Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: lGttcdRvojMOnA7lcvuA2k6rc2k9Tpf/5sprWI6pa3A=
Subject key identifier: 09:11:FD:BC:DE:BF:A3:B6:9C:95:BD:13:73:92:BC:B6:34:18:BA:C5
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019FAD88C481336C08A67ED90D3BE36BC965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 19DC
Signing time: Wed 29 Jul 2026 11:00:49 +0000
Manifest this update: Wed 29 Jul 2026 11:00:49 +0000
Manifest next update: Thu 30 Jul 2026 11:00:49 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: iHwYZPQHldoa8E4dBa064JGXoy0+i5tsjiAbu5r2JRU=)
2: lSlG7rI2eJuiPKf-HzKcyhBPp1g.roa (hash: 53i2XoHaeuLLxKqYVRpE4lR9h2EBCgSQcRQiDH1i//M=)
3: scC5gNxexOD9_MYBJVYJT8pP6Ag.roa (hash: yC68S8mkaapsGvYB3k9kgiLL9Ie9a4V0LG7QX9QvJvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:c4:81:33:6c:08:a6:7e:d9:0d:3b:e3:6b:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Jul 29 11:00:49 2026 GMT
Not After : Jul 30 11:00:49 2026 GMT
Subject: CN=0911fdbcdebfa3b69c95bd137392bcb63418bac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:34:f6:af:4a:50:c4:ce:72:a6:ff:93:7e:
ab:0f:88:73:c2:27:1a:80:16:1c:1c:36:0e:40:d6:
98:83:d5:9f:c3:a3:41:7f:80:71:03:e6:1a:a8:9b:
01:79:ee:01:08:0d:10:3c:7e:fc:22:26:7d:ac:1c:
91:15:f5:85:81:f4:67:c9:07:04:10:6a:54:5d:1e:
88:ee:bc:01:91:3d:8e:00:5f:74:32:4d:25:94:83:
42:18:a2:da:d4:13:bf:ac:b5:9d:4b:df:43:b4:36:
7a:ee:f8:8f:88:54:f1:19:c8:68:a7:37:b7:b0:5a:
a2:17:9f:8c:09:a5:7d:c4:50:28:b5:50:5d:2c:35:
62:9d:bb:ea:0c:5e:6e:c8:af:58:a3:3d:42:5f:a5:
33:f8:c1:29:53:76:ad:84:33:1d:77:2b:11:76:9f:
e9:92:3f:87:85:26:fb:4d:99:f4:13:77:0c:de:4c:
83:dd:f4:27:45:01:8d:94:d8:46:46:f5:41:99:81:
87:a0:0a:02:fd:54:4c:46:6e:1b:5f:fd:5a:bf:6a:
9c:4b:1d:c5:42:4e:3b:9a:70:a4:19:11:64:04:88:
84:1f:97:68:0f:49:ff:89:46:26:d0:55:d4:5e:90:
9b:51:0b:1a:88:ee:86:c9:50:00:62:3d:da:a8:d7:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:FD:BC:DE:BF:A3:B6:9C:95:BD:13:73:92:BC:B6:34:18:BA:C5
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d8:36:a0:91:fd:a0:9b:f6:ec:88:81:e6:d5:a4:4e:91:7f:
0a:a2:3f:43:d7:33:78:1e:13:69:cc:ec:ba:64:e1:6b:d9:d2:
a9:a9:53:f9:2b:ac:19:f8:dd:38:79:7a:e3:2b:ce:35:88:31:
b7:7e:99:84:2a:aa:42:e5:cc:f4:d1:d3:b1:12:f2:0b:8d:a9:
24:3a:50:8f:70:cd:bd:a1:97:2d:9f:6d:45:3a:56:d4:63:d9:
61:5e:0b:ce:7b:07:49:07:f4:43:7a:54:0c:e4:c0:12:56:6f:
b3:a6:fd:86:9e:1f:72:85:1e:63:bc:97:52:04:cc:1b:1e:3c:
8e:64:7e:54:fe:1a:cc:03:8d:44:7a:c4:2e:84:b7:ed:22:f5:
a9:0b:e5:d1:d1:88:2d:b2:dc:f5:b9:e1:ea:13:51:c3:de:52:
92:25:31:8a:fa:fe:11:f7:1e:67:73:9c:65:6b:f6:5e:4a:cc:
98:c3:87:8c:32:a7:84:45:14:a9:6f:3e:b3:b7:0f:65:9e:be:
cf:a9:30:36:02:72:68:f6:2c:e0:d7:18:e9:d4:7a:3a:a5:67:
05:b8:ef:8f:ea:5b:21:10:9f:0a:61:41:5e:ec:d6:9e:ac:5f:
5c:c1:15:38:8e:bf:3f:56:16:56:e6:42:ae:09:a2:64:22:e6:
36:4a:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:03 2026 by rpki-client