Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
File: JXW4SPkMg0xwaxGDCm_-kktS4vs.mft (raw, json)
Hash identifier: xmbiC/3vIesfBPwXgnfy5+EPUoYkOymIE5eTh4hCKxw=
Subject key identifier: 21:7F:AA:67:5F:F7:A5:6F:16:64:10:72:94:B9:9B:B9:ED:FA:B7:49
Authority key identifier: 25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
Certificate issuer: /CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Certificate serial: 019EBE10BCA6008E6923A49FC9F745034549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
Manifest number: A5
Signing time: Fri 12 Jun 2026 23:00:28 +0000
Manifest this update: Fri 12 Jun 2026 23:00:28 +0000
Manifest next update: Sat 13 Jun 2026 23:00:28 +0000
Files and hashes: 1: JXW4SPkMg0xwaxGDCm_-kktS4vs.crl (hash: SEzt1osFzkezf7teg5fD5YAFOV/06tJJg/aOYMv+wTE=)
2: YmfhrzOCM66sJPg1PKrP9NnCVoY.asa (hash: 8/+ep3l2wKMWyTuGh0aBwWhRGg0m48hSZsKNp7TkDnE=)
3: mui-sKtnNSWRSnaMqkLa51rt19o.roa (hash: BS+qRZKXjkKi+axAKoghb2DmzEDHB1JdOOcYm5gKVHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:bc:a6:00:8e:69:23:a4:9f:c9:f7:45:03:45:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2575b848f90c834c706b11830a6ffe924b52e2fb
Validity
Not Before: Jun 12 23:00:28 2026 GMT
Not After : Jun 13 23:00:28 2026 GMT
Subject: CN=217faa675ff7a56f1664107294b99bb9edfab749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:64:72:a0:ad:f9:51:a0:36:2b:e8:00:ee:
02:9b:b5:ac:61:c2:11:31:81:4c:26:8a:62:b7:b7:
bc:56:30:65:12:d4:14:6d:a7:ab:0f:e6:67:3b:75:
7b:10:7c:9e:b1:18:63:a7:e5:38:96:d9:b4:82:f4:
e6:ac:45:18:ed:56:0b:44:21:4d:1e:9a:0d:6f:fd:
2e:4e:ab:4f:91:fb:4d:63:d6:44:9b:84:45:ae:d0:
53:de:c0:5f:5f:3a:ea:53:8d:27:1c:de:bf:99:be:
8d:19:00:68:4d:74:80:1e:f0:13:c5:1a:cb:66:7e:
7f:8b:7c:9b:d5:59:85:10:29:14:dc:3c:7d:ed:ec:
42:9b:e0:a6:62:c3:be:f6:30:83:7c:ce:aa:9c:cf:
ef:47:bf:0f:15:76:a0:79:d9:45:95:8a:1d:45:95:
3b:1b:7a:0d:e9:e4:82:99:6a:31:6d:05:20:f7:6b:
86:c3:4a:05:ce:20:8a:7c:f7:d4:1f:76:0f:d6:c1:
b2:01:7a:f4:3f:ad:3d:91:ed:26:07:a9:48:9b:77:
36:36:14:54:da:9d:b2:4e:f0:b9:d6:11:82:cf:8a:
70:32:be:45:13:09:a6:d6:3d:98:6f:9b:38:50:49:
e2:8b:19:ef:18:9f:6f:60:90:1c:f0:b1:3f:8d:5b:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:AA:67:5F:F7:A5:6F:16:64:10:72:94:B9:9B:B9:ED:FA:B7:49
X509v3 Authority Key Identifier:
keyid:25:75:B8:48:F9:0C:83:4C:70:6B:11:83:0A:6F:FE:92:4B:52:E2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXW4SPkMg0xwaxGDCm_-kktS4vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eb3e78-5fa6-4c01-9bcd-560488c8054c/1/JXW4SPkMg0xwaxGDCm_-kktS4vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:53:c6:d4:6b:6f:eb:96:e5:4f:a3:70:7c:d6:bc:5b:df:
95:d7:42:8c:3e:eb:0e:22:98:35:bf:f1:bf:6d:6f:f6:98:17:
8d:c7:f8:a8:7e:1e:7c:a7:a9:81:ec:35:68:94:25:a8:9f:8b:
78:69:b0:fb:f5:23:18:a7:65:c1:34:72:e0:e2:3c:4a:07:de:
0f:5f:e2:30:e3:ab:b8:4e:23:3d:95:db:03:f1:e7:a2:24:b2:
a2:88:69:0f:03:a5:0d:76:85:bb:d3:b3:6f:1f:c1:77:84:25:
39:f6:31:dd:dc:4c:3b:d4:40:50:3a:5c:d0:1a:72:ad:17:9a:
d1:41:c6:47:a7:dc:fa:94:4b:9a:f9:7a:a0:75:09:fd:e7:2b:
10:9a:74:58:1f:33:da:61:36:1a:20:b8:3d:1c:9b:b3:a8:82:
6a:71:c0:b5:5c:64:45:30:c0:7a:9c:64:b2:3a:dd:03:83:84:
47:36:a3:9c:05:95:72:7c:41:a3:93:d7:40:2d:b1:87:61:4d:
f7:01:62:f3:fd:42:34:09:fd:89:2b:bb:c7:0b:1d:d4:c8:9a:
62:9a:cc:8d:b5:9e:b4:50:a7:c2:5f:7e:04:b7:17:4b:2b:d1:
2b:f5:02:ce:08:15:b8:88:27:c1:4d:84:8b:f6:7c:0b:0d:f9:
3f:14:0c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:10 2026 by rpki-client