Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
File: J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft (raw, json)
Hash identifier: KBr/ytI3gEYL8f7e/GtjW5N6KVmahTKKpbMipaWnTus=
Subject key identifier: DC:66:24:7E:08:E9:25:A8:A6:61:7D:7A:AB:69:70:A1:A5:B1:72:01
Authority key identifier: 27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
Certificate issuer: /CN=2747c171786e883167d862be101f352135b923b4
Certificate serial: 019FA89A445CEB1E45F2C299872BD2E124B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
Manifest number: 0126
Signing time: Tue 28 Jul 2026 12:01:50 +0000
Manifest this update: Tue 28 Jul 2026 12:01:50 +0000
Manifest next update: Wed 29 Jul 2026 12:01:50 +0000
Files and hashes: 1: J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl (hash: ZvmnqcnftESIGcW7hgY5dJId2cUDRyuu4i2SS1m0eLU=)
2: O_GvhJ3AIu5IJuqpQ4uX03ArEEA.roa (hash: GC8qNwD4vLhbf1Ux7vQLpVBwBRtyOha518PQltW/PIg=)
3: hFukJ1Me328-WPvDybOfx7SqLNM.asa (hash: HFJhYuc006ijF+saTkFV1K0a6wbtr7JpRGOKmayJt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:44:5c:eb:1e:45:f2:c2:99:87:2b:d2:e1:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2747c171786e883167d862be101f352135b923b4
Validity
Not Before: Jul 28 12:01:50 2026 GMT
Not After : Jul 29 12:01:50 2026 GMT
Subject: CN=dc66247e08e925a8a6617d7aab6970a1a5b17201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:42:65:47:52:e9:8f:a2:f1:9c:11:0f:e7:
4f:c5:54:88:89:c8:56:25:0f:3a:70:66:57:5b:09:
a1:36:b3:24:2c:9f:01:01:c8:cc:56:c1:31:69:21:
93:34:f3:f1:c2:8e:50:0d:1b:0d:34:91:c8:9f:3d:
d5:6d:5f:33:b2:37:9b:a0:0a:2e:66:56:79:9f:d4:
53:56:82:9c:c6:b5:19:6d:2e:36:b6:17:ea:4f:5d:
1c:fa:d5:2e:1c:50:a9:ff:35:3c:b8:d8:18:85:54:
df:68:db:91:16:d9:df:ef:95:ab:23:4e:d4:fd:97:
d8:42:e7:52:ef:22:8d:d4:08:25:df:2b:ce:a2:24:
28:5e:ba:82:f3:e1:0b:21:33:d8:ac:7c:23:36:68:
58:b1:e9:f2:0f:51:b5:d1:ea:e7:d0:ab:7b:a7:d3:
8f:8a:b5:93:6d:3d:e1:ed:71:c7:11:be:f1:93:a0:
f2:e3:05:be:30:aa:7c:ee:5e:ce:6a:ff:c5:fb:d1:
da:36:33:d0:a5:1b:17:c0:53:9f:0a:74:f6:58:4e:
cc:72:9e:e4:df:6f:4f:64:7b:fc:26:0d:e3:57:f9:
b2:6e:0b:9f:9d:3e:19:49:91:58:1e:d6:77:54:70:
90:a1:af:77:0f:10:61:b8:55:44:9d:2e:f0:f7:7a:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:24:7E:08:E9:25:A8:A6:61:7D:7A:AB:69:70:A1:A5:B1:72:01
X509v3 Authority Key Identifier:
