Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File: JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier: u32CtAc3cDBItO5uSy1gL6auW5vV9G8givRfwNje5G4=
Subject key identifier: 1E:CA:04:E4:EB:89:0B:A1:04:0A:01:BC:79:DD:BD:B7:68:89:CF:4F
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer: /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial: 019FAC3F43392AC2E012789C8837ED6B2A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number: 1710
Signing time: Wed 29 Jul 2026 05:00:54 +0000
Manifest this update: Wed 29 Jul 2026 05:00:54 +0000
Manifest next update: Thu 30 Jul 2026 05:00:54 +0000
Files and hashes: 1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: eEgyGuPVrfWlLZFOTK9OEuLu3P/rUCN+pCyIGWY4QS4=)
2: gC8xECPXIz3izz_wPFR4--x3dfA.roa (hash: 8tJModKEf7OvBOeGVxRABAMXSwEYcpcHv0L6opRUwuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:43:39:2a:c2:e0:12:78:9c:88:37:ed:6b:2a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
Validity
Not Before: Jul 29 05:00:54 2026 GMT
Not After : Jul 30 05:00:54 2026 GMT
Subject: CN=1eca04e4eb890ba1040a01bc79ddbdb76889cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:96:6e:4a:a4:a8:ca:33:97:1f:6c:85:d5:
83:e0:86:90:9b:97:c6:57:f3:aa:ca:e4:57:64:da:
2b:f0:7e:bd:b9:71:4c:74:b5:4d:83:93:25:5e:31:
f9:32:8c:39:d7:47:c3:9a:33:f0:84:dd:41:20:24:
82:a3:dc:94:a8:2f:86:97:5b:5a:90:73:c4:7b:63:
10:4b:b5:05:69:b8:70:be:21:5d:e5:12:b2:1e:80:
2c:17:42:93:f2:f6:ba:50:a1:4e:7f:da:65:96:0e:
70:0f:bc:15:92:f7:34:6a:7b:fd:15:9c:95:88:64:
b5:77:bc:85:50:61:f0:41:19:01:96:82:22:86:49:
7b:de:61:41:a2:70:af:d9:b8:64:37:43:df:b1:ba:
09:de:09:8a:3b:39:72:f2:ee:e3:67:e4:e0:a9:5f:
53:b5:4a:e8:eb:a4:1a:a4:04:65:6c:aa:7b:63:ff:
0e:d4:4c:33:c3:2c:b4:d5:d0:d4:e3:35:96:0b:4c:
39:58:8f:97:53:a1:f6:30:1d:2d:2c:65:e4:8c:14:
0d:40:52:13:78:db:36:2a:b7:23:cb:d2:d2:9d:9a:
ae:ea:0f:c4:02:e7:9a:22:b0:8f:eb:c8:ef:cf:be:
36:9b:6b:60:84:6b:25:bf:f3:4d:c5:0a:7a:fb:00:
8f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:04:E4:EB:89:0B:A1:04:0A:01:BC:79:DD:BD:B7:68:89:CF:4F
X509v3 Authority Key Identifier:
keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d8:a0:61:17:fe:3b:36:84:51:db:af:e0:29:d1:06:57:e0:
99:ba:46:dd:a8:9d:8d:12:a7:c8:17:3e:56:0a:d7:6c:bc:9f:
85:c1:70:4e:42:dc:18:00:a6:ce:af:3c:f5:9a:f0:67:73:aa:
0a:f1:d4:e8:84:d5:d4:4c:af:62:86:e2:79:7b:d9:ed:e5:e0:
45:af:bb:fd:7b:33:a9:50:81:66:61:e3:cd:60:dc:7d:5c:e8:
0e:7d:92:2f:2f:b4:22:7d:8a:26:0f:b0:2f:54:28:7b:c7:5e:
39:f5:7f:a8:83:e0:1c:72:c1:57:e1:c6:f5:de:93:56:24:98:
84:0e:fe:b0:0c:59:45:28:fb:23:ff:b3:55:c0:b7:70:96:32:
80:17:cc:f6:34:3b:b0:d0:da:45:e5:26:11:af:03:58:1c:96:
23:3a:79:30:9d:1d:7a:3f:aa:1d:58:f2:c0:3b:fb:62:1b:92:
24:31:77:fe:37:80:28:94:d1:4f:db:34:43:e1:46:ec:b2:a7:
2e:36:ad:64:28:d3:8b:fd:fa:b8:8f:c8:06:2c:f3:a2:72:61:
d3:d7:3f:e7:bc:a8:6d:85:0d:d9:63:45:db:09:c4:4e:2f:ae:
14:ef:ac:69:cf:9b:1d:ec:a1:c8:a1:74:9a:02:fe:61:4e:67:
90:a4:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:24:52 2026 by rpki-client