
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: aqajtBzy85DKL5pmjiZd1pNoBmNcPSgULTHEBilKe2E=
Subject key identifier: 04:05:72:F1:58:5D:D8:D5:EA:94:09:93:5A:11:1D:62:EF:8A:F2:91
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019EC2C9D1DB2D63F20C8B7343CA2E04CB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0E59
Signing time: Sat 13 Jun 2026 21:01:06 +0000
Manifest this update: Sat 13 Jun 2026 21:01:06 +0000
Manifest next update: Sun 14 Jun 2026 21:01:06 +0000
Files and hashes: 1: KyIkZp5v8qniJmGJJW64WpulkNA.roa (hash: 1AsKxqyIstssG9Pu2llDF8+d4jVczV5NqO2oa4GLJAk=)
2: bMwuPcwxqY9GWDGFGxnpBignWiw.roa (hash: 6jn0f3vV9KnwoCtSt2OI78m/Tno09+LsXBuJK2Ylj8E=)
3: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: ThKzK4ZUul/QvIfVes9mmZkdn7tSNGO3SGJgIiXQRSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:d1:db:2d:63:f2:0c:8b:73:43:ca:2e:04:cb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Jun 13 21:01:06 2026 GMT
Not After : Jun 14 21:01:06 2026 GMT
Subject: CN=040572f1585dd8d5ea9409935a111d62ef8af291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:88:a3:d5:11:bb:a0:38:58:74:78:95:a4:
48:07:fa:f5:95:93:e8:6a:e0:bd:0a:a0:ee:72:5b:
b0:fb:19:08:9a:7c:75:ee:e3:58:57:6e:56:d2:ef:
08:58:06:ba:35:9f:cb:d6:13:31:44:2f:20:84:61:
4a:af:76:31:ad:91:a6:3e:b3:4c:2c:db:0c:69:04:
13:9f:5d:e5:af:1c:11:ae:aa:ca:e5:c0:b5:a6:ef:
30:31:1d:2a:57:55:ff:47:a8:ee:0d:d4:a0:7d:b2:
8d:4c:3b:43:51:57:22:b4:fb:08:08:cf:fa:f6:b3:
b4:0b:c0:ac:50:35:0e:b7:f3:92:41:bf:b1:8c:0b:
23:7c:5f:d4:d1:12:6b:6f:84:ce:7f:f9:d6:df:5b:
97:26:42:08:cd:84:8f:cc:bd:65:f5:0d:28:00:7d:
9e:65:6d:37:9f:c4:39:9e:e4:44:3b:2d:06:33:cb:
2f:2b:8c:bf:e5:64:c8:c6:2e:7f:34:f8:41:a8:37:
3a:f9:d3:13:10:57:52:c8:48:50:0a:2b:a7:b4:64:
8b:63:a1:9e:e3:e0:fc:6f:56:14:e5:be:0b:b0:5f:
81:11:73:42:a8:f8:2e:0b:b3:17:a1:68:5a:ba:60:
46:04:62:34:f0:2e:8c:20:1a:c2:80:e9:b5:93:0c:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:05:72:F1:58:5D:D8:D5:EA:94:09:93:5A:11:1D:62:EF:8A:F2:91
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:12:34:cb:78:a6:ff:ac:e2:04:e0:15:2a:3e:a4:54:0a:bb:
cf:79:37:d7:95:c3:97:74:6d:4f:33:ca:2d:6e:aa:6d:8a:cb:
b3:51:76:24:65:c1:de:f5:f0:3a:e1:e8:8a:0c:93:03:03:86:
48:84:1b:9b:a8:bb:ae:c4:05:32:0b:76:85:d6:2c:3b:55:49:
75:4f:4e:10:32:ce:99:a3:5e:d0:67:5f:5b:b4:f5:1c:41:43:
48:a5:77:b9:a4:ea:cd:2b:2f:31:88:2a:54:87:01:8b:63:44:
26:11:4d:54:86:b6:3f:b2:cd:6b:d7:a3:c9:63:93:91:26:97:
71:5e:3c:47:72:4a:8a:6a:fe:ac:0c:5b:a0:49:44:03:95:cf:
bb:17:8d:b6:47:74:a2:22:06:83:9b:0d:b3:9b:0a:d9:16:b6:
b2:ac:82:bf:99:97:6d:2d:eb:2b:e8:7c:3e:cf:02:42:d7:2e:
e8:39:2f:64:cf:18:3c:0e:f6:4b:7c:99:42:e0:7c:48:58:29:
4f:5e:c1:9a:9f:2b:fd:d8:37:a2:71:15:12:b0:63:4a:70:23:
5e:16:e4:4d:9f:15:08:d9:25:9d:80:08:ee:29:61:06:59:5d:
7a:5a:26:0c:c9:4f:c1:6e:c0:f5:58:87:1c:7d:56:ee:70:20:
86:eb:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:19 2026 by rpki-client