Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: 4L2F4BTkI6j3kHOe8Wr0Khnzg/2nkE6SQj8y0TCUn5I=
Subject key identifier: A9:D7:9C:6E:CC:B6:25:CA:5F:E8:EB:BE:91:E5:91:F4:12:2F:A5:0E
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019EC224531C5AF73FA94027129FBB787CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 1235
Signing time: Sat 13 Jun 2026 18:00:20 +0000
Manifest this update: Sat 13 Jun 2026 18:00:20 +0000
Manifest next update: Sun 14 Jun 2026 18:00:20 +0000
Files and hashes: 1: 0oxdyMukMZaAGBeo9l9rFsh78pk.roa (hash: DX6ZwX+iC1cN81KUv6aS7NPJaf7Awa86RPypXOmFS5E=)
2: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: pdQ6gTTV4HnNpJVCpg/WeiD4DLnxnARV2doqCH5u8KI=)
3: dyVWHuwmCwNemfhA3NEDaxJ2sdw.roa (hash: Q8NYEk98UWxN0ux4Y6DtAD9386w6kojLNf1xUJ5/UcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:53:1c:5a:f7:3f:a9:40:27:12:9f:bb:78:7c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Jun 13 18:00:20 2026 GMT
Not After : Jun 14 18:00:20 2026 GMT
Subject: CN=a9d79c6eccb625ca5fe8ebbe91e591f4122fa50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:30:7e:1a:cf:a9:6a:61:8c:8f:37:65:43:45:
60:b4:cd:eb:f0:4a:b7:d8:3e:91:f3:a5:d4:40:d7:
c1:7c:29:99:93:bf:5a:90:5e:90:0f:3d:74:ba:4d:
dd:65:6b:b2:27:99:57:3d:d5:36:e8:e9:88:a8:05:
96:4c:9a:c6:6e:d3:77:a8:ee:1d:ca:af:5b:13:90:
bd:39:21:a7:d9:89:a3:76:24:fb:43:f8:c0:9e:21:
92:e7:02:41:04:d4:b0:78:e3:35:d4:53:34:57:db:
35:3c:be:96:be:d0:d7:c5:b5:df:57:36:04:ea:e9:
0b:ab:c2:d2:ed:f6:d6:52:6a:8a:33:ac:b2:d9:15:
93:e6:04:82:88:fd:be:30:55:1a:c2:89:d8:9e:f7:
fc:9d:79:c0:39:4a:8a:37:e3:11:2e:5e:d7:7b:4d:
73:97:3e:71:e1:62:ba:f1:60:4d:17:7c:36:ec:12:
7b:96:6b:b0:4d:10:f8:e7:54:bc:7b:3a:2d:5a:24:
0a:c1:73:56:52:08:67:67:a9:1b:44:5e:69:80:ae:
ab:6a:7f:ed:bc:c4:b0:a4:ae:99:34:bf:5a:b6:f3:
53:0d:65:fe:b7:d2:37:50:dc:37:01:b6:63:fd:de:
59:6f:e3:e1:ca:d1:cd:fe:4f:42:14:91:fb:88:4b:
e8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:9C:6E:CC:B6:25:CA:5F:E8:EB:BE:91:E5:91:F4:12:2F:A5:0E
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bc:ec:1c:ba:9f:03:4f:3e:2a:36:57:14:73:88:62:8f:33:
1b:3f:39:21:29:0b:74:66:cb:1b:93:63:fc:0b:d5:f3:47:fd:
c1:7e:ac:8b:75:c6:0e:89:8c:28:89:73:a9:36:01:89:d8:c9:
a3:3b:0e:a8:d1:14:12:49:80:5e:48:ff:6f:31:79:b1:c0:f7:
ed:e5:14:29:1a:47:dc:6f:f7:cf:df:c9:86:91:67:42:7a:8a:
f3:b1:96:ee:9a:84:36:a5:09:43:de:70:55:c7:20:e7:4f:6e:
0d:bf:10:87:44:8a:e1:15:a4:5f:5d:c6:7e:8a:35:fe:d0:ef:
ca:bf:05:da:fc:45:31:cf:f0:28:9b:83:2e:21:46:3c:f7:98:
90:4d:b9:07:31:27:e6:96:c8:55:47:4e:44:c2:83:49:78:19:
79:fe:5b:84:2d:df:18:93:4c:a7:f9:7d:07:81:4d:66:fe:fe:
33:c2:1d:14:0a:99:36:ef:c8:66:71:9e:5e:60:03:a9:fe:04:
3a:37:e5:7d:f8:6c:12:0a:a0:a6:72:c0:86:d1:49:da:40:74:
64:a6:01:62:1a:11:8c:a2:6f:9a:4c:c0:d7:11:34:9b:89:b7:
ff:98:aa:c5:39:1f:a1:f5:13:6f:d9:6a:b5:aa:8e:28:82:4a:
27:d5:da:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJFMcWvc/qUAnEp+7eHzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjYwNjEzMTgwMDIwWhcNMjYwNjE0MTgwMDIwWjAzMTEwLwYDVQQD
EyhhOWQ3OWM2ZWNjYjYyNWNhNWZlOGViYmU5MWU1OTFmNDEyMmZhNTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jB+Gs+pamGMjzdlQ0VgtM3r8Eq3
2D6R86XUQNfBfCmZk79akF6QDz10uk3dZWuyJ5lXPdU26OmIqAWWTJrGbtN3qO4d
yq9bE5C9OSGn2YmjdiT7Q/jAniGS5wJBBNSweOM11FM0V9s1PL6WvtDXxbXfVzYE
6ukLq8LS7fbWUmqKM6yy2RWT5gSCiP2+MFUawonYnvf8nXnAOUqKN+MRLl7Xe01z
lz5x4WK68WBNF3w27BJ7lmuwTRD451S8ezotWiQKwXNWUghnZ6kbRF5pgK6ran/t
vMSwpK6ZNL9atvNTDWX+t9I3UNw3AbZj/d5Zb+PhytHN/k9CFJH7iEvoLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnXnG7MtiXKX+jrvpHlkfQSL6UOMB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLzsHLqf
A08+KjZXFHOIYo8zGz85ISkLdGbLG5Nj/AvV80f9wX6si3XGDomMKIlzqTYBidjJ
ozsOqNEUEkmAXkj/bzF5scD37eUUKRpH3G/3z9/JhpFnQnqK87GW7pqENqUJQ95w
Vccg509uDb8Qh0SK4RWkX13Gfoo1/tDvyr8F2vxFMc/wKJuDLiFGPPeYkE25BzEn
5pbIVUdORMKDSXgZef5bhC3fGJNMp/l9B4FNZv7+M8IdFAqZNu/IZnGeXmADqf4E
OjflffhsEgqgpnLAhtFJ2kB0ZKYBYhoRjKJvmkzA1xE0m4m3/5iqxTkfofUTb9lq
taqOKIJKJ9Xa2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:34 2026 by rpki-client