjEzMjEwMTE1WhcNMjYwNjE0MjEwMTE1WjAzMTEwLwYDVQQD
EygwNzJhODBhNmViOWY3NjJjODQyMWUwYWM2NDEzZWUwMzYzZTdlYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqepqsIwKlhUiOYr+lkuwMSRPFLeg
jhq9GtU+Lb0FVd8WZuXGTrrjVak2S9405pMiml6VD8fG/DEGRQepVVUCaA7KwEud
ftXfhlsAyDhjpUEMUmVVTK20b2CXl6ZfaaoHzd7neLDUkvS3S0QGLsHxs5eI4nWj
0JG1xY2DJM8yw4t9JgkUcEEr2fRWFXnpJfp8+BDLVefGy6icDy6u9R3iY9ypNQcf
2G5aJPyTapFnJJ2OLroUyDXq5eBd5RUWyaGuQUWYBVn8YoUctRyymgAFE9iiCF+9
/42I3naHksS2gTm92VZWcbvpVDj8hGdyPujzRX9FdXCz6bG3ZMXxDmtFQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcqgKbrn3YshCHgrGQT7gNj5+paMB8GA1UdIwQY
MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt
NmRmN2JmNTllMzI2LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2
LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH+tvBJx
aWDDI6b4N7O6IVJOVoukXDUzB0ljq3Y4lPpKOrBUYkJMGBgazWs4eCwFSgRfZrrA
h9Zw2onQayiY4H4E0WAxKOErcGdTPsHhm3jSY2s54fAZFxw/7xRBIhHOokQaFBfC
zKXfY237s3Qw3Rjr1YuX1hsSvRCCLbnprq4OzK59HzRwzRmiPWRxG8VmXrd2wARS
2sIUQxM9CJQF5D4hdCTmGFCMrBGF2IT7T1SZob15iwSjndCJmcK4urySFCazQu2O
wK9abydcnViG44avdgCT4iqMscJYQE/kUdhlTO1xDVgtGJSuum6fyyJ/JrwhE9k/
0wZpckqjpsCczg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:31:33 2026 by rpki-client