Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: AKfGiMR5aRiYx8m1HDOtTZAG+Ax8mlBLuTQCxjpFpQs=
Subject key identifier: DC:13:16:BB:1B:9E:E5:2B:92:16:54:AA:73:5E:3F:2F:F0:8B:09:5F
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019FAB64109350E63F80AADE3CB1691FCEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 12E3
Signing time: Wed 29 Jul 2026 01:01:29 +0000
Manifest this update: Wed 29 Jul 2026 01:01:29 +0000
Manifest next update: Thu 30 Jul 2026 01:01:29 +0000
Files and hashes: 1: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: JOjB6gZG7cHohCJhlYorCujPdQtqAsuO7m7GTvp9qcw=)
2: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (hash: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c=)
3: qz5i0x4xJkfmTe6dozsZBG3TPU0.roa (hash: ooUbJjUT5M24S8q2RLHISS9XM6QlSckyAXcafyUdbOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:10:93:50:e6:3f:80:aa:de:3c:b1:69:1f:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Jul 29 01:01:29 2026 GMT
Not After : Jul 30 01:01:29 2026 GMT
Subject: CN=dc1316bb1b9ee52b921654aa735e3f2ff08b095f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:35:a7:4a:d4:79:1a:7c:cb:0f:3f:12:34:
19:d4:58:6f:f1:40:8c:5a:22:9f:2b:3d:9e:b5:54:
08:52:00:8f:fe:ae:19:4d:b5:93:16:7f:2e:8f:18:
f6:0e:05:68:1a:f8:0c:65:75:69:aa:a0:b9:97:4e:
6f:bb:01:af:fb:7a:2d:56:91:19:f9:d1:e5:d6:d9:
1f:c2:d3:71:76:9d:77:43:6d:b1:d9:47:3f:0b:1b:
e9:78:16:4e:d7:f6:e0:03:72:55:f1:36:d8:91:9d:
74:a9:e1:b0:7d:0a:90:ae:db:66:4b:aa:e5:67:d1:
01:c5:5e:d1:c0:4b:88:7a:87:34:77:f8:e5:05:4b:
05:19:05:51:4f:ac:4b:bb:77:17:22:95:e6:5c:87:
19:ba:2c:8c:f6:57:7f:1b:5e:a7:67:98:e1:b6:fa:
71:34:09:6e:4e:b8:7c:40:4e:08:02:57:96:1f:62:
c4:88:06:3f:32:59:20:8e:b4:bb:6b:5f:74:4b:e5:
cd:07:da:33:28:5a:8d:63:a6:ee:44:d4:61:64:89:
32:6c:ca:c3:dc:f3:cd:e3:f2:28:57:6c:fd:50:19:
5b:0c:ed:a5:9a:24:4b:5c:36:a7:1a:b0:d8:a8:5c:
97:05:08:58:46:cb:32:c1:a8:30:9b:1b:ce:6d:4e:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:13:16:BB:1B:9E:E5:2B:92:16:54:AA:73:5E:3F:2F:F0:8B:09:5F
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:a2:62:c2:b1:d3:9c:d8:72:39:c3:2f:6f:fe:f5:e4:77:
1d:33:55:c8:21:42:a9:5e:07:d8:3c:0f:a3:a0:6d:93:c0:3b:
5e:1b:af:c8:b3:49:77:bb:a8:4d:66:3a:fd:8a:35:d3:7f:eb:
33:05:f2:81:4b:46:74:1a:07:38:66:83:d7:1f:c5:ab:ab:c5:
bd:51:51:20:99:2d:a4:94:8f:06:a1:4e:68:09:0c:65:64:be:
38:74:fd:c0:2e:26:d7:3b:f9:7d:2c:43:54:12:d9:db:7b:98:
97:53:9e:79:e2:12:b0:ff:63:a7:47:d0:a3:e4:97:f3:29:a4:
d8:3a:db:4e:85:ea:1c:ff:00:d2:64:eb:58:7e:4e:25:cd:13:
28:23:5d:3a:c1:0d:92:cd:13:d6:b6:d5:84:1f:5f:b5:12:8b:
2d:1d:dd:92:31:07:b1:97:5e:74:1e:2e:c7:4f:64:b3:bb:76:
fc:71:11:34:c9:34:f9:b8:18:40:91:53:80:d6:f3:55:b4:11:
03:bb:0f:e3:9b:f6:2a:c4:a7:f8:f4:05:d2:71:f4:82:ec:cb:
ad:8c:8c:4c:ba:36:78:88:7e:1d:5f:ea:c0:6a:0d:29:e2:bd:
49:53:8c:50:62:9f:68:8c:10:3f:5c:83:ad:18:a3:90:cc:36:
d4:85:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:47 2026 by rpki-client