
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: cPYC7W1+83X15gowVEFgvsR+IkJ+0GesxrYyM/2FWzQ=
Subject key identifier: 48:86:38:D1:EB:38:8B:30:75:45:3A:FB:7D:F8:7C:45:D5:54:41:88
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 019EC0369D2E0610468F74DE08322F83BA87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 153F
Signing time: Sat 13 Jun 2026 09:01:05 +0000
Manifest this update: Sat 13 Jun 2026 09:01:05 +0000
Manifest next update: Sun 14 Jun 2026 09:01:05 +0000
Files and hashes: 1: 0yWPvFtMAYIcTAg5JfApwnsaFGI.roa (hash: 1p9eIfwmhKokMGTrk5iOiVMk3FImaB8EaoWESHMvCLQ=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: S49k3CM2t5T6j2VzaK2SmBjWjEokLuvhF8IOaJwJSio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:9d:2e:06:10:46:8f:74:de:08:32:2f:83:ba:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Jun 13 09:01:05 2026 GMT
Not After : Jun 14 09:01:05 2026 GMT
Subject: CN=488638d1eb388b3075453afb7df87c45d5544188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:c4:bb:74:29:57:72:da:32:cb:f6:d6:ec:
14:b0:f4:5e:3f:72:45:0f:ad:7e:80:b3:43:8b:3f:
d6:19:35:d7:55:2d:97:57:82:e6:c2:48:b0:15:53:
ce:5b:e7:c7:c1:5f:29:25:ba:01:62:14:60:9a:cd:
05:66:a7:dd:f6:29:63:e7:1f:c7:d3:08:d8:01:7e:
ad:7a:c3:27:51:64:8c:f4:c7:42:5c:6a:f7:96:44:
61:f6:83:e9:1e:10:71:a9:72:4f:63:08:ab:c3:8d:
2c:34:f6:bc:e5:c1:ed:fe:34:0e:73:74:20:f4:f7:
ff:9d:2f:86:5c:8b:22:0b:a3:cf:d8:2b:a9:22:71:
1f:66:6b:69:2e:b7:83:32:75:8b:b6:78:a6:17:68:
45:52:7d:46:56:64:98:71:4f:63:ce:aa:26:88:19:
63:17:82:1c:5e:ae:0e:99:78:b7:e3:49:0d:98:46:
a5:69:47:07:f0:8d:b6:56:94:db:7d:19:2d:bb:82:
fa:3b:b7:53:3c:59:d5:1f:32:75:20:4c:9a:08:15:
3c:06:e3:76:63:ce:3b:cb:08:23:6e:ad:fb:e2:6e:
d8:46:6d:ec:a9:30:5c:bd:44:79:5a:2c:5c:7b:6b:
6d:62:9c:59:fc:a8:00:ff:36:12:36:23:ef:6f:64:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:38:D1:EB:38:8B:30:75:45:3A:FB:7D:F8:7C:45:D5:54:41:88
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:1e:c7:7b:b0:77:12:db:b0:af:40:4c:e5:0c:fd:57:f0:
b5:bc:4a:e5:1a:8c:cc:4e:da:4c:f3:f0:b8:4f:70:4f:37:22:
41:15:db:36:54:e1:79:bb:b5:64:6a:42:18:2d:f4:e4:68:0e:
e0:a5:d6:2d:9e:6b:da:15:53:58:f1:0a:e5:ef:fd:95:fe:5a:
c2:c8:7d:77:09:e1:9a:23:ca:4c:93:11:6b:3f:1e:c4:5a:d7:
2a:58:43:d1:41:d0:ba:f2:83:a9:a3:68:63:b4:98:10:d2:79:
43:3d:8c:c3:1e:e1:86:f2:4a:2e:95:db:1e:e1:c4:73:c2:e0:
5b:f5:1d:8a:3e:d6:fc:43:dc:c5:82:c7:86:7a:e9:6f:79:8f:
b1:b8:7e:e0:2c:bc:2d:50:e8:40:d7:8d:f9:d9:dc:30:0f:5c:
8c:09:a4:d7:66:59:d8:1e:26:a6:bc:de:ab:79:ef:b2:f1:c7:
6f:a9:44:92:1f:0c:f7:68:ee:93:68:d0:a3:4d:aa:6f:1a:39:
78:8a:5c:ab:76:93:38:80:ff:65:56:94:01:c1:ba:7d:61:1e:
02:7d:d9:0b:46:20:19:e2:67:28:a7:77:30:99:36:b9:5a:14:
46:62:6b:8f:4b:0d:68:c7:6e:31:03:ca:63:df:df:e9:c3:81:
5f:d5:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:46 2026 by rpki-client