Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
File: jriXJ_n47Oad-b7EzBHKvO4WS8M.mft (raw, json)
Hash identifier: ViJLGjED70oaJer9yEvMK1IW5j6sm/vt8Dc3Xb/Tl4A=
Subject key identifier: AB:DA:56:2C:7F:25:76:54:6C:16:41:98:DC:06:E3:A1:5B:53:30:08
Authority key identifier: 8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
Certificate issuer: /CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Certificate serial: 019FAA87CCB982B1F4C134A237858CEF7B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:54 +0000
Manifest this update: Tue 28 Jul 2026 21:00:54 +0000
Manifest next update: Wed 29 Jul 2026 21:00:54 +0000
Files and hashes: 1: KE3GupBR2iGoEZP8QqZIbP9I-xE.roa (hash: Xuer3yKNUbClZo8SA2R+1gQjYc7yVthlpiw4kBX8aYY=)
2: Oj8K8XHrsDfS-eldRMcH11WQYyQ.roa (hash: ifdd2pi8EShwVYLbGy/N4X0jrvCVRCdXziJXaPvLXA4=)
3: jriXJ_n47Oad-b7EzBHKvO4WS8M.crl (hash: zVZ86cvqjXf0Lr5fxM9SYIOTS6TpSKB5PmzcqAzPvdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:cc:b9:82:b1:f4:c1:34:a2:37:85:8c:ef:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb89727f9f8ece69df9bec4cc11cabcee164bc3
Validity
Not Before: Jul 28 21:00:54 2026 GMT
Not After : Jul 29 21:00:54 2026 GMT
Subject: CN=abda562c7f2576546c164198dc06e3a15b533008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:08:a7:c2:4e:9a:2f:18:d6:78:28:c7:3d:
d9:d1:52:c4:17:f8:56:d9:24:8f:33:3a:99:f2:45:
eb:1a:41:f6:d5:7f:1b:f4:6d:71:2b:b2:b7:91:49:
ad:f0:36:64:21:3b:cc:9d:d5:a8:d9:e7:fc:29:b1:
d3:61:d5:f2:60:72:ad:8e:f1:4e:4f:91:26:ac:17:
ed:32:65:c1:4f:31:77:6c:39:c9:3b:b1:42:ac:45:
39:9d:8f:a8:e0:18:4d:4c:e1:3a:87:ec:c5:ea:9c:
78:38:02:18:e8:dc:ad:15:59:34:9c:cd:28:cc:72:
73:58:4f:77:ae:4b:70:ad:59:20:77:4b:06:ed:ad:
54:77:26:bc:d6:47:ef:66:60:7e:7a:20:29:21:61:
4a:47:c7:cb:dd:24:a9:1c:0a:ed:7c:db:c0:2b:86:
e1:9b:ee:cb:cb:db:e5:cf:e7:60:35:12:bc:31:4b:
75:87:b4:8c:c8:fa:c6:7e:ce:c1:ad:52:e2:3d:bd:
c8:bf:1c:e6:27:8b:44:18:70:bc:91:00:20:8c:05:
5e:3a:9e:e6:8c:22:b4:e6:62:70:ca:5f:b0:90:c5:
12:cb:2c:58:c6:cc:e6:c6:19:60:ef:dc:1a:62:1c:
0e:80:4b:8c:a6:85:f0:a4:a7:73:69:9d:7c:69:ec:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:56:2C:7F:25:76:54:6C:16:41:98:DC:06:E3:A1:5B:53:30:08
X509v3 Authority Key Identifier:
keyid:8E:B8:97:27:F9:F8:EC:E6:9D:F9:BE:C4:CC:11:CA:BC:EE:16:4B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jriXJ_n47Oad-b7EzBHKvO4WS8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/jriXJ_n47Oad-b7EzBHKvO4WS8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:22:fc:1c:e2:a7:64:59:42:e1:94:45:55:76:fe:11:02:cd:
08:73:5d:0c:0b:b9:19:9d:9c:09:f7:d0:b3:d6:ff:27:d5:f1:
f8:27:e1:ac:67:92:0d:92:61:17:00:31:65:08:48:ee:34:5c:
8b:c7:b8:90:f7:00:5e:7a:d2:5f:df:ff:ba:f1:4f:93:30:66:
b9:00:56:e6:78:75:9f:77:1d:22:00:f1:97:94:8b:55:23:f1:
92:c6:9c:89:5b:a7:6a:d4:43:30:f1:73:4f:0f:0f:f1:2c:ef:
f5:44:6c:a3:8e:b3:55:b3:3d:db:a6:81:93:d0:72:d1:cc:d0:
2e:27:02:6c:a6:0c:ea:50:44:54:19:a4:4a:4a:d2:12:4a:3e:
5f:09:54:1a:ff:a0:e8:ff:61:6d:8e:22:65:d0:0d:b8:a0:1e:
5a:c9:51:2e:5f:f6:29:a0:17:d5:00:27:f9:76:64:44:e0:8e:
28:bc:4c:a4:87:6b:a5:f2:6c:b6:43:21:b3:a7:b5:a6:31:5e:
b3:ad:5f:c8:d2:c4:a4:d7:be:98:f6:66:35:5c:be:f4:99:b5:
67:1e:18:31:29:7d:a7:43:7c:73:94:a9:00:69:de:4c:13:99:
7f:20:41:0e:40:9d:56:42:47:80:c6:42:a0:35:7f:20:aa:c6:
f3:13:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:54 2026 by rpki-client