Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
File: jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft (raw, json)
Hash identifier: 7Q20wmcRmfKa43u1brO1aF9hCrz7RSGMDYc5I36uomc=
Subject key identifier: 1C:5C:58:1C:5A:D3:47:B7:35:27:3C:52:91:EF:2F:A9:A4:A3:5F:45
Authority key identifier: 8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
Certificate issuer: /CN=8cc44984c686f2018c48102a284ab5a80f52a646
Certificate serial: 019EC0DB6349F10B71140280C776561002FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
Manifest number: AF
Signing time: Sat 13 Jun 2026 12:01:03 +0000
Manifest this update: Sat 13 Jun 2026 12:01:03 +0000
Manifest next update: Sun 14 Jun 2026 12:01:03 +0000
Files and hashes: 1: ZH79cfZtvswrSRgEB8rNyMLIncU.roa (hash: GdJB3BYjUYCwb6ugCMPQc81N/mokOXiUDJJvBJrnEFI=)
2: ZRs42qGd3cKFMrGetaE_cEFCL58.roa (hash: QY1vvv3yXpUMazK4C60xrRvy7PbaO26yt177jKe+yzU=)
3: jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl (hash: v/RRzZfb4soJqM8T6uVs6a0Pt2L3wvw6xzcit/UeBdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:63:49:f1:0b:71:14:02:80:c7:76:56:10:02:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc44984c686f2018c48102a284ab5a80f52a646
Validity
Not Before: Jun 13 12:01:03 2026 GMT
Not After : Jun 14 12:01:03 2026 GMT
Subject: CN=1c5c581c5ad347b735273c5291ef2fa9a4a35f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:f2:7a:15:04:b3:dc:4a:81:b2:5d:5d:4e:
55:bb:90:5e:ac:98:a2:80:db:05:be:e9:8a:89:3a:
b5:42:24:4a:08:8b:5f:6f:74:1f:e5:28:87:2e:d5:
ec:2e:4f:5c:35:ef:6d:73:aa:58:6c:e2:a4:90:1c:
c8:73:b8:7b:b3:af:d6:a2:8e:97:af:a3:ec:d6:1d:
e3:a0:34:95:1a:e2:42:ce:5c:6f:d6:83:76:e4:ee:
c6:29:05:c1:05:ab:0d:f5:3e:f8:cf:44:81:57:98:
dc:c2:49:5f:62:e1:a2:ad:33:4c:eb:57:e8:15:9a:
87:18:5f:cf:7f:2e:c4:5a:71:3d:08:d5:db:ab:a4:
63:cb:f7:fd:e9:04:dc:1c:e0:bb:b4:19:30:b7:08:
fb:c6:f2:3f:94:ee:4b:13:62:ea:35:60:f1:c5:9b:
a2:de:2b:63:b5:7d:b3:d0:81:83:8f:82:8b:dd:39:
5c:59:d2:77:b8:11:97:00:dd:6e:c0:c9:bb:90:d5:
8a:4d:5d:61:d7:09:65:5d:45:15:2a:4e:b5:8b:20:
05:f2:99:87:2f:bd:3e:05:bc:54:ae:13:22:cb:16:
ac:bc:0b:d0:d8:87:21:96:00:60:05:a1:8b:bc:6d:
a1:6c:c4:4a:bc:b8:65:2d:1f:87:c7:90:50:19:8a:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:58:1C:5A:D3:47:B7:35:27:3C:52:91:EF:2F:A9:A4:A3:5F:45
X509v3 Authority Key Identifier:
keyid:8C:C4:49:84:C6:86:F2:01:8C:48:10:2A:28:4A:B5:A8:0F:52:A6:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMRJhMaG8gGMSBAqKEq1qA9SpkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5ba85e-3937-4b0c-87d9-c2f84747d75f/1/jMRJhMaG8gGMSBAqKEq1qA9SpkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:73:31:65:d8:3f:02:8b:33:01:e7:f3:e1:40:ac:9d:ac:df:
17:fd:68:6f:f9:15:c6:a9:4c:fd:8d:cd:cf:c0:8b:83:cd:b2:
25:14:4c:a6:57:88:41:72:c6:d8:8a:2a:05:c5:71:42:7e:da:
b3:ce:d2:2a:44:87:92:33:38:a6:7c:63:87:3e:52:0f:c0:6f:
91:ed:f1:b4:ce:12:aa:e3:9e:68:f5:9a:91:77:a6:71:a2:28:
d7:03:92:4d:69:8b:ee:25:bd:6f:b3:47:be:75:4d:50:09:a7:
32:0a:4f:42:4d:8a:03:5c:07:be:a4:3b:03:dc:38:f9:b6:d8:
39:d7:00:8a:14:bb:b6:50:3e:bf:18:36:cb:4a:b7:e4:e5:6c:
c4:b5:a9:6f:2f:1a:e2:d6:9f:ed:9d:10:95:ba:b8:a6:ae:41:
78:8e:d9:52:dd:dc:10:5d:25:9e:9a:12:31:70:0d:2d:c5:7d:
3f:b7:78:82:95:46:5c:24:a4:58:80:5f:a7:eb:a5:1c:41:8a:
0f:4a:d9:9e:b9:b6:49:30:f7:35:a9:35:bb:f3:99:60:cf:b5:
bb:75:28:25:15:74:f8:48:2a:cc:ad:ed:0a:f6:4c:64:e8:f0:
c2:1f:28:29:e1:c7:93:65:0e:03:c6:cc:d5:02:ba:18:57:a5:
51:62:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:41:37 2026 by rpki-client