Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: VSp4JN8dbexOKyuMaz2L+4caET94wKV1qBBn47m1gPo=
Subject key identifier: E3:35:71:02:CB:78:E6:7A:D2:B5:C8:C0:52:D8:39:62:BD:81:79:BD
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019EC3DC41254AE2D1AE1B4373264F1FFAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 04A7
Signing time: Sun 14 Jun 2026 02:00:52 +0000
Manifest this update: Sun 14 Jun 2026 02:00:52 +0000
Manifest next update: Mon 15 Jun 2026 02:00:52 +0000
Files and hashes: 1: FSCr9rK0vEudDS9_bQ3O-hGkqrk.roa (hash: ddVmg0mXECaptmy2zncQhSGmVK6AKxm9h3sGTc6VHOM=)
2: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: CnPY+967ctmiz3mYPukXSW5o7FQcxIfmdr5HLZWNQ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:41:25:4a:e2:d1:ae:1b:43:73:26:4f:1f:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Jun 14 02:00:52 2026 GMT
Not After : Jun 15 02:00:52 2026 GMT
Subject: CN=e3357102cb78e67ad2b5c8c052d83962bd8179bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:13:cf:b5:77:9a:eb:5a:fd:26:db:3c:a8:
fd:c3:9e:bb:e0:d7:1c:46:d8:c3:66:e1:ff:b2:9f:
4b:65:7e:25:ea:de:f6:0f:c5:57:f0:a0:8b:59:8d:
85:36:40:6d:e6:cf:29:c4:5a:f7:11:53:22:0b:e3:
10:05:de:8a:95:a0:2a:65:0a:aa:be:de:14:de:db:
cc:51:88:dc:b3:20:a0:d9:fa:fc:0e:db:61:e8:d3:
cd:44:fa:cb:9f:6e:14:a9:bc:85:e2:62:23:7a:2e:
b3:68:99:3c:d9:6c:53:16:e2:b3:da:5a:83:84:ac:
97:55:64:00:f7:82:ab:4a:21:56:83:b8:d3:8e:58:
81:b5:22:7a:5b:44:f7:9c:b7:3d:fe:a3:33:dc:6a:
49:ea:eb:6b:ad:56:da:22:da:31:2e:04:b5:90:45:
e6:71:d6:7f:5a:cf:d7:6a:0f:27:c4:9a:13:c3:c3:
e9:57:82:36:fa:3e:95:95:f6:47:b6:53:e0:e4:cd:
27:d5:1a:87:cb:28:0c:3b:f9:d5:81:08:f1:42:22:
18:b6:94:b6:89:8d:8e:f3:89:bd:5e:3c:d9:3a:58:
81:08:47:d5:fb:0a:f7:7a:55:67:99:7d:0d:57:da:
57:c8:43:2b:ce:31:dd:54:22:14:f9:c5:6b:9f:a4:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:35:71:02:CB:78:E6:7A:D2:B5:C8:C0:52:D8:39:62:BD:81:79:BD
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7b:3c:02:1f:08:6d:36:73:c1:97:59:87:ac:84:63:83:49:
f7:b2:41:41:dd:3e:c6:2f:ed:cf:7f:a7:68:cc:0f:e8:7b:1c:
84:85:31:a2:bf:56:24:27:77:1b:85:72:10:c8:4d:a3:81:aa:
90:4c:a9:72:f0:18:51:c4:a4:0b:45:2e:e1:48:9e:c4:1b:e2:
d9:5d:6f:ec:70:14:71:ec:ed:a0:fe:80:18:f6:c0:36:7b:81:
a3:e3:47:e9:a4:34:97:1d:85:ec:10:fd:fb:bf:eb:26:a9:79:
ea:f3:2d:a3:ad:f8:51:0f:12:6c:8e:89:5b:bd:ab:73:7c:dc:
37:89:2c:07:68:de:2a:8c:b9:b1:61:58:4b:65:7b:fc:57:ba:
b0:ea:1f:7d:43:00:8f:0e:a3:0d:f1:7b:4c:89:fc:a8:b9:60:
c9:8d:32:d4:6f:3a:ef:3d:7f:86:59:5c:14:54:20:36:3c:21:
a2:da:fa:e4:2d:06:79:8b:9c:04:40:8e:9a:bc:52:71:59:8e:
a5:3a:d8:00:89:f9:36:6d:36:0d:50:6b:c2:00:a2:58:c3:4c:
a6:68:ed:84:f9:a9:6f:d9:b8:18:1f:a5:c9:f3:77:bd:41:74:
1e:2c:5a:94:25:d1:bc:64:85:32:7d:e7:3b:29:9b:3c:6b:a6:
f0:69:d5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:13 2026 by rpki-client