keyid:27:47:C1:71:78:6E:88:31:67:D8:62:BE:10:1F:35:21:35:B9:23:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0fBcXhuiDFn2GK-EB81ITW5I7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/df1a2e-2901-4f27-a2f1-2c18010fbfbf/1/J0fBcXhuiDFn2GK-EB81ITW5I7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:05:d8:b9:a4:c6:85:6a:1d:84:3b:3e:8a:1a:7d:9e:98:a6:
da:98:74:58:73:d4:7a:9d:e6:5a:e0:b7:0c:13:57:f6:b2:7c:
7b:b4:6c:fe:ea:73:b8:7e:f6:41:04:de:2a:f7:36:23:86:64:
97:05:a4:ce:9b:1a:cf:12:62:ca:53:7d:a4:b5:87:12:61:eb:
d3:20:3a:90:45:28:5a:47:50:00:af:c0:0c:5e:ce:8b:d5:c6:
9c:7c:23:45:73:7b:7d:4d:6c:bc:c0:71:37:f6:43:6f:20:3f:
24:80:3a:b1:7a:70:bb:41:66:52:29:ac:f7:7a:09:29:30:27:
65:80:dc:04:1a:45:81:80:ad:8b:9f:50:b4:9e:0d:68:b1:35:
e8:92:75:6c:4d:7f:ea:2d:96:98:20:14:3c:54:8b:28:39:4e:
6f:44:b1:52:ff:ec:e1:04:f6:cf:79:55:ef:7b:8d:8d:4c:ff:
3d:91:4d:43:0c:a5:40:61:7e:ec:dc:94:18:3b:82:5d:2e:b5:
10:98:74:a8:e8:aa:01:7b:87:ba:7e:1a:4f:30:c8:6b:10:ab:
1f:96:59:54:9b:c5:bb:82:1d:d5:14:34:66:c4:cb:9a:1a:a4:
cf:7d:ab:57:38:75:70:68:d7:ac:ec:25:64:a0:47:df:60:49:
80:6d:50:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omkRc6x5F8sKZhyvS4SSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDdjMTcxNzg2ZTg4MzE2N2Q4NjJiZTEwMWYzNTIxMzVi
OTIzYjQwHhcNMjYwNzI4MTIwMTUwWhcNMjYwNzI5MTIwMTUwWjAzMTEwLwYDVQQD
EyhkYzY2MjQ3ZTA4ZTkyNWE4YTY2MTdkN2FhYjY5NzBhMWE1YjE3MjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XVCZUdS6Y+i8ZwRD+dPxVSIichW
JQ86cGZXWwmhNrMkLJ8BAcjMVsExaSGTNPPxwo5QDRsNNJHInz3VbV8zsjeboAou
ZlZ5n9RTVoKcxrUZbS42thfqT10c+tUuHFCp/zU8uNgYhVTfaNuRFtnf75WrI07U
/ZfYQudS7yKN1Agl3yvOoiQoXrqC8+ELITPYrHwjNmhYsenyD1G10ern0Kt7p9OP
irWTbT3h7XHHEb7xk6Dy4wW+MKp87l7Oav/F+9HaNjPQpRsXwFOfCnT2WE7Mcp7k
329PZHv8Jg3jV/mybgufnT4ZSZFYHtZ3VHCQoa93DxBhuFVEnS7w93oC9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxmJH4I6SWopmF9eqtpcKGlsXIBMB8GA1UdIwQY
MBaAFCdHwXF4bogxZ9hivhAfNSE1uSO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZjFhMmUtMjkwMS00ZjI3LWEyZjEt
MmMxODAxMGZiZmJmLzEvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZjFhMmUtMjkwMS00ZjI3LWEyZjEtMmMxODAxMGZiZmJm
LzEvSjBmQmNYaHVpREZuMkdLLUVCODFJVFc1STdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQXYuaTG
hWodhDs+ihp9npim2ph0WHPUep3mWuC3DBNX9rJ8e7Rs/upzuH72QQTeKvc2I4Zk
lwWkzpsazxJiylN9pLWHEmHr0yA6kEUoWkdQAK/ADF7Oi9XGnHwjRXN7fU1svMBx
N/ZDbyA/JIA6sXpwu0FmUims93oJKTAnZYDcBBpFgYCti59QtJ4NaLE16JJ1bE1/
6i2WmCAUPFSLKDlOb0SxUv/s4QT2z3lV73uNjUz/PZFNQwylQGF+7NyUGDuCXS61
EJh0qOiqAXuHun4aTzDIaxCrH5ZZVJvFu4Id1RQ0ZsTLmhqkz32rVzh1cGjXrOwl
ZKBH32BJgG1Qvw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:10 2026 by rpki-client