Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
File: JftDG4tBR2PuM_rfKY5GoHjjJDI.mft (raw, json)
Hash identifier: ENrCmLv3TqIeB7ydwpL9IwxpGgf3tTbak3sS25GtMnA=
Subject key identifier: 7E:E9:3F:B6:B9:D1:C2:4D:02:82:B7:F3:5A:C5:56:90:C3:B2:BE:EE
Authority key identifier: 25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
Certificate issuer: /CN=25fb431b8b414763ee33fadf298e46a078e32432
Certificate serial: 019FA89913CE8A7747729BCB55B79320BFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:31 +0000
Manifest this update: Tue 28 Jul 2026 12:00:31 +0000
Manifest next update: Wed 29 Jul 2026 12:00:31 +0000
Files and hashes: 1: 1-8zDLGIBUdttuzongUFSJyrBHyI.roa (hash: NA/2OMk9mJUUPDfOuqk/HqeM1Jw1QwBMqIBpT7majag=)
2: JftDG4tBR2PuM_rfKY5GoHjjJDI.crl (hash: mb1GGTKwJaWpCJl1eSAsII7RCg73maIPqvimxMLRZJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:13:ce:8a:77:47:72:9b:cb:55:b7:93:20:bf:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fb431b8b414763ee33fadf298e46a078e32432
Validity
Not Before: Jul 28 12:00:31 2026 GMT
Not After : Jul 29 12:00:31 2026 GMT
Subject: CN=7ee93fb6b9d1c24d0282b7f35ac55690c3b2beee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:fe:c8:cc:1a:6b:44:b9:95:48:43:69:65:
56:96:fa:ea:05:3c:b6:79:41:8b:7f:49:36:ab:18:
bd:61:f5:fb:fe:5d:34:e6:a3:6d:b0:68:cc:cc:b4:
fe:1e:ff:9d:47:dd:6a:82:5f:c1:74:d6:1b:a3:b6:
8a:fc:f2:75:f7:d7:e0:82:a7:03:fd:05:3a:8d:0e:
92:a6:71:97:74:6f:e9:1d:b6:42:9f:08:a5:3c:57:
6f:70:5b:96:b0:6f:83:47:10:3d:e8:6c:b8:0a:32:
ab:b7:5f:a4:78:b5:93:35:3d:86:f2:17:5d:32:08:
a8:ab:64:b0:46:9b:d4:6a:a8:54:de:b2:cb:48:8d:
c2:2d:f4:03:bb:26:bc:bb:f0:ca:1c:ed:dc:52:2c:
04:23:a5:91:33:08:b4:93:9e:64:d1:4c:25:c7:57:
fd:c1:2e:ae:21:d9:c4:a9:ef:6b:85:08:c9:46:a9:
23:64:8c:03:1e:2a:21:93:a9:cd:22:3e:06:03:80:
96:3d:ae:8c:bb:76:ef:aa:e2:ef:2d:ea:f6:aa:90:
d4:94:f7:dd:ff:f9:f5:28:53:7a:5e:c3:02:33:b0:
bc:9f:6a:16:9d:01:3e:a0:d4:a9:f9:71:b2:f8:d6:
1d:a7:e8:8d:5a:b8:75:99:9c:04:17:de:44:7f:d4:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E9:3F:B6:B9:D1:C2:4D:02:82:B7:F3:5A:C5:56:90:C3:B2:BE:EE
X509v3 Authority Key Identifier:
keyid:25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:31:4c:1b:0b:b9:ab:77:f6:56:d2:11:76:aa:d5:e1:f4:
1b:fc:43:d2:a9:58:94:fc:fb:f7:e8:ec:ad:2e:7c:a8:29:32:
0d:99:45:bb:44:ef:62:40:dd:81:25:0d:c8:3f:45:16:39:b4:
54:6e:ef:3e:19:69:9a:9c:b7:22:20:bc:0d:9b:94:b8:f5:1f:
0e:4b:28:40:8e:d0:c4:83:a1:91:0c:d8:9d:f1:37:74:53:29:
ac:66:52:84:c0:eb:ed:20:83:81:e8:ba:4d:99:38:75:ff:4f:
72:57:9d:8e:c3:ca:25:25:79:45:13:94:5f:49:54:69:bc:ee:
87:7c:11:f6:6d:99:19:4c:4f:48:33:c2:87:31:c4:cd:54:85:
5b:39:a9:8a:ec:79:b6:6b:18:52:27:9b:5d:f0:32:f4:4b:02:
3c:ca:8d:d4:93:f9:c5:ed:26:b0:9c:ff:91:ae:d9:22:ae:31:
8f:e3:9e:ec:b0:48:6e:01:78:11:0f:d6:f6:6d:3f:a8:9e:7f:
c5:c9:6c:20:eb:a4:f0:0f:43:16:41:8b:59:cc:00:e8:c2:d5:
71:c2:40:e5:cf:74:c7:6c:e9:8b:2d:cd:ad:e1:d9:0c:c0:6a:
32:a0:5e:8f:24:61:e8:6d:61:ca:d7:41:e9:93:6b:e5:2c:af:
69:fa:3c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:06 2026 by rpki-client