Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: 1rejoNzSRJjh56OuN5OfyvzkBb/Gz7IeojxsrpacTHw=
Subject key identifier: DE:56:30:06:E5:7D:4C:D1:35:8E:EC:09:1E:2D:7F:6D:54:78:07:A5
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 019FAA87416037AA0CD7465F7EB66A64D7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1956
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: HtbylTK2vbDOuBm0zBlN1jFbHAA.roa (hash: +yyMULExE8bD9KlS00z9hBoqzPzIE4AcUEcqoEY37Ks=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 7xO0lX0BxF4AyTvsLFAjWqXPa6kj9o0uiDCOFDE++AQ=)
3: R5O_3B844t5uS1KvjIZ3XWNlGeM.roa (hash: twgUlo54QZeRcs4ra+KGMTwtZ4OF+bDpQFFwCmgzlAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:41:60:37:aa:0c:d7:46:5f:7e:b6:6a:64:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=de563006e57d4cd1358eec091e2d7f6d547807a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:d0:1e:1a:a4:78:33:a6:b2:29:07:0e:9b:
d4:25:2f:05:f2:d5:cb:0b:6d:d9:7b:95:66:39:d5:
a8:4c:9b:af:66:89:4d:1e:80:5a:31:1e:ba:32:c4:
08:b5:69:66:de:46:c8:38:54:86:50:73:57:93:4a:
45:d1:e5:f2:38:e0:9f:7f:fa:a3:36:be:34:72:e7:
b0:9e:13:8c:0e:27:34:66:a3:92:23:2f:a2:ea:c6:
97:a0:b8:79:91:92:95:03:bb:ec:f6:76:27:d1:28:
be:c9:01:0f:2b:92:77:c7:92:09:5e:3d:1c:38:07:
6c:06:04:05:08:37:a1:10:24:e9:d4:d8:9d:e8:94:
47:fb:85:d7:16:7b:32:e1:7d:62:5d:f8:42:76:5b:
79:25:ed:98:5c:9b:72:d7:f7:cc:67:22:05:6b:4f:
85:36:77:41:cf:6f:f4:9d:b8:15:6e:19:e2:02:8a:
8c:c1:b6:e1:de:87:46:c1:81:a8:de:8c:5c:ae:67:
04:fd:97:37:12:8b:99:bd:ec:1d:b6:4f:59:9c:18:
86:0c:cd:72:06:24:06:47:45:21:c5:71:80:80:dc:
03:33:3e:b2:0f:be:d2:b3:e4:cb:21:4b:f4:03:f3:
f0:27:99:80:28:cb:f9:a8:60:18:4a:35:61:7f:68:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:30:06:E5:7D:4C:D1:35:8E:EC:09:1E:2D:7F:6D:54:78:07:A5
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:38:7c:c8:a5:1d:60:d2:1e:d9:a4:5c:fd:d7:c4:71:b3:
1a:87:89:0b:08:8d:97:56:44:9d:59:83:6e:c4:d7:8b:e3:bc:
1f:a1:a7:83:2d:68:c5:bd:ea:9a:51:67:4b:70:ad:d1:b7:e1:
8f:e4:45:41:7b:59:a2:76:d3:c3:ce:b1:37:96:68:e6:a5:a6:
2a:0e:ff:85:75:2c:09:73:cd:34:7b:c3:16:05:10:91:53:f0:
62:ee:bf:cf:ed:92:e8:37:cc:45:69:a1:97:f1:ba:37:cc:d4:
31:00:2b:4c:51:52:67:8d:8f:62:30:83:db:fa:dd:db:bf:4b:
65:b8:8c:0e:f5:aa:b3:d5:3c:d5:22:e8:32:b9:63:50:da:57:
63:20:09:5f:7d:ad:52:66:0c:56:14:03:08:c1:5a:8f:27:5e:
1c:f2:1d:c5:06:c1:5e:b2:8c:b5:fd:de:b1:5e:97:a6:60:07:
2a:0e:44:5c:de:bb:4d:3e:ca:0a:1a:9c:b1:65:b0:7d:fe:41:
6f:81:69:bc:ed:09:f9:11:ef:4c:78:6c:f6:56:0a:a0:e6:cd:
b7:49:56:04:87:ae:27:04:2b:8f:2d:d1:5d:14:aa:77:d9:46:
d5:ae:01:6c:af:e6:ff:18:86:81:2a:c7:5c:6a:2a:ee:d9:64:
9e:72:b7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh0FgN6oM10ZffrZqZNfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl
ZGMwYTcwHhcNMjYwNzI4MjEwMDE4WhcNMjYwNzI5MjEwMDE4WjAzMTEwLwYDVQQD
EyhkZTU2MzAwNmU1N2Q0Y2QxMzU4ZWVjMDkxZTJkN2Y2ZDU0NzgwN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUPQHhqkeDOmsikHDpvUJS8F8tXL
C23Ze5VmOdWoTJuvZolNHoBaMR66MsQItWlm3kbIOFSGUHNXk0pF0eXyOOCff/qj
Nr40cuewnhOMDic0ZqOSIy+i6saXoLh5kZKVA7vs9nYn0Si+yQEPK5J3x5IJXj0c
OAdsBgQFCDehECTp1Nid6JRH+4XXFnsy4X1iXfhCdlt5Je2YXJty1/fMZyIFa0+F
NndBz2/0nbgVbhniAoqMwbbh3odGwYGo3oxcrmcE/Zc3EouZvewdtk9ZnBiGDM1y
BiQGR0UhxXGAgNwDMz6yD77Ss+TLIUv0A/PwJ5mAKMv5qGAYSjVhf2j9nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5WMAblfUzRNY7sCR4tf21UeAelMB8GA1UdIwQY
MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt
Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk
LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGY4fMil
HWDSHtmkXP3XxHGzGoeJCwiNl1ZEnVmDbsTXi+O8H6Gngy1oxb3qmlFnS3Ct0bfh
j+RFQXtZonbTw86xN5Zo5qWmKg7/hXUsCXPNNHvDFgUQkVPwYu6/z+2S6DfMRWmh
l/G6N8zUMQArTFFSZ42PYjCD2/rd279LZbiMDvWqs9U81SLoMrljUNpXYyAJX32t
UmYMVhQDCMFajydeHPIdxQbBXrKMtf3esV6XpmAHKg5EXN67TT7KChqcsWWwff5B
b4FpvO0J+RHvTHhs9lYKoObNt0lWBIeuJwQrjy3RXRSqd9lG1a4BbK/m/xiGgSrH
XGoq7tlknnK3oA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:47 2026 by rpki-client