Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
File: rJCSu8LKyuJHd09isP29xEqXTPI.mft (raw, json)
Hash identifier: yy5vuBOjyYH1CXZR0h7HGQfENaCTbbVoM0GkkYiHfmE=
Subject key identifier: 76:52:DD:C9:E7:CD:D2:16:33:A9:18:E5:71:C2:A5:2A:0F:BD:D6:50
Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Certificate serial: 019FAA1A7AFE101329AA229CDC3D1F72AF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
Manifest number: 14A3
Signing time: Tue 28 Jul 2026 19:01:29 +0000
Manifest this update: Tue 28 Jul 2026 19:01:29 +0000
Manifest next update: Wed 29 Jul 2026 19:01:29 +0000
Files and hashes: 1: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (hash: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY=)
2: 2pu1vkKFjna4Dm_cwSi5R4FE2g4.roa (hash: FM1p/9Yj7KBBXqnWBSoCV4VhHGxp22FujL3gdqNAgz0=)
3: Xvepx433VAtdgPI_baO5XGR3A8U.roa (hash: Hb64A6S05X/K5EFwUyHoMmk1FNOpGqOBloL7O8dOS+s=)
4: rJCSu8LKyuJHd09isP29xEqXTPI.crl (hash: QTqz8rr22ut3yRqGK82LfkTuT2Qe4THuwhxDcJoIfjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7a:fe:10:13:29:aa:22:9c:dc:3d:1f:72:af:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2
Validity
Not Before: Jul 28 19:01:29 2026 GMT
Not After : Jul 29 19:01:29 2026 GMT
Subject: CN=7652ddc9e7cdd21633a918e571c2a52a0fbdd650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:d5:ce:f2:29:96:8b:a2:5f:6b:03:eb:4e:
96:6d:0b:1a:a5:d7:74:9d:7c:d0:fb:0f:b9:b4:30:
11:54:d4:9a:9e:fc:52:c9:fa:e1:c5:d8:d5:1e:23:
c8:b9:e6:27:a5:b5:ed:23:2c:72:6c:b4:5e:52:09:
fc:93:d7:b5:14:e1:7d:fa:8f:e2:69:13:74:4e:7a:
a2:58:8b:9d:ba:54:0b:ff:42:c7:58:0f:02:c7:16:
10:62:3c:6d:1e:cf:69:5c:4b:a4:0a:fc:f8:f1:f7:
89:00:3d:1e:f4:11:06:7d:1b:aa:a3:e6:11:54:7d:
59:03:72:4f:47:be:5a:1e:e0:1c:ad:cb:e5:c6:5c:
ef:1d:79:c4:4d:03:c3:29:f4:be:31:6b:02:a4:69:
28:bf:2f:90:e9:35:ff:49:e6:3a:73:33:8f:e3:ed:
5a:86:cc:35:c2:f3:a9:cf:70:2c:54:ac:14:9b:69:
93:bb:47:30:df:9a:9b:40:82:3f:55:3b:69:28:0d:
eb:60:3d:e1:ec:84:54:0d:40:d2:08:84:20:a4:1d:
b4:55:1d:ce:64:9d:e5:bd:7e:a3:30:66:ba:05:47:
f5:41:e4:1b:83:b4:f3:75:03:74:4b:da:dd:9a:31:
b5:04:f4:72:f3:c6:4a:bc:49:5b:10:5e:81:50:c5:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:52:DD:C9:E7:CD:D2:16:33:A9:18:E5:71:C2:A5:2A:0F:BD:D6:50
X509v3 Authority Key Identifier:
keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:42:d3:6b:83:cd:42:9f:a1:a9:36:d1:69:72:e0:2d:3f:
aa:91:e4:3e:d4:b4:6c:79:ee:f0:53:3a:ab:48:81:c2:55:12:
ff:69:d5:37:ad:ba:4e:f3:69:5b:f5:0c:02:91:f5:28:00:f9:
18:4c:b7:27:24:cd:bd:0f:bf:0a:62:68:fa:45:2e:98:b1:73:
18:2f:83:82:c6:c3:b4:5a:1c:a1:44:1b:7f:1e:c3:de:e6:99:
5e:20:a0:31:be:56:c1:e9:a4:02:12:7b:f9:67:bd:7d:f0:f4:
79:78:39:5a:45:10:25:1a:e5:18:a2:f9:52:03:1e:b0:9d:7b:
39:d1:9b:b1:7d:80:8a:53:44:2d:5b:88:59:92:0f:89:32:5d:
91:e9:6d:28:cb:51:9e:79:61:78:37:f5:a9:71:c8:77:f5:19:
0b:c5:91:28:4a:07:57:af:9f:51:c4:88:d0:cc:b4:a0:42:7a:
4b:25:19:81:bc:83:d3:3b:d6:12:ee:5f:22:7e:04:49:18:3a:
77:5e:84:49:55:3c:ea:f8:29:da:04:0c:d0:0d:bd:13:58:49:
16:90:d4:13:36:c0:1a:05:2c:7d:da:26:c0:c0:0a:a7:08:c5:
d2:5e:74:29:ca:20:37:33:68:2d:44:29:88:e3:21:68:f8:86:
82:5e:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:35 2026 by rpki-client