Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: wWfar2gQog+JWEnZabtaCZ1KT5mK/N8vzIFlGUahWlY=
Subject key identifier: 3E:63:72:5D:08:7D:6D:19:9F:B0:67:10:A1:20:0D:EF:2C:1F:F1:07
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 019FAA509B4E544BCE75CB44FF3DD3947C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 19DE
Signing time: Tue 28 Jul 2026 20:00:36 +0000
Manifest this update: Tue 28 Jul 2026 20:00:36 +0000
Manifest next update: Wed 29 Jul 2026 20:00:36 +0000
Files and hashes: 1: 4ugY9PI_m6eOsD-Mx-tvHs43wxY.roa (hash: 5C991dyiRExbUxUE3jh7duuCkFVGkEv4KlbSfP+17rs=)
2: CvdJK5OT8GtA-xh7l9tdYncfRDc.roa (hash: 3p6vjzHMzoQ2xfV5P6Ow9qn/DbQ1xG3hoqj2RJOaMPk=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: Yui3teXt5q1CzWzMYjmqtuyQraSHNFBRnc94EvJ8FZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:9b:4e:54:4b:ce:75:cb:44:ff:3d:d3:94:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Jul 28 20:00:36 2026 GMT
Not After : Jul 29 20:00:36 2026 GMT
Subject: CN=3e63725d087d6d199fb06710a1200def2c1ff107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:74:84:0d:6a:a1:bf:0d:f8:03:e9:39:a5:
aa:75:a3:56:33:00:67:8a:1b:c1:0d:b2:01:96:0c:
07:0e:95:72:5b:b2:dd:95:67:f6:27:98:d5:16:aa:
b9:3a:d1:e4:50:86:51:79:b4:da:d3:a9:5e:d5:4f:
b1:7a:a3:67:af:2a:81:8b:cc:ef:97:55:e9:c0:48:
05:7c:b4:92:cb:f8:9b:5f:a0:b3:fd:46:df:98:39:
28:d3:e8:b8:3c:7f:79:e5:7e:93:7f:3e:08:16:48:
e0:8d:1b:08:a9:42:c2:7c:0e:39:9b:41:37:08:8a:
25:5c:63:a1:de:d5:b1:b0:a8:a1:e7:ba:ce:5f:3b:
c0:21:c8:1c:3e:23:41:50:47:89:0a:ac:b2:1f:47:
4f:96:94:e0:9f:26:fd:c5:7a:28:10:ff:f0:57:72:
7d:ed:5c:f0:26:43:46:30:80:ef:72:b9:18:d2:ad:
65:ed:53:a3:91:8a:2d:08:6c:69:d7:19:0a:41:78:
0c:7a:00:bc:84:e7:7f:07:7f:35:14:21:29:08:c6:
88:d4:dd:f3:d6:54:0f:4c:43:14:f5:e8:93:e6:5d:
ae:28:5b:f6:22:53:3a:ca:a7:ca:d5:b5:20:96:58:
be:42:7e:bb:e4:65:b2:1f:71:2a:ca:49:16:81:ad:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:72:5D:08:7D:6D:19:9F:B0:67:10:A1:20:0D:EF:2C:1F:F1:07
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:df:43:90:c6:31:ef:97:98:df:04:c0:15:2c:a7:f3:7b:18:
93:e9:a7:21:1a:30:9c:f5:7a:2f:1c:53:cb:52:41:aa:04:0e:
1e:65:29:57:9d:af:f9:e8:ab:3b:a4:18:1c:f1:e3:61:10:7f:
e7:03:86:14:49:f7:51:69:89:e2:bf:eb:00:fb:09:e6:d9:20:
07:84:f4:f1:1f:fc:e8:42:eb:c3:c6:ee:58:8b:2d:8f:95:c1:
2a:74:01:0e:bd:c0:97:24:f6:c0:af:35:2e:fb:d9:5a:af:0b:
0e:29:7b:57:c1:02:97:3b:6a:f6:1a:82:17:77:27:f2:d1:53:
2e:b5:7c:ee:2a:c4:e5:ed:34:92:20:36:6b:d1:0b:db:d7:81:
9c:9f:71:ac:6c:4f:0b:69:08:82:d1:42:2d:9a:ce:3c:25:b0:
65:a0:70:e7:66:07:c0:e9:31:f3:c2:af:a1:f3:7b:15:10:2a:
72:1d:24:c6:cc:ab:ca:85:62:6e:f6:79:fd:d3:1f:60:22:3b:
bf:f8:e8:2e:64:02:8f:4f:69:91:ca:bb:f3:e9:38:82:3d:5b:
62:f3:e4:7e:d2:02:f4:c1:33:5c:1c:51:74:51:c2:2e:e4:ea:
96:74:0f:8f:7d:48:7c:9f:96:e5:b8:62:b8:d8:cd:67:c1:c0:
7f:e9:7f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUJtOVEvOdctE/z3TlHxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOWZmZjhlOGZmZDhmOGU3ZDlhN2I2NmQxY2M3M2RjMzky
ODFlZjYwHhcNMjYwNzI4MjAwMDM2WhcNMjYwNzI5MjAwMDM2WjAzMTEwLwYDVQQD
EygzZTYzNzI1ZDA4N2Q2ZDE5OWZiMDY3MTBhMTIwMGRlZjJjMWZmMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l50hA1qob8N+APpOaWqdaNWMwBn
ihvBDbIBlgwHDpVyW7LdlWf2J5jVFqq5OtHkUIZRebTa06le1U+xeqNnryqBi8zv
l1XpwEgFfLSSy/ibX6Cz/UbfmDko0+i4PH955X6Tfz4IFkjgjRsIqULCfA45m0E3
CIolXGOh3tWxsKih57rOXzvAIcgcPiNBUEeJCqyyH0dPlpTgnyb9xXooEP/wV3J9
7VzwJkNGMIDvcrkY0q1l7VOjkYotCGxp1xkKQXgMegC8hOd/B381FCEpCMaI1N3z
1lQPTEMU9eiT5l2uKFv2IlM6yqfK1bUglli+Qn675GWyH3EqykkWga0RCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5jcl0IfW0Zn7BnEKEgDe8sH/EHMB8GA1UdIwQY
MBaAFLCf/46P/Y+OfZp7ZtHMc9w5KB72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTIt
ZTVhNzdmN2E3YWEyLzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZmJjN2UtMWY0Ny00ODdjLTgyOTItZTVhNzdmN2E3YWEy
LzEvc0pfX2pvXzlqNDU5bW50bTBjeHozRGtvSHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkd9DkMYx
75eY3wTAFSyn83sYk+mnIRownPV6LxxTy1JBqgQOHmUpV52v+eirO6QYHPHjYRB/
5wOGFEn3UWmJ4r/rAPsJ5tkgB4T08R/86ELrw8buWIstj5XBKnQBDr3AlyT2wK81
LvvZWq8LDil7V8EClztq9hqCF3cn8tFTLrV87irE5e00kiA2a9EL29eBnJ9xrGxP
C2kIgtFCLZrOPCWwZaBw52YHwOkx88KvofN7FRAqch0kxsyryoVibvZ5/dMfYCI7
v/joLmQCj09pkcq78+k4gj1bYvPkftIC9MEzXBxRdFHCLuTqlnQPj31IfJ+W5bhi
uNjNZ8HAf+l/Uw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:48:24 2026 by rpki-client