
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: wlrVDM2r2fVtspOowL9vRA5QqJ3TlQaNhz6RvC4Jzbw=
Subject key identifier: 6D:D1:7E:E3:F5:DD:A0:29:3E:68:A4:DC:B1:DE:DC:25:C5:85:41:E1
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019FACE3F7A9A622A2BF332A953A4A1B9D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 182F
Signing time: Wed 29 Jul 2026 08:00:48 +0000
Manifest this update: Wed 29 Jul 2026 08:00:48 +0000
Manifest next update: Thu 30 Jul 2026 08:00:48 +0000
Files and hashes: 1: 6H-9AoNqSrBI_cHU_8jwycSpvuQ.roa (hash: KiQDrwuKHeqxHDHuFUTDtaD1ZiwMGGrMOy/IRx+eThE=)
2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: GL3H85DFWf8JyEmYLyMqf1aPxOe1p8hAzPywHS92rfk=)
3: _zWse9VeR2Ks8Tmud0pKUxt54Rs.roa (hash: nVGx0eRXA+P6cmYQPgwiiD4iTa2vIfOtyuiTU3+mtfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:f7:a9:a6:22:a2:bf:33:2a:95:3a:4a:1b:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jul 29 08:00:48 2026 GMT
Not After : Jul 30 08:00:48 2026 GMT
Subject: CN=6dd17ee3f5dda0293e68a4dcb1dedc25c58541e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:ba:5e:bf:31:3f:9b:5f:ed:1e:a8:60:13:
3e:63:0f:b6:4c:5f:99:26:42:5c:a3:ce:5f:70:b2:
f9:02:d0:ef:8e:37:cd:a2:c9:07:98:38:f8:36:42:
7c:05:51:14:44:e4:30:3d:67:11:bf:e9:4e:95:68:
98:43:2e:80:56:0c:e0:76:55:6a:77:9d:19:33:f1:
12:98:7f:c7:78:26:d9:11:23:7e:51:e0:4d:ba:a8:
f5:1a:29:e2:f7:84:28:51:d2:49:5e:b2:16:c8:46:
26:5d:89:2f:42:aa:9c:0c:78:61:61:fc:b0:04:b9:
47:35:f2:05:cb:be:b6:8a:40:bc:30:01:1a:3a:ef:
40:7c:3e:6d:c1:4a:de:27:b6:35:d3:cc:83:69:df:
e2:ed:0f:30:43:95:05:c9:6a:95:f8:bb:ac:df:2f:
22:a2:3b:b2:a2:96:7f:9e:e4:0e:54:31:18:e4:fc:
fc:c2:ef:e5:c8:08:07:10:8a:d6:e1:23:ed:21:d4:
fa:8c:6a:01:e5:96:bb:42:cc:c9:13:4f:99:de:51:
da:48:12:b5:90:05:d8:c6:29:91:ea:5d:04:64:10:
29:26:4b:24:2f:f0:00:38:90:2c:8a:94:e7:56:30:
11:0e:4b:70:7d:67:f4:fd:37:42:7d:a7:24:1e:9e:
47:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:7E:E3:F5:DD:A0:29:3E:68:A4:DC:B1:DE:DC:25:C5:85:41:E1
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:30:da:20:6a:a4:56:c5:bc:77:4c:60:bf:29:12:f1:19:4a:
44:24:ab:5a:2a:22:11:30:00:e8:d9:68:08:a8:6f:f4:52:66:
59:63:fe:41:d8:f9:87:f7:38:1c:db:fa:a0:fe:1e:b8:09:7c:
03:48:72:30:ba:67:75:bf:2e:a5:8d:26:34:1d:c7:f4:a8:0d:
56:c7:c6:7e:42:cc:02:3a:b1:6a:55:b0:ec:dc:30:a9:91:cc:
c2:14:a3:2f:4a:e5:da:0f:fd:20:69:17:5c:18:a1:42:bf:7b:
22:97:90:1f:db:6d:cb:21:56:f2:e7:f8:c1:f2:6b:4b:89:28:
14:8d:00:4b:fb:3e:60:a7:3f:73:7b:8b:e4:c5:7f:30:4c:c0:
c0:e7:88:d1:4b:83:d3:20:4d:b9:35:cd:70:f7:69:20:71:07:
0b:08:80:12:86:b3:22:d7:cd:c5:24:ce:05:b0:09:23:fb:6c:
49:34:1b:24:ce:f7:6b:d0:d4:1c:96:2f:3a:8d:14:fd:2f:3b:
28:04:7a:c7:bd:d1:a6:6f:7e:23:d1:9a:d1:9a:50:11:d8:7d:
e4:87:1b:d5:1a:15:87:d1:ac:8d:76:80:bf:a7:61:97:0f:90:
4e:8c:a1:58:cb:54:a9:8d:e7:80:ea:4f:f1:8c:82:17:4e:a1:
02:e7:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:46 2026 by rpki-client