Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
File: Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft (raw, json)
Hash identifier: u7iV0DIoqLH9BgjCvYzwF7prqqf36cBzvfkBGJIMd5M=
Subject key identifier: 7E:5D:D2:DC:94:4E:75:E9:B6:68:45:D9:5F:FA:2F:2B:8A:6B:05:CE
Authority key identifier: 25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
Certificate issuer: /CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Certificate serial: 019FA899695885C7F07A170FA85AE2AEC093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:53 +0000
Manifest this update: Tue 28 Jul 2026 12:00:53 +0000
Manifest next update: Wed 29 Jul 2026 12:00:53 +0000
Files and hashes: 1: C0q_FEBxSMrd9E0lH1qFkI0HoA4.roa (hash: z039AMhLSdjI+bLUAHVfZeXYFKTMJ1GuEuS23INfAZY=)
2: Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl (hash: MX5cbMhhw4ol+7PijRgxu2iFFlXGqOYFOIADyVa18FQ=)
3: mctbCwQm4KKjmeToBymcjKVxZA4.asa (hash: DrGRHy1qtMiaOeuOWdrwLS9l4ACbw4Gg+jvObrN5Pi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:69:58:85:c7:f0:7a:17:0f:a8:5a:e2:ae:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a9ff1c6f6e2c850c2991179fe521bc11667703
Validity
Not Before: Jul 28 12:00:53 2026 GMT
Not After : Jul 29 12:00:53 2026 GMT
Subject: CN=7e5dd2dc944e75e9b66845d95ffa2f2b8a6b05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9b:8f:d3:63:28:13:bc:16:b1:6e:51:31:f9:
26:24:6d:f1:a1:c4:6e:61:72:28:a1:b3:f6:af:77:
61:f5:fb:50:b5:13:d1:4e:b8:11:d7:3c:be:74:81:
99:7b:45:0e:72:6f:c5:c2:34:97:83:82:81:27:12:
68:a6:d4:9b:ac:84:8a:ac:9b:98:6e:87:8c:be:2f:
ae:d2:f2:8a:83:17:e4:c9:f7:05:e4:a8:19:3d:48:
76:f4:19:65:6d:45:45:44:e0:a1:90:74:a7:81:ee:
29:3a:b0:78:16:53:f5:31:cc:69:f9:bc:a8:56:53:
1d:a2:59:cd:11:e9:5e:03:c1:53:54:04:2f:52:15:
56:3b:76:c1:5b:b1:4d:6e:a3:48:5c:26:a5:d1:7a:
bf:8a:79:93:51:d6:66:16:8f:f6:0a:58:85:d9:8b:
be:a9:94:79:85:6a:52:cc:7a:da:63:15:d9:eb:3b:
ca:2f:63:4a:ed:f5:a6:00:c2:07:53:db:90:bc:4b:
9e:99:bc:f2:02:bf:03:ac:8b:20:82:61:29:c5:99:
f4:39:a6:56:26:00:1b:2d:d8:3c:a4:ac:93:38:d6:
d1:59:c1:8a:fb:d8:f8:2a:e6:22:a4:5f:e9:ca:d1:
cd:36:08:5e:01:08:ac:28:ed:d9:c1:70:5b:33:49:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:D2:DC:94:4E:75:E9:B6:68:45:D9:5F:FA:2F:2B:8A:6B:05:CE
X509v3 Authority Key Identifier:
keyid:25:A9:FF:1C:6F:6E:2C:85:0C:29:91:17:9F:E5:21:BC:11:66:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jan_HG9uLIUMKZEXn-UhvBFmdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/dc650a-c8c3-4e31-a790-c23f731362ce/1/Jan_HG9uLIUMKZEXn-UhvBFmdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:26:fc:09:d8:ca:5d:fe:de:9c:0c:60:da:ae:c4:df:86:58:
5d:92:0e:4c:f6:21:2d:bc:f3:d0:6d:51:ea:58:bf:00:df:50:
af:d5:51:fc:03:a7:58:0d:22:2d:4f:a7:74:2c:79:b9:df:f1:
1d:ad:30:d4:ba:09:c0:b4:73:90:8c:6f:3c:a5:37:52:42:ac:
77:3d:4c:e1:40:7b:69:fb:63:be:1e:ba:49:5a:46:04:6f:51:
93:38:47:66:26:89:2f:96:65:3f:96:22:f5:ed:09:51:5e:93:
42:0a:93:ac:3f:86:76:18:57:03:70:82:f6:07:0e:bc:80:a5:
59:b3:e8:f9:7d:17:5d:22:e5:ab:03:c3:3a:ec:e7:43:95:84:
b1:c7:17:73:4f:7a:88:d8:50:21:c0:5d:94:d0:8e:7e:f8:28:
43:4c:e4:a6:bd:4f:1f:1a:f3:b3:5f:c8:ae:6e:db:45:fc:4f:
fa:53:7c:17:c4:e8:1a:d0:b7:91:9a:23:82:a6:aa:0a:e1:58:
61:33:29:6c:f1:d0:ad:4f:19:cf:8e:a8:64:a3:ce:12:bf:56:
1e:18:98:e1:c2:59:10:e3:96:7e:2a:02:f9:c4:b2:78:ea:ff:
b2:87:ba:59:8b:59:53:30:b0:9c:de:dd:ff:e3:79:3d:db:42:
2a:dc:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:39:41 2026 by rpki-client