Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: e3jaLbGANRnR6EwiqtqObBXFMKlZqwlFfik8Df00lWo=
Subject key identifier: BE:E1:15:9C:1C:11:0B:19:29:DD:1B:2D:6E:FF:9F:88:FF:45:A5:EF
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019FA9AC31D8087B85F27DECC9FF6E894217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 15FA
Signing time: Tue 28 Jul 2026 17:01:02 +0000
Manifest this update: Tue 28 Jul 2026 17:01:02 +0000
Manifest next update: Wed 29 Jul 2026 17:01:02 +0000
Files and hashes: 1: U_Ik4yWDgKwV_3mRudaDgw_VU74.roa (hash: zZQYFJPOwrtvq+JoYXvIFt4VHi+LGsjc5OhSx3qdjVk=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: FOjG/755jc68SFgYWiloON0qg21hZEdh9IS3S18I0Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:31:d8:08:7b:85:f2:7d:ec:c9:ff:6e:89:42:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Jul 28 17:01:02 2026 GMT
Not After : Jul 29 17:01:02 2026 GMT
Subject: CN=bee1159c1c110b1929dd1b2d6eff9f88ff45a5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:9f:e1:25:55:9d:29:97:29:ba:4b:38:2a:
6a:cc:c9:aa:04:48:cb:54:1b:e2:91:6b:55:b5:ac:
0d:d6:ee:d3:f3:72:9d:c3:51:13:df:da:18:42:c8:
f2:b5:27:df:fc:ee:7d:73:c4:9c:25:67:d5:d3:8c:
65:36:00:6a:49:45:81:e2:db:5e:d5:f3:da:bb:72:
99:62:3a:36:01:d6:dc:4b:ec:fb:9f:91:64:86:b5:
d5:ab:f3:ba:e3:30:62:fa:c1:e8:32:84:7f:de:b0:
7c:3c:18:5e:ec:a1:e6:74:b0:7e:5c:c6:ca:cc:3e:
aa:8c:6c:dc:3e:08:1e:8c:50:ea:ce:71:dc:16:62:
4f:8d:38:6a:d0:05:8b:1b:d1:c9:9a:2b:2e:0f:ea:
78:2e:b6:49:2f:41:5b:9a:d7:09:0c:20:0d:90:78:
d9:0a:1c:bc:17:68:66:a4:b7:fc:88:13:c6:49:16:
4d:03:6f:49:09:e4:e4:7f:06:1d:f9:71:39:29:54:
11:8d:e3:67:af:22:f2:70:a7:24:d2:28:f9:be:ad:
ab:5a:fa:15:f0:94:44:83:ae:fb:9a:34:8f:95:49:
c1:bf:2c:b4:10:a7:c0:76:0a:a0:19:7d:51:77:e8:
f8:35:03:bb:b7:d9:c7:e0:29:55:53:a5:e3:35:50:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:15:9C:1C:11:0B:19:29:DD:1B:2D:6E:FF:9F:88:FF:45:A5:EF
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:ce:b4:d9:90:c9:fd:25:3d:ab:86:25:bc:aa:a9:a8:62:
5d:c1:d5:82:b5:c4:50:35:7e:a4:98:5b:a7:1e:dc:1a:fb:d1:
9b:bd:50:8f:88:50:1e:a7:cd:03:ba:24:59:07:53:8c:20:86:
75:fa:56:9a:43:a4:f3:ff:60:38:f5:8c:47:fb:c6:d8:ce:8d:
ed:ba:97:02:85:23:f4:60:3d:15:eb:a7:8e:8c:1c:0a:f5:a6:
51:20:18:86:ab:bb:6e:ee:53:48:dc:9a:b6:09:70:fc:45:24:
d2:76:13:41:bf:b8:9c:d9:ca:cd:8c:e1:97:1f:06:f5:f3:bf:
66:a6:d1:81:01:ba:39:cf:72:51:25:97:52:f7:10:0c:9f:b6:
6b:57:09:5b:3f:2a:5e:38:f2:d9:59:59:cb:68:19:1e:5c:5e:
73:fe:22:b9:82:f2:a8:21:39:bd:43:4e:1c:a2:20:1c:e8:f1:
7a:cd:84:2c:e9:dd:e6:1a:0b:9b:a0:01:24:7a:05:f0:6a:ab:
5a:b3:a5:14:c8:45:5b:97:aa:79:d3:6c:cc:b9:86:25:3a:26:
db:f6:cc:fa:0b:ef:87:ab:83:5c:29:7f:c1:5f:c4:8c:0c:4c:
04:b3:9a:26:56:eb:8f:09:ee:77:f3:63:b1:c1:34:70:d0:01:
ab:96:57:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:04:33 2026 by rpki-client