Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: DGOGu5ODaGAfh+ht/aidycCPNQIKvwSHCgOmvUe0AS8=
Subject key identifier: BF:F3:B6:03:33:33:96:A2:25:69:72:C2:05:54:6B:35:7E:89:90:F7
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019EC180352C5ACF9EA479AEA8BF3160C41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 07EA
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: cgipgDmA1fC+T3YuiHomwJ4oAvWJMfx/Z3Hrrhc2P3c=)
2: ZSAjriqrsKE2YYg2ALkBE1sHfcc.roa (hash: FpdwZa7IuH64lhVGz4Lc/UmsF5GpQU9SPxwgj/w+504=)
3: g28y0lP7mHQY3_zrFQA4uIJDkhk.roa (hash: kLY9/EwIF/rD0/y9uzwAOFmWCsA9t1ocdJGqYiU1zTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:35:2c:5a:cf:9e:a4:79:ae:a8:bf:31:60:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=bff3b603333396a2256972c205546b357e8990f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:2e:6a:e1:41:47:e7:69:55:f7:74:07:e5:
00:10:15:a5:7c:e6:45:47:21:c2:bc:08:df:1a:d2:
ae:7d:b5:df:79:b3:10:dd:91:dd:c1:43:69:84:43:
d5:12:9b:25:5c:b5:66:2c:ff:c6:e5:7e:f6:d6:dc:
fd:f1:21:5f:8d:c2:24:12:8b:c9:a2:a2:94:93:de:
27:7b:91:93:e5:1a:aa:cb:20:6f:10:fa:65:2d:4d:
13:6f:91:9c:c2:c7:e2:e4:aa:8b:91:86:91:90:7c:
64:e4:68:32:10:80:3c:eb:43:37:eb:5b:35:34:72:
53:bb:b2:74:b2:49:19:f5:08:68:a2:0d:7d:15:51:
68:dc:62:15:76:23:8e:a7:8a:38:f1:af:39:a6:0a:
20:47:5a:41:2e:e4:74:e1:2b:70:2d:b3:1f:63:0f:
b9:8b:0c:79:da:74:5a:40:be:d7:0c:08:49:16:3c:
16:d1:4f:b5:7b:69:78:77:59:7c:04:ed:f5:6d:f2:
96:52:18:17:cc:a9:33:71:2f:3f:bc:15:84:5c:24:
1d:3a:00:5a:d8:c4:81:47:e2:a2:55:5d:b5:fd:1f:
23:01:64:69:ee:62:d3:19:91:f7:60:fb:d2:b6:a1:
6a:24:6c:7a:7d:d5:cc:90:75:73:f6:6e:89:de:77:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:B6:03:33:33:96:A2:25:69:72:C2:05:54:6B:35:7E:89:90:F7
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:de:fc:f9:e4:a5:59:eb:ae:8f:df:9b:29:fc:9c:e6:d2:85:
b1:7b:f7:89:be:5b:a2:e2:ab:67:06:d9:6c:16:5b:b3:13:c4:
56:34:14:36:01:5e:a4:18:cf:60:7c:3e:63:f1:1c:b5:1d:6e:
b1:42:92:75:53:8c:40:25:32:ee:b5:9d:d2:92:0b:2a:3f:15:
93:16:b8:41:f8:fd:cc:01:8d:2b:fa:88:bb:d0:59:86:6a:63:
7a:2b:d5:e8:a5:12:cc:5e:e7:86:66:84:cb:53:73:97:bf:38:
48:e3:7f:2b:2d:fe:f7:fb:4f:03:e7:ac:b2:c7:9a:4f:f1:9c:
9d:f0:3d:cd:72:a0:c0:6d:40:a0:e4:f8:68:71:42:8f:7c:43:
44:75:00:0b:a5:ee:f7:08:cb:13:87:0a:2f:5a:9e:9a:6e:be:
7d:a5:8d:4f:93:0d:da:c8:30:63:bc:65:09:d2:4c:a7:41:80:
41:c3:e0:f2:45:09:73:94:c4:0c:89:f5:5c:9b:e9:da:ae:7d:
e7:77:89:5a:16:1d:0b:a9:12:18:c7:b6:a3:42:10:f1:e7:86:
48:a4:f5:2f:c7:bf:43:54:42:a0:53:12:02:e1:89:be:8b:96:
61:e5:84:0a:26:be:07:c6:da:45:fd:d4:b6:13:f3:d5:dc:5d:
92:3c:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:09 2026 by rpki-client