Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: w6OWIr6AcsaxfPGnzuZ6FNWWkImGQogpB1jMcfUZrXI=
Subject key identifier: 10:88:EA:B8:AC:FB:59:AB:C3:77:84:E2:8E:5E:C1:E6:7D:DA:C8:5A
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019FAB9A651736CB02F5406F595B08A6E499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 02:00:50 +0000
Manifest this update: Wed 29 Jul 2026 02:00:50 +0000
Manifest next update: Thu 30 Jul 2026 02:00:50 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: k9+XES8M1DINhL3UXIU+UPg5KcdG9zCn7pDw0zXsnE4=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:65:17:36:cb:02:f5:40:6f:59:5b:08:a6:e4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jul 29 02:00:50 2026 GMT
Not After : Jul 30 02:00:50 2026 GMT
Subject: CN=1088eab8acfb59abc37784e28e5ec1e67ddac85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:db:94:90:de:a8:0c:4a:65:a8:26:f8:bf:
01:a9:47:60:7b:02:51:6f:c2:b0:d3:92:0a:d5:81:
7a:61:c0:80:d1:3d:f6:b1:25:ce:11:81:10:73:ed:
e4:d7:fe:e4:d8:32:50:b0:98:3b:e9:4b:0f:15:12:
73:72:f7:86:ce:b6:33:05:8c:11:1b:29:79:2a:c9:
e6:ce:3a:f0:1b:8c:e3:38:12:97:61:24:38:e4:b9:
cb:c5:26:02:19:d8:f4:1f:20:57:84:99:38:ba:ac:
b9:86:c2:2e:91:66:ac:c6:cf:6b:06:76:79:91:82:
cf:d9:31:86:06:0a:16:b7:cd:f9:3b:94:d6:d1:10:
fc:9a:00:65:49:19:76:b6:7d:dd:c3:fc:21:9a:d0:
75:e9:ef:63:d2:d8:46:f3:65:55:21:cd:49:42:6d:
ad:42:d3:ca:a4:b8:3c:d5:4f:f8:2a:a4:59:a2:83:
27:b8:36:de:5f:4a:f6:5e:40:4c:cb:6c:d9:1c:d6:
b7:db:7a:33:1f:fb:e3:37:b1:99:37:bd:43:b9:df:
19:23:60:da:06:2c:1e:71:b8:53:e5:46:02:1d:68:
fe:38:35:d0:b4:15:63:0a:fc:d8:8e:20:9b:8e:60:
c4:ea:f3:3d:b0:48:09:8a:ae:32:c2:74:fc:8e:b5:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:EA:B8:AC:FB:59:AB:C3:77:84:E2:8E:5E:C1:E6:7D:DA:C8:5A
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:1e:36:f6:2d:f8:7c:2f:37:24:71:cc:4d:cc:6f:23:25:
3d:7f:26:bb:b5:fb:85:c3:5f:7a:2b:2c:e2:7d:59:ff:82:e1:
ac:07:e7:f0:aa:99:ea:80:1c:e2:63:df:35:5f:fe:4d:61:28:
45:5b:17:45:b8:78:ed:70:4d:1c:43:51:ac:76:2c:7e:49:f3:
98:dc:dd:d5:01:62:88:00:b0:1e:65:88:85:fa:a4:cc:27:3f:
73:54:28:60:5e:90:39:81:84:b7:5e:96:ec:70:5b:a8:3e:36:
b8:5d:8d:f8:92:5c:3b:d4:39:32:9a:69:de:28:a4:d1:0d:ad:
38:1f:de:ff:4c:fe:ab:a7:36:ff:4c:49:dc:c9:fc:d6:39:2b:
9b:ac:ff:08:9f:bc:ec:06:9a:3d:34:d4:cc:91:8b:41:92:f0:
20:e0:ef:e0:a3:2a:8b:b8:c9:c6:a1:93:dd:5c:11:0f:a8:22:
40:91:55:49:79:ff:a8:28:98:91:2b:28:91:59:bf:af:dc:bc:
ee:3a:c5:a0:a8:0b:88:16:27:3c:f3:25:06:92:1f:05:df:c8:
43:6c:4e:70:10:68:21:b1:d3:28:75:9f:af:65:e7:87:c4:c6:
d9:16:6f:14:20:b3:7a:5a:c3:b6:0a:98:03:83:7d:7c:aa:dd:
51:02:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:29 2026 by rpki-client