
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: UVyWYVkTZMUyj44IgilAJi9sLMha4TIfDOpW1mQzN3w=
Subject key identifier: 90:CD:59:D7:D4:0F:8F:06:43:FD:E6:9C:19:8E:B3:8E:4D:63:B7:07
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019FAB6348CFFF476EEDA4F8C8C891EF26EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 01:00:38 +0000
Manifest this update: Wed 29 Jul 2026 01:00:38 +0000
Manifest next update: Thu 30 Jul 2026 01:00:38 +0000
Files and hashes: 1: 5iJn7j9NwT_4zRsEmDpwaHGzgK8.roa (hash: Bq7Db27aznpNLmbu0ahDjZ7PeJYf+EQGmsNOgekFe6w=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: fKV+MIPLfSZZGeaA9kVa7bDroqvhR/rrFvskEGGBQ/k=)
3: wCBMxNVW2s2juIQvGN-nvZjm17I.roa (hash: 3w8A09CcQCqIlBuWIFasyBemt1OICie2jVw2nf/HSKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:48:cf:ff:47:6e:ed:a4:f8:c8:c8:91:ef:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Jul 29 01:00:38 2026 GMT
Not After : Jul 30 01:00:38 2026 GMT
Subject: CN=90cd59d7d40f8f0643fde69c198eb38e4d63b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:b6:62:cf:2f:7b:43:77:cf:42:48:17:50:
6f:9e:34:95:8a:76:1d:57:e8:9d:eb:de:b9:18:25:
6d:f1:75:4f:07:e8:34:c1:dd:69:31:fc:f5:5b:74:
a2:07:98:5f:a9:21:3b:3c:f1:2a:15:43:b0:bd:26:
ae:3d:cc:e3:5d:24:e7:99:e7:5b:df:79:67:76:7f:
68:30:d7:ff:30:a9:21:eb:76:4b:cc:94:81:87:72:
91:ed:a1:c6:cc:0e:01:3e:9a:ba:3f:ec:d7:53:87:
a3:72:94:78:cf:f6:89:df:e1:cc:41:4a:60:78:71:
a3:94:4e:33:3d:65:f5:f7:89:d2:76:f8:93:ed:77:
b3:7e:3a:c5:e8:1d:35:71:fb:af:ae:d9:ed:62:36:
15:17:19:3b:d5:a9:7b:a1:b6:b9:07:2e:b0:90:a8:
a3:3c:c8:08:fd:3a:1c:c1:ae:60:5c:8d:7a:63:1b:
04:43:8b:8c:47:bc:3d:e8:88:88:56:e1:d9:ff:70:
da:95:67:97:a2:20:a5:cf:9b:26:1d:5f:27:d5:bb:
84:8e:d7:fc:04:71:40:70:e2:c4:9e:67:fb:29:c7:
2d:9d:f1:15:9a:b6:bc:01:23:e9:3b:a8:b5:e8:a7:
6d:a7:72:4f:1c:23:99:52:14:94:25:f7:69:3b:66:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:59:D7:D4:0F:8F:06:43:FD:E6:9C:19:8E:B3:8E:4D:63:B7:07
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6e:60:bb:27:f5:ff:ca:99:fa:04:15:11:d4:91:c6:5e:16:
fa:a9:b7:0a:ea:62:a9:c7:f1:c2:df:91:9a:75:a0:91:01:6f:
52:f9:ad:ae:dc:e4:c2:7c:d6:44:ca:13:55:a4:0c:4d:fa:98:
75:f6:37:1e:17:1b:32:ee:07:d7:aa:80:df:a1:d6:d6:5a:5d:
7e:db:cc:34:37:60:40:a1:00:3f:85:4a:41:ff:4e:79:3d:bc:
95:75:c8:57:bd:af:eb:4f:0a:87:c2:1c:86:50:ed:86:54:fd:
a0:42:37:0b:d2:85:ea:12:4d:ff:b9:c7:82:c0:53:ef:41:89:
33:b5:71:c0:70:1f:52:a3:fb:11:24:b7:b6:81:a0:a3:a8:51:
00:1b:6a:f0:39:d8:f2:22:c4:a1:4e:82:10:30:34:9d:2b:2a:
e0:7e:d7:16:50:88:d8:fc:1f:e7:d0:42:97:73:37:01:65:9a:
88:31:0a:bc:22:0a:05:39:56:dc:c7:4b:4b:7f:29:1c:77:f7:
71:45:9b:69:75:76:0e:25:e9:ab:7d:5d:9a:a9:2f:ea:dd:d9:
d2:44:21:7f:93:71:bc:8d:4f:4f:8e:a8:bf:b4:6a:1c:c6:bb:
26:f6:ab:77:f8:9f:4c:0d:42:ab:77:ab:8e:71:92:36:e1:02:
48:07:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:41 2026 by rpki-client