Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: CbgAETEbbzHk52lZ3+vENJmn/N1dJSaWITT3ztx1oRk=
Subject key identifier: D5:C6:86:7E:3C:17:36:31:F1:51:9A:15:AC:1D:A6:11:AE:C3:C7:6E
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019EC25C0F2D3B3DB34595A0E21178F9D981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 1941
Signing time: Sat 13 Jun 2026 19:01:13 +0000
Manifest this update: Sat 13 Jun 2026 19:01:13 +0000
Manifest next update: Sun 14 Jun 2026 19:01:13 +0000
Files and hashes: 1: 4qJQVO5xGJM4Hwo9a4t-72WANJk.roa (hash: ktLSVwEG6cBJVzhe6kIb459fjppN/37esTFhqreayZU=)
2: DIaQR8xGk_YiX6t4cr3tzmYixRI.roa (hash: P3ZeVKS0G+aV/yqQz7wSRAftClIeEK0UWSeMLvlDPyU=)
3: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: BEQhpwwwaUiWbhp8E3Xqql9pqmNEsN2mfe5hzJvX+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:0f:2d:3b:3d:b3:45:95:a0:e2:11:78:f9:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Jun 13 19:01:13 2026 GMT
Not After : Jun 14 19:01:13 2026 GMT
Subject: CN=d5c6867e3c173631f1519a15ac1da611aec3c76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:09:3a:68:d0:f6:fb:aa:c6:bf:60:ba:bd:
cb:74:11:af:4b:f0:6c:39:0c:e0:e5:b3:a0:8c:73:
29:2a:ff:ef:6b:d0:5d:66:68:24:fd:81:f3:77:ff:
81:8d:c1:a9:b7:45:04:f5:e5:b2:ca:61:15:2f:c4:
bb:74:bc:c4:1d:83:ff:42:56:4d:07:11:8a:33:28:
34:5e:76:7c:d6:67:12:1a:54:7b:79:b1:fa:1b:cd:
4d:98:f2:bf:c1:09:2c:f5:1b:0e:c0:ef:6a:e7:58:
fc:45:9d:54:21:55:f3:a0:47:73:63:6e:39:64:eb:
e2:1c:be:1b:e4:a1:bd:16:2d:81:85:9b:2d:1c:c0:
d7:1e:01:d6:02:ea:1e:7d:db:16:1f:ae:c0:ee:5b:
fc:d3:bb:a6:da:e5:f8:7d:37:1c:a9:6e:7f:5d:84:
29:10:b6:c5:3e:d7:f4:f6:36:cd:c9:3f:d2:92:4e:
de:e3:6a:bc:30:6d:60:b5:a7:c6:51:11:99:e8:aa:
e7:02:4d:4f:a9:fa:ed:9f:c4:52:bf:52:16:60:50:
ee:e3:ed:c9:e1:c9:11:80:33:d6:fe:c7:49:06:b3:
e9:d3:ee:b9:27:18:df:20:95:9a:0e:e3:b3:ff:5d:
c0:4d:f4:94:be:22:fc:1f:b0:5f:42:43:72:ed:ba:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:86:7E:3C:17:36:31:F1:51:9A:15:AC:1D:A6:11:AE:C3:C7:6E
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:24:df:73:60:de:e7:14:44:3d:c8:f8:2b:9a:22:51:17:8d:
6f:76:56:7c:7f:b6:7f:51:5f:c6:53:5e:4f:95:11:10:0c:67:
79:79:58:e4:b4:cb:d3:8c:ef:75:c9:2a:22:19:f6:80:62:1d:
c2:8a:36:90:3c:dd:6e:e5:25:cf:99:e8:47:68:e8:59:82:58:
5c:14:b6:9a:79:e2:a8:5e:86:96:c0:e9:15:26:34:5b:74:e7:
de:93:4b:b1:b0:61:61:14:c4:54:ca:21:66:c5:44:f5:3d:08:
41:f9:2f:db:7b:91:43:12:2c:9b:27:b8:89:0e:45:cd:d2:a2:
7b:38:ba:cc:72:b7:9b:d0:bd:84:8a:f8:99:e0:a2:93:1e:f7:
49:fe:6a:e5:b6:d1:0f:4c:b1:71:ec:4c:10:44:11:50:09:ef:
f3:f6:29:66:d2:f7:a2:6a:54:62:7f:9c:27:67:52:da:cd:72:
89:0f:43:ac:49:49:66:19:59:c2:3e:18:51:96:4f:6c:0a:2a:
14:84:d8:2e:a5:fa:22:70:40:81:0f:f9:64:db:4c:69:ef:bd:
e8:80:f7:41:50:3e:bd:42:4e:00:3c:d8:94:8d:13:6c:d1:58:
40:27:35:d6:e1:c5:77:c8:a6:d7:48:ec:10:5d:69:15:02:4f:
8c:d0:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:32 2026 by rpki-client