Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: JXy4TaGJZFLuT7KAszW7ZbTTQGXZXv6QWgt5pUjM0Y8=
Subject key identifier: 68:A9:73:90:24:5A:33:4E:B9:DB:7C:98:9A:93:73:5B:60:3D:D5:8B
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019EBE10AB0ECDD51F20075CD57ECE486AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 1960
Signing time: Fri 12 Jun 2026 23:00:23 +0000
Manifest this update: Fri 12 Jun 2026 23:00:23 +0000
Manifest next update: Sat 13 Jun 2026 23:00:23 +0000
Files and hashes: 1: 5duSWp-R4sHUDIWHsiSMyzmiMjM.asa (hash: I9FW+aLJqiDmPx2UKLG7SXwoCqVIWzrTVyHoM25/ExQ=)
2: EaAMsvwoHBe4yq1jbHkVSMOCcms.roa (hash: tCewwDnNFA4yqzd0eb5IKas5uAfl5Rr1tmwDJ4VUURI=)
3: IvpEH6hd1qJi0dDCHitCwtgqWwA.asa (hash: pdg3WShcX162alecCVt/x5tpVyFcxh+QQl8q0PDMBOo=)
4: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: 2IuTnDwWcK6JSwvhniYSIZY5XPmbtlZ8AkVZLP2NAac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:ab:0e:cd:d5:1f:20:07:5c:d5:7e:ce:48:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Jun 12 23:00:23 2026 GMT
Not After : Jun 13 23:00:23 2026 GMT
Subject: CN=68a97390245a334eb9db7c989a93735b603dd58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:eb:fa:a8:dd:9b:e6:aa:42:96:e4:28:39:b3:
ec:33:99:21:1f:31:f0:a9:cc:f4:f8:e0:25:e2:d3:
ca:f4:22:4b:80:70:93:d9:f2:a8:1f:78:c0:f2:dd:
54:6f:f9:49:db:29:c6:8f:0e:fc:c9:67:17:2d:9e:
fb:f3:67:1c:8a:a4:00:ed:13:df:4a:7a:51:29:29:
ac:be:47:f8:56:4b:78:96:98:e3:28:ea:d1:72:59:
14:23:15:c4:a9:d8:3d:a6:cb:1d:0f:76:05:b3:c5:
4e:6d:b7:61:d1:53:06:fe:30:7d:3a:a3:84:20:05:
e9:1f:d6:9c:1a:32:6d:af:ea:75:25:69:4b:53:b0:
79:24:e6:4c:71:5f:80:d3:e8:bf:14:86:cc:2f:4c:
53:92:74:dc:97:c9:2f:f4:84:42:d4:58:3f:08:fe:
e9:8e:fb:d7:30:bc:53:f3:44:d1:42:76:6c:38:7e:
6a:80:a2:db:06:ed:5a:79:82:ff:f7:d4:80:e8:d5:
a2:9d:3a:bb:10:b0:e8:16:b2:31:f3:c7:7d:a0:00:
37:da:cd:eb:f2:d4:5e:6d:b1:39:d6:2c:35:ed:f7:
5d:a7:af:1d:cc:4f:b3:f8:f0:20:fc:06:ca:54:da:
c9:4e:f5:3b:49:aa:ae:1c:a2:ab:df:09:6f:48:bf:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A9:73:90:24:5A:33:4E:B9:DB:7C:98:9A:93:73:5B:60:3D:D5:8B
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5b:57:49:29:cd:5d:6e:62:05:ef:08:7d:5c:ba:20:49:c4:
af:2c:eb:03:76:17:1a:d5:3d:5d:15:69:95:30:11:28:b8:9b:
2d:6d:5b:85:be:b3:b4:b5:41:c0:c6:69:0a:4a:34:90:05:d0:
f1:43:0b:04:1e:b9:f1:15:a5:fc:6d:07:f8:53:c1:60:fe:10:
92:7d:40:0b:5e:42:6a:cf:c9:d5:58:60:16:97:36:45:d2:8a:
d2:72:67:b6:05:56:57:36:83:29:5c:1c:e6:ee:d5:21:35:f2:
c4:50:60:e3:e3:37:2e:08:9a:91:aa:82:76:8b:72:02:81:cd:
40:6a:e0:fc:24:8d:58:b7:d3:99:03:a7:1b:71:21:04:92:74:
ff:c1:8c:a1:f9:0d:9f:80:2a:ce:9e:15:9c:95:4d:33:0c:12:
56:f3:03:57:81:ff:ff:4e:2c:ed:bc:45:f5:a6:61:ef:c5:b6:
1d:47:64:90:a8:69:67:7a:1d:4f:a9:95:98:b1:b3:85:85:42:
84:56:f6:4e:d8:9a:8b:82:9d:fb:f6:bf:b8:e0:74:a2:97:64:
a3:53:0a:1c:4a:31:6f:1a:28:60:3e:6e:4e:20:0a:8b:9e:0e:
87:9e:41:29:3f:14:d0:0d:2b:23:98:d5:c3:2f:cc:e4:34:50:
89:f7:e9:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+EKsOzdUfIAdc1X7OSGrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZGYwNDI4MjQyNzNmY2ZmM2YwOTNkMGY5YjFkZWM2OTYw
YmFlNmEwHhcNMjYwNjEyMjMwMDIzWhcNMjYwNjEzMjMwMDIzWjAzMTEwLwYDVQQD
Eyg2OGE5NzM5MDI0NWEzMzRlYjlkYjdjOTg5YTkzNzM1YjYwM2RkNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOv6qN2b5qpCluQoObPsM5khHzHw
qcz0+OAl4tPK9CJLgHCT2fKoH3jA8t1Ub/lJ2ynGjw78yWcXLZ7782cciqQA7RPf
SnpRKSmsvkf4Vkt4lpjjKOrRclkUIxXEqdg9pssdD3YFs8VObbdh0VMG/jB9OqOE
IAXpH9acGjJtr+p1JWlLU7B5JOZMcV+A0+i/FIbML0xTknTcl8kv9IRC1Fg/CP7p
jvvXMLxT80TRQnZsOH5qgKLbBu1aeYL/99SA6NWinTq7ELDoFrIx88d9oAA32s3r
8tRebbE51iw17fddp68dzE+z+PAg/AbKVNrJTvU7SaquHKKr3wlvSL9ubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGipc5AkWjNOudt8mJqTc1tgPdWLMB8GA1UdIwQY
MBaAFCffBCgkJz/P8/CT0Pmx3saWC65qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUt
Y2UyMmQ1ZWFiODJmLzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9hY2ZmZDYtZGMxZS00ZTBkLThkMjUtY2UyMmQ1ZWFiODJm
LzEvSjk4RUtDUW5QOF96OEpQUS1iSGV4cFlMcm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqltXSSnN
XW5iBe8IfVy6IEnEryzrA3YXGtU9XRVplTARKLibLW1bhb6ztLVBwMZpCko0kAXQ
8UMLBB658RWl/G0H+FPBYP4Qkn1AC15Cas/J1VhgFpc2RdKK0nJntgVWVzaDKVwc
5u7VITXyxFBg4+M3LgiakaqCdotyAoHNQGrg/CSNWLfTmQOnG3EhBJJ0/8GMofkN
n4Aqzp4VnJVNMwwSVvMDV4H//04s7bxF9aZh78W2HUdkkKhpZ3odT6mVmLGzhYVC
hFb2Ttiai4Kd+/a/uOB0opdko1MKHEoxbxooYD5uTiAKi54Oh55BKT8U0A0rI5jV
wy/M5DRQiffpLw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:29 2026 by rpki-client