Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: bOVHwknBvNuPYfmOApUH7JosRSiH87grhbVePqXUkt8=
Subject key identifier: CD:52:38:71:5F:07:E1:A6:38:6C:2A:E8:F2:F7:B1:93:C3:4E:5B:15
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 019FA7BD553AF56AE8B3360F037D2FFC97C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0DC6
Signing time: Tue 28 Jul 2026 08:00:30 +0000
Manifest this update: Tue 28 Jul 2026 08:00:30 +0000
Manifest next update: Wed 29 Jul 2026 08:00:30 +0000
Files and hashes: 1: 46dJ70ivY5CNHN3HEFGJKfLPS7Q.asa (hash: cjg8FehaVwYpVxS8eMe+m9njoOgOCXMZ/KMVF3PXYLk=)
2: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: Czm4YpxvOdhdpV41PbcaCTinXdCvOd03w8al1rllPLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:55:3a:f5:6a:e8:b3:36:0f:03:7d:2f:fc:97:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Jul 28 08:00:30 2026 GMT
Not After : Jul 29 08:00:30 2026 GMT
Subject: CN=cd5238715f07e1a6386c2ae8f2f7b193c34e5b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:e9:07:83:a4:1c:db:bf:bf:a0:48:96:8c:
92:be:05:6b:53:27:b8:e3:55:98:56:8f:7b:2e:5a:
d3:90:68:ec:f4:19:27:b8:2e:a4:99:d7:da:3e:15:
9b:61:b3:f0:02:64:25:8c:6c:dc:c4:8d:75:94:4f:
3a:bb:3f:c0:3d:5f:32:5d:df:ff:89:bd:86:06:01:
5d:71:e7:24:e8:ff:fb:d8:f4:cf:f0:68:e5:6d:4c:
35:a4:b7:18:72:42:8f:89:c1:08:98:5b:1d:6a:c8:
49:87:db:4b:98:30:33:ac:72:da:ee:fa:ba:e8:43:
7c:36:3f:02:92:14:18:4c:27:92:d3:fe:ac:c7:05:
f0:66:81:d3:25:57:0c:b6:4d:8c:9a:05:98:73:72:
54:f0:92:d2:e2:9b:1a:e2:5a:4d:cb:23:d8:6c:d4:
65:e6:68:40:5a:f1:a1:c7:cc:23:a7:16:31:ec:d9:
95:61:25:c7:c6:37:a3:d3:53:b1:24:c5:d8:a6:a0:
5a:53:95:8d:d5:c1:94:10:ec:eb:38:8e:6c:3b:20:
23:9b:b1:17:b9:28:ff:0c:58:2b:2a:db:63:2b:8a:
21:ed:33:ef:b4:5d:0f:50:8c:9d:89:76:df:bf:88:
68:16:43:73:a1:2e:b9:e2:42:cf:a3:3f:83:cc:9e:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:52:38:71:5F:07:E1:A6:38:6C:2A:E8:F2:F7:B1:93:C3:4E:5B:15
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a3:10:83:92:0b:c3:ec:96:9b:c2:05:7d:09:13:00:8a:c6:
aa:f1:d4:51:87:5b:61:5d:6d:a1:5c:27:ff:db:64:c7:d0:de:
33:2f:56:f6:76:26:79:7f:e8:19:54:ed:06:62:c1:c3:9a:69:
32:23:d6:04:7d:27:69:68:50:24:a3:93:2b:4c:80:94:1e:77:
05:79:e1:8a:47:d0:9b:72:f3:db:3f:82:57:8e:d6:84:72:21:
80:7f:94:06:9c:80:75:33:74:d7:0f:98:e1:5c:48:f2:5f:e3:
7d:51:bf:5b:3e:06:73:58:a5:90:0f:51:e0:2b:51:08:5c:47:
9c:5f:53:a5:bd:72:95:d1:65:c6:33:47:42:6b:f8:5a:cb:2b:
55:e6:98:45:95:95:cc:6d:44:41:ab:66:cb:32:49:5c:02:f3:
4d:a5:3b:bd:bd:ba:b2:0f:cd:db:6c:62:1e:86:ac:ef:04:f5:
4b:71:e3:31:87:22:5f:19:78:8b:ce:eb:9d:09:05:bf:50:b6:
77:d4:23:87:7d:00:92:7b:51:db:55:c0:fb:88:ec:f9:d5:d6:
39:a6:10:00:cf:f8:18:4f:a8:43:4d:b7:dd:cb:bd:52:66:b0:
76:f3:8e:9d:9c:43:1d:cc:50:dd:9b:66:aa:d7:f5:5d:e8:b6:
3d:0c:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:07:11 2026 by rpki-client