Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: eGvGIEJYpncJY11x+RlnEyaWim75S5mC/5FwzJonnqs=
Subject key identifier: 1B:A8:20:04:3D:BB:C5:50:3B:02:67:06:2B:77:2D:8E:0F:02:49:C0
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019FAA1A3413D3FBA01FFD997164F8E0FEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 1741
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (hash: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg=)
2: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (hash: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w=)
3: LJebYt2RKAnZnlBYImxu1KuPPwA.roa (hash: w3sfxOU2em+eBC1lFr5Hlv5Tl5JwfPlg/nsmQIWubs4=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: rIj8Jzl5vHM7NjEpjagBQQno8FjHzL7jjjshGUIdVY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:34:13:d3:fb:a0:1f:fd:99:71:64:f8:e0:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=1ba820043dbbc5503b0267062b772d8e0f0249c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:24:7b:68:b1:38:f1:53:f3:2f:95:6a:58:
8f:50:0c:33:1d:ed:c0:2e:13:79:8c:6a:d6:d6:7b:
b9:bf:2e:0a:b3:67:3d:af:a8:77:6a:98:96:be:b0:
24:0c:67:fc:10:b4:aa:56:a2:f5:3a:95:b6:da:1d:
55:63:00:13:0c:d2:ff:ab:8b:f1:e9:c5:49:a1:06:
b2:6d:01:00:ce:f6:cd:45:a4:01:2d:bf:fc:c8:1b:
3b:86:cc:72:82:26:ca:b4:e7:5f:ed:fc:60:f8:5a:
e2:50:a5:dd:f2:71:33:54:45:e2:8a:1e:eb:57:cf:
43:32:ed:ad:67:f3:ab:0e:24:c4:7a:84:b3:01:dc:
e1:89:41:75:40:ad:e4:99:2d:e7:a8:2d:f0:f8:bc:
52:fa:05:64:98:a3:f1:25:59:20:d8:78:cc:fc:af:
89:de:54:1e:e8:a2:9f:44:53:8f:f1:f0:7e:d1:73:
ed:02:a4:f4:b9:29:ac:68:69:b9:42:8a:01:3a:64:
bf:92:74:58:2f:9e:39:42:77:2b:0f:79:33:63:41:
54:37:67:95:44:07:a3:17:18:1e:c5:1e:83:39:b8:
ab:7c:18:a5:9c:ed:7b:f7:05:72:17:22:a0:03:4b:
6e:e5:82:dc:23:2b:be:a8:06:56:a3:96:a3:93:58:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:20:04:3D:BB:C5:50:3B:02:67:06:2B:77:2D:8E:0F:02:49:C0
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:44:46:ab:6a:31:db:32:ec:d3:47:b4:74:ba:5c:f6:fa:cc:
9c:ca:81:59:8c:fe:52:36:72:d4:52:5d:de:c2:f1:4e:83:6d:
7a:c3:64:a6:bb:99:65:95:27:de:65:07:e5:96:03:86:0a:03:
5a:64:a1:57:1d:1f:6c:19:5f:bf:fe:df:4e:26:6d:e7:46:1a:
26:3e:eb:f0:b2:ea:65:3e:67:b4:92:2b:c4:d9:d2:ec:4e:bb:
65:39:a8:b0:8c:2b:04:d3:f1:ac:f9:10:f1:74:a0:b9:38:31:
71:02:6f:1f:1b:2f:6a:4c:cc:5c:b6:01:f6:09:ae:cf:aa:4a:
32:de:3d:4c:a4:37:c9:0e:63:76:88:38:2c:bd:bc:80:50:79:
68:a5:46:ac:e3:ec:33:a0:5f:fc:55:13:20:6e:b9:e4:8a:2f:
c4:18:e4:1d:22:8d:cc:5f:6a:ae:99:c9:ac:db:03:22:4c:18:
37:d6:03:40:78:3b:53:13:77:5b:dc:9f:08:16:73:5a:81:8f:
3b:31:03:3d:83:be:2d:8e:10:df:0e:95:0a:0c:6d:d4:12:16:
07:7a:09:90:c1:0d:c8:34:ec:e5:06:0e:55:62:1c:4d:25:02:
0a:72:7d:b9:8a:da:c4:4c:3e:23:d4:cc:9d:6a:02:96:46:2f:
96:14:37:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGjQT0/ugH/2ZcWT44P7mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk
ODc3NDkwHhcNMjYwNzI4MTkwMTExWhcNMjYwNzI5MTkwMTExWjAzMTEwLwYDVQQD
EygxYmE4MjAwNDNkYmJjNTUwM2IwMjY3MDYyYjc3MmQ4ZTBmMDI0OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSQke2ixOPFT8y+ValiPUAwzHe3A
LhN5jGrW1nu5vy4Ks2c9r6h3apiWvrAkDGf8ELSqVqL1OpW22h1VYwATDNL/q4vx
6cVJoQaybQEAzvbNRaQBLb/8yBs7hsxygibKtOdf7fxg+FriUKXd8nEzVEXiih7r
V89DMu2tZ/OrDiTEeoSzAdzhiUF1QK3kmS3nqC3w+LxS+gVkmKPxJVkg2HjM/K+J
3lQe6KKfRFOP8fB+0XPtAqT0uSmsaGm5QooBOmS/knRYL545QncrD3kzY0FUN2eV
RAejFxgexR6DObirfBilnO179wVyFyKgA0tu5YLcIyu+qAZWo5ajk1jQXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuoIAQ9u8VQOwJnBit3LY4PAknAMB8GA1UdIwQY
MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt
YmNhODBlNDdjNTczLzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz
LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArURGq2ox
2zLs00e0dLpc9vrMnMqBWYz+UjZy1FJd3sLxToNtesNkpruZZZUn3mUH5ZYDhgoD
WmShVx0fbBlfv/7fTiZt50YaJj7r8LLqZT5ntJIrxNnS7E67ZTmosIwrBNPxrPkQ
8XSguTgxcQJvHxsvakzMXLYB9gmuz6pKMt49TKQ3yQ5jdog4LL28gFB5aKVGrOPs
M6Bf/FUTIG655IovxBjkHSKNzF9qrpnJrNsDIkwYN9YDQHg7UxN3W9yfCBZzWoGP
OzEDPYO+LY4Q3w6VCgxt1BIWB3oJkMENyDTs5QYOVWIcTSUCCnJ9uYraxEw+I9TM
nWoClkYvlhQ3WA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:54 2026 by rpki-